Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json)
Hash identifier: /8oiq7qXW+HQyIST9XPj+W+bqR8Nnf2KJ+pyqtfOXr4=
Subject key identifier: E7:9D:EA:4E:66:C3:75:32:85:C4:41:72:DA:4F:C0:11:56:67:A5:F6
Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF
Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
Manifest number: 01B5
Signing time: Sat 29 Mar 2025 02:42:16 +0000
Manifest this update: Sat 29 Mar 2025 02:42:16 +0000
Manifest next update: Sat 05 Apr 2025 02:42:16 +0000
Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: vGnStHJV97SjBpCM/27XUHYSfzfkduVDa0/sgw5xogM=)
2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CFF5
Validity
Not Before: Mar 29 02:42:16 2025 GMT
Not After : Apr 5 02:42:16 2025 GMT
Subject: CN=67e75e08-b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:1c:6f:49:44:27:48:25:85:c8:1b:db:d7:
67:16:c1:1c:0b:0f:7a:c7:6b:44:bf:fb:76:d5:ab:
8d:98:8c:b6:92:7c:80:8f:c6:98:04:1c:c6:53:bc:
0c:be:b8:05:bc:6a:43:36:7d:55:76:16:a3:97:43:
52:12:7b:7a:83:40:19:b6:49:b0:dd:cd:a9:52:79:
70:52:ef:84:a7:ff:27:ca:bb:ef:3b:83:8f:fb:8e:
a8:02:92:c5:1f:5f:7a:21:14:3c:11:de:27:90:32:
31:0a:66:20:6c:81:ac:cd:43:70:77:1e:11:e6:89:
26:b6:e8:4f:09:fd:86:f6:ea:e3:13:ee:3b:6f:08:
3f:1e:93:2e:b5:b6:48:0e:4b:ae:17:8f:0d:70:bd:
16:7f:01:f9:f4:c6:60:18:e8:ca:1f:bf:9e:92:70:
42:ee:ba:d5:b6:d4:32:a5:58:33:30:07:a8:a2:84:
94:0b:c4:33:55:b2:04:d4:04:78:9a:e8:17:06:9a:
22:51:2d:41:c7:72:ab:5e:41:3f:0e:78:ba:9b:7c:
2a:8b:3f:52:92:cc:8a:fa:8e:e0:fb:4a:3a:b1:96:
b3:1c:7a:ac:b2:e0:21:af:63:95:e1:db:1a:34:98:
ad:dc:70:19:f3:ca:94:d7:70:77:9e:03:29:df:2c:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:EA:4E:66:C3:75:32:85:C4:41:72:DA:4F:C0:11:56:67:A5:F6
X509v3 Authority Key Identifier:
keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6b:e0:9e:c8:5b:a6:f0:bb:fb:93:6d:f5:cf:e4:57:04:28:
9d:e2:bd:dd:61:1e:27:8b:44:a2:69:a4:bb:d9:ff:99:43:fb:
39:3d:1f:9f:c1:e9:d5:bc:8e:02:b7:68:95:d5:cf:39:04:ec:
4e:9e:7e:96:56:29:26:e2:8b:8b:71:89:75:fb:dd:bd:91:98:
23:4b:42:89:47:ea:c2:06:98:95:d6:0f:5f:5a:9a:99:9d:63:
d0:cd:92:f8:71:b8:3c:11:1a:51:cf:d1:40:50:93:46:08:df:
b2:d2:7d:a7:35:73:45:a4:41:7d:e8:be:d5:cc:3f:99:63:e7:
90:5f:01:18:d4:e2:c4:6c:e9:a9:5a:f0:94:46:41:a2:04:70:
e3:4a:33:a8:b7:be:01:6b:bb:ab:10:34:e6:35:73:b1:80:e9:
56:59:64:92:33:5f:6a:ec:10:1a:56:17:1d:40:d1:85:7b:63:
e2:89:4c:54:dc:47:db:c6:bb:10:7d:05:8f:21:14:11:67:87:
68:bb:78:fe:7d:b1:58:46:c0:16:79:bd:84:26:f5:ce:39:fa:
3c:be:b3:01:5d:e0:5b:96:84:b2:84:2d:9a:f3:5b:9b:4a:f9:
a6:56:bf:bb:70:10:4d:10:a1:27:31:b5:3f:5c:f1:a4:af:26:
cd:46:6d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:14:37 2025 by rpki-client