Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft
File: jIBwVSUDCAuWcjTt7IDAHT25bPY.mft (raw, json)
Hash identifier: EvFgyz6mctM76oZ3g1FrKzW1oNPAkB6QLcwEZVCVJ2Q=
Subject key identifier: 9B:A4:A3:72:7F:92:AD:30:F1:B1:C5:2E:A4:39:3E:0D:3B:8A:57:7B
Authority key identifier: 8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6
Certificate issuer: /CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6
Certificate serial: 0503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft
Manifest number: 04FF
Signing time: Fri 21 Mar 2025 05:22:39 +0000
Manifest this update: Fri 21 Mar 2025 05:22:38 +0000
Manifest next update: Fri 28 Mar 2025 05:22:38 +0000
Files and hashes: 1: jIBwVSUDCAuWcjTt7IDAHT25bPY.crl (hash: uAB2ck0hISUyIzKSLPtSjxIvD7UxRkoFxNWj88+lWUk=)
2: DB5B36C600B511EC9A436071C4F9AE02.roa (hash: cKTNYx51Z3gLmWzIe/5RGmnrk/eCYtcRCpfvC99JSSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59C1
Validity
Not Before: Mar 21 05:22:38 2025 GMT
Not After : Mar 28 05:22:38 2025 GMT
Subject: CN=67dcf79e-1d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:6d:0f:75:21:29:3c:b6:6f:75:36:5c:bb:
0c:09:4c:dd:bd:38:cb:ae:fb:09:29:a2:5c:5c:6f:
36:85:79:86:db:39:6d:57:76:cb:1a:12:a2:98:a4:
64:2e:a0:ef:4a:d4:4d:01:83:6f:94:eb:4b:bd:d1:
e3:f8:06:be:1e:76:95:ff:32:7a:97:15:c1:37:85:
ca:60:6c:b2:e6:f7:76:88:0c:8a:1b:c7:57:cb:8a:
1f:ec:ca:7f:38:ad:d1:c2:ef:c4:0c:72:62:c8:75:
fe:06:a7:2d:b2:15:34:b3:be:58:80:00:7c:aa:1c:
53:f8:c7:78:37:de:38:f5:3f:70:d7:23:e5:be:f2:
89:e4:db:d6:5a:61:b1:1c:cc:85:bf:ee:63:53:1c:
3f:2f:35:5d:c7:7a:ef:37:73:20:57:ac:6d:5d:fd:
02:f9:8b:cf:f5:18:1e:8f:95:64:0d:44:d6:bb:75:
df:3a:74:f4:6d:49:ae:70:39:8e:3d:9d:b7:a0:d0:
18:20:89:e6:79:ef:a8:50:fe:cc:bc:17:4d:76:13:
43:e7:62:ef:50:80:af:d0:e5:51:b9:e3:00:ae:a3:
7a:fb:fd:78:58:3a:d2:2f:c8:f4:8e:c7:bd:79:55:
5f:49:6b:3d:dc:a5:81:ee:bd:d1:7b:f0:30:58:f6:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:A3:72:7F:92:AD:30:F1:B1:C5:2E:A4:39:3E:0D:3B:8A:57:7B
X509v3 Authority Key Identifier:
keyid:8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0d:5a:ad:d0:e2:0f:bd:b2:e9:ca:f1:f9:b3:3d:81:6c:af:
92:87:3c:90:54:ac:7b:28:0b:98:67:08:bd:4e:fd:e8:a9:d7:
05:f4:1e:cd:c4:22:cb:d4:17:54:55:26:ee:92:ba:ea:26:77:
e8:c8:11:5c:aa:dc:0f:d9:0d:b9:54:1d:de:b7:dc:0e:06:f0:
f7:2e:5e:a8:17:26:b7:a0:f8:dc:1d:81:75:a7:2e:f5:e5:fe:
d8:cd:cf:a2:40:1f:bd:fd:2f:ee:95:50:21:31:10:a8:ec:0e:
18:c6:53:07:21:7f:83:7a:96:d9:a4:34:d4:32:35:fc:0b:64:
4b:5b:e2:f8:54:cf:3c:52:37:81:0d:cb:52:a1:ef:46:79:75:
93:68:10:91:b8:3b:92:46:6c:71:39:12:a4:53:c6:e1:50:93:
61:92:a2:48:a5:fa:4a:07:57:4a:7e:fe:ba:28:c7:f4:50:1a:
f9:ee:e6:bb:02:de:e5:44:eb:c6:8d:c1:64:f4:f3:b6:8e:f0:
37:ea:62:1a:1f:9b:f6:79:19:7c:94:1b:59:88:33:b0:d0:46:
98:6f:a5:bb:c4:1a:21:84:5b:2d:97:55:a4:d1:b6:08:8b:d4:
a8:50:11:ad:c3:9e:71:ca:00:1c:9d:ef:aa:d1:8e:9e:21:7a:
82:63:af:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:52:43 2025 by rpki-client