Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json)
Hash identifier: XfiQORC+XoX93xC4mo7LNqC4dt7fX1vUGuOCbk7qBgg=
Subject key identifier: 89:EA:DF:06:2D:C2:33:35:E3:93:34:34:96:52:CB:A9:3C:B3:8B:03
Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
Manifest number: 52
Signing time: Sat 29 Mar 2025 06:33:48 +0000
Manifest this update: Sat 29 Mar 2025 06:33:48 +0000
Manifest next update: Sat 05 Apr 2025 06:33:48 +0000
Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: TfgHaCNJ45Vbu4bATeRxjUHyUFPdKly+hdnflYJvEsM=)
2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF4CC
Validity
Not Before: Mar 29 06:33:48 2025 GMT
Not After : Apr 5 06:33:48 2025 GMT
Subject: CN=67e7944c-c7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:fd:44:c0:50:1c:99:d7:ff:48:76:75:1d:
d0:e0:30:23:be:84:ce:f1:b6:2e:e8:58:6c:e0:eb:
ee:57:5f:5e:56:8d:fe:66:2a:41:82:3a:40:8e:25:
a6:66:2d:47:12:0a:0d:a4:dd:ff:a1:08:5c:d2:fd:
d1:95:84:e9:71:ce:ea:b2:6b:da:7b:dc:89:5f:e7:
24:4f:ee:52:c4:61:19:97:08:48:56:a5:49:9a:cd:
9f:45:29:9b:35:ee:2d:fe:b9:df:41:32:cc:00:58:
da:21:d2:16:83:03:94:97:68:bc:3a:34:db:88:fb:
d0:f1:02:ba:40:98:32:92:b6:ee:ba:97:3b:62:55:
b2:b7:96:b3:96:7c:c7:13:15:19:2f:c0:ba:b9:1f:
d8:f2:60:46:bb:ea:38:13:c6:ba:42:11:01:5c:04:
c1:53:e8:12:91:1f:e7:73:a9:32:74:8f:89:df:70:
b6:75:ce:64:5c:1b:b0:d8:4b:d3:d2:2e:93:a9:3c:
a5:0d:ea:e4:cf:81:e9:51:72:39:46:02:94:a7:4e:
01:6a:45:1f:b5:2a:3a:18:4b:44:d8:c3:99:bb:4f:
0b:9c:50:a5:02:f4:30:ff:a4:7c:50:96:43:95:7f:
62:1d:de:d1:6f:90:bd:23:26:c8:af:f6:07:d0:13:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:DF:06:2D:C2:33:35:E3:93:34:34:96:52:CB:A9:3C:B3:8B:03
X509v3 Authority Key Identifier:
keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:af:17:96:58:45:56:a1:24:47:b7:f2:33:17:f7:43:eb:
45:7f:21:20:15:48:3e:f1:ba:23:8d:06:75:c1:cc:3f:9e:45:
4b:8e:25:b8:c3:0f:80:9e:43:a1:c0:18:cc:7f:90:dd:af:6f:
bc:09:5b:9a:81:e7:d6:f1:f4:4b:bd:4a:38:b6:90:b3:bb:36:
37:26:ab:5b:e1:5b:82:ec:7f:86:b0:f6:60:96:84:b8:d4:0f:
77:e6:a3:2b:10:8b:c4:33:e0:bf:9f:8e:f5:6f:ef:26:8d:9e:
1f:84:f6:57:4e:c9:07:97:45:db:8a:14:c1:cc:3f:45:03:bf:
3b:fe:21:0a:66:b4:6d:50:c9:bd:e5:b1:f3:34:41:17:e8:96:
78:a0:c1:9f:14:bb:84:f1:f9:c7:1e:f8:ce:c1:f7:ea:fc:4d:
c6:e4:d5:23:11:a7:24:9e:7a:b1:64:49:88:3c:b9:1e:60:ad:
9a:18:86:88:b9:1b:4f:31:fc:41:cb:19:6a:e9:98:75:3b:49:
9e:88:05:c3:3e:f7:43:eb:51:17:e3:0e:43:73:ba:5d:c9:d1:
cb:7c:70:a5:80:45:25:aa:b7:88:d8:5b:09:6d:e8:64:b6:49:
61:77:df:18:c5:72:38:f9:ec:5a:d0:8e:0e:61:9f:30:a2:d9:
78:5b:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:39:48 2025 by rpki-client