Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
File: 9JSW-V35WIgb9LfpcuUbbzylnfo.mft (raw, json)
Hash identifier: j5hPcnRo6AbLTzwa/8OJfSzzc054aEURas7Qj3pRsXI=
Subject key identifier: 1A:06:A2:B4:EE:0B:04:F5:5B:72:30:4F:C7:86:02:DF:BF:56:68:12
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
Manifest number: 0D
Signing time: Sat 29 Mar 2025 07:30:27 +0000
Manifest this update: Sat 29 Mar 2025 07:30:26 +0000
Manifest next update: Sat 05 Apr 2025 07:30:26 +0000
Files and hashes: 1: 9JSW-V35WIgb9LfpcuUbbzylnfo.crl (hash: JFIFrfnTYBtyeoyMeX9o8+xd+o9rjuH1wXbjvHgnJY8=)
2: 25C80478053A11F08A0D6F31C4F9AE02.roa (hash: PQY0mTJA0slWwObUdYpstelwiTL+prFfmuh+/qU35kg=)
3: E11B4E9E051F11F0AD77753FC4F9AE02.roa (hash: tN7XrcdoarGJoE1RdPj/CCm6dWvl1EGT3dxhZCMygsY=)
4: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (hash: ri7YInMAbSmSsjfWYal4W711k38R/upA65HcOLcK83k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84
Validity
Not Before: Mar 29 07:30:26 2025 GMT
Not After : Apr 5 07:30:26 2025 GMT
Subject: CN=67e7a193-f416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:72:1e:b0:0f:ea:8c:c1:5c:1e:18:ec:34:
0f:ba:68:cc:f0:da:b2:f7:3a:f8:24:33:49:5b:6b:
6a:55:bf:32:ea:af:83:08:15:7f:a4:43:7a:16:16:
79:f7:f1:93:76:12:67:70:02:5e:96:42:6d:c8:0b:
6b:8f:c0:98:f8:6d:57:42:2c:ec:d3:84:31:12:b9:
91:6f:e8:e7:c2:b6:64:0f:2e:e6:15:52:96:5b:55:
8d:89:27:b6:7d:76:0b:1d:de:48:5e:a4:3d:b3:07:
1e:c0:5f:79:9b:e9:e9:49:16:12:09:48:3a:48:2e:
27:a9:26:a7:44:0d:cf:d9:fb:ad:8e:c2:3c:41:ee:
0f:93:d3:8d:b7:89:0e:38:06:f4:b1:8d:98:5d:76:
a0:8a:51:2e:d8:ca:31:ce:8b:f7:06:a5:28:69:4d:
55:c5:31:2d:c6:f6:81:63:d7:67:b2:90:0f:6a:7b:
db:2c:8c:4b:dc:73:18:2b:9d:71:59:83:32:8b:8e:
c4:87:21:36:5b:14:f3:ad:5a:84:6a:74:b2:1f:06:
5a:dd:13:62:22:a1:6b:de:26:96:32:96:2c:18:f7:
c1:36:56:53:4a:fe:14:1d:f8:e2:de:c7:c2:1a:a9:
70:e9:8e:2c:9b:8f:ad:e2:af:51:72:d2:59:24:d9:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:A2:B4:EE:0B:04:F5:5B:72:30:4F:C7:86:02:DF:BF:56:68:12
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1f:da:43:94:15:9c:02:0e:d9:82:08:47:59:4b:a4:6c:12:
c9:b1:93:26:b9:03:2d:64:e6:0a:50:7c:45:8e:14:de:fc:b6:
d8:b4:b7:c1:b5:0f:55:47:0d:d1:16:58:cf:49:af:ad:62:38:
f1:23:0c:4b:5c:0e:da:ab:db:8e:99:3d:31:05:61:87:88:6f:
a8:4a:2b:1a:e5:7a:a8:67:7c:6a:71:60:c0:d9:71:cd:02:ba:
52:8e:f2:28:50:14:0d:76:cb:75:27:4d:5a:64:c7:3a:31:2f:
42:e1:65:68:7f:43:1f:ec:15:33:dc:7d:c6:2d:a9:f4:e4:b6:
f2:0b:84:cf:4c:06:f5:58:c6:4b:e9:04:81:a3:3f:ac:06:8e:
8d:f2:fa:9c:ec:60:4c:5e:ca:bc:3c:9f:13:6f:f2:47:ec:1e:
67:47:b7:a2:fc:f2:0a:59:e0:9b:78:3d:3b:63:5e:54:74:04:
2e:5d:19:e7:af:f3:59:fe:a6:19:0d:7d:1b:74:d2:92:75:0a:
af:61:54:ed:e3:ee:6f:a4:1e:6c:8b:9b:ed:34:ed:d6:88:73:
ba:68:8c:2f:64:d1:fd:08:96:16:e0:39:09:4c:d6:97:86:27:
d6:20:dc:66:8e:6a:d8:19:88:2d:bb:04:e7:c2:fd:6f:28:75:
c6:7f:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:02 2025 by rpki-client