Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
File: JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json)
Hash identifier: 6QCman6fi4G+NIvcullCVaiT4CsZE/uMB/EUTDJHqUI=
Subject key identifier: 63:12:99:CE:BA:66:D1:9E:9D:10:C7:4F:45:E1:DB:D9:76:21:D1:ED
Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA
Certificate serial: 161B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
Manifest number: 160B
Signing time: Fri 28 Mar 2025 16:50:43 +0000
Manifest this update: Fri 28 Mar 2025 16:50:42 +0000
Manifest next update: Fri 04 Apr 2025 16:50:42 +0000
Files and hashes: 1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: imbJYf515IXZYy+lx4qC5CciT2jGjF12A0yUvPJeqS0=)
2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: V1SwqzHI+ZNQe6jN+twymLot2bdeSiq+QMKz3KdM7RM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5659 (0x161b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDE68
Validity
Not Before: Mar 28 16:50:42 2025 GMT
Not After : Apr 4 16:50:42 2025 GMT
Subject: CN=67e6d362-21ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:de:04:ad:1e:9a:0c:6e:6d:0f:de:8c:f4:
af:7d:9d:c4:4b:29:11:fa:d7:60:6d:e1:a8:bd:f4:
8f:11:fa:5a:8a:3e:bf:cc:7d:ae:0a:53:93:84:90:
10:a4:b2:51:21:7b:3a:05:49:5f:46:d4:a0:e6:f6:
0c:77:09:a1:3f:fa:39:e0:22:d2:72:ad:73:61:10:
ec:89:0c:91:5b:21:2d:7d:89:00:3d:f9:a0:4b:51:
29:96:f1:59:4c:7c:21:43:ad:2b:2d:47:c3:cd:90:
6d:be:6c:02:2d:96:e2:9c:6d:33:0d:c4:6a:b1:17:
68:ee:a5:7f:f6:9f:b5:e0:94:66:b9:da:c7:70:0d:
fc:bd:39:a8:50:fb:52:79:cf:98:ac:c2:07:c3:57:
ee:c4:15:ff:fb:6c:36:eb:d5:01:71:42:94:a2:16:
4a:f0:24:09:e0:6c:72:07:8e:39:64:60:be:b6:f2:
fb:ed:05:31:06:fe:4b:b3:ca:30:22:9b:66:30:4f:
05:89:d6:a7:69:48:66:56:4f:f7:30:60:9a:e2:e3:
c8:0f:b4:ef:2d:68:75:7a:7a:62:ed:92:51:d2:8d:
47:5d:fc:9e:a8:09:44:85:96:20:88:b5:34:9c:a4:
68:e6:8d:de:03:55:ce:b5:82:40:e2:1d:b3:56:c7:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:12:99:CE:BA:66:D1:9E:9D:10:C7:4F:45:E1:DB:D9:76:21:D1:ED
X509v3 Authority Key Identifier:
keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:97:f7:0d:c2:28:f2:0b:a0:ea:9b:7b:02:6e:ad:13:f3:64:
66:47:96:f1:5d:59:d6:53:91:e3:74:8e:57:1b:ae:8c:b1:88:
19:45:1b:9a:56:cf:5a:27:e7:d8:ee:13:df:d1:43:13:dd:a5:
73:d5:a6:ab:aa:50:68:55:74:cd:e3:a1:b7:7e:6f:dc:93:48:
cf:ee:cb:7b:3e:f7:09:e8:54:7a:5b:e1:da:da:c7:27:59:f7:
22:fd:dc:21:dd:ce:0f:c3:9a:63:dd:ee:fa:a0:f9:e3:34:c4:
c0:0b:06:63:da:c8:1a:92:86:34:45:66:f9:53:66:02:0d:11:
18:0d:c6:bf:c9:1e:d5:9b:f3:33:f8:b5:6d:9e:53:36:36:e0:
89:ea:d4:6f:fa:7f:c4:f2:fe:4f:26:62:81:f2:83:fb:c3:c9:
4f:9a:70:4c:f7:9c:c9:72:fe:e0:fe:68:ce:88:0a:50:0f:d9:
6d:ee:b6:87:32:7e:1d:9e:6e:6a:18:78:26:a3:f4:4e:36:5b:
ec:93:de:72:92:46:4b:02:e4:1a:c8:82:b8:ba:8d:cd:ae:21:
63:a6:44:41:44:ed:c3:60:e0:7c:9b:95:bf:08:f7:c2:e6:77:
b1:c6:69:5d:c7:96:a2:55:1f:fd:3b:bb:9d:b9:87:17:32:8d:
61:9c:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:53:23 2025 by rpki-client