Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json)
Hash identifier: 6MVBZ9v4a3FPA4gTeqRGvQSWkpyMoHuH5lZa6OrgD0s=
Subject key identifier: E0:28:83:DC:7E:EE:6C:67:A7:AF:3A:E1:3E:69:2A:F3:19:80:CB:53
Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
Manifest number: F3
Signing time: Sat 29 Mar 2025 04:41:26 +0000
Manifest this update: Sat 29 Mar 2025 04:41:26 +0000
Manifest next update: Sat 05 Apr 2025 04:41:26 +0000
Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: pvxY+Twyjgp+0ZSm851y71Jcusn2AOFX9a05W56k3eA=)
2: FB4C89109B6011EEBD830E11C4F9AE02.roa (hash: teSRVaTF4W4u9tuY2dm6GHiFkS/SQ9tfcE5r3IVfl9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C54A1
Validity
Not Before: Mar 29 04:41:26 2025 GMT
Not After : Apr 5 04:41:26 2025 GMT
Subject: CN=67e779f6-c438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:af:25:a8:02:54:49:84:2d:7b:31:96:e2:
b0:d2:0a:79:22:8c:7b:36:96:40:25:b8:e4:6b:b2:
0a:21:c3:da:ee:b3:a4:32:9e:ac:45:aa:f5:dc:88:
b3:4f:e2:6f:88:7a:2d:3f:e9:fd:33:5f:29:c1:90:
10:2b:f5:1f:e0:c7:2d:0a:60:d8:e0:5e:64:94:7e:
36:d4:c7:1e:bf:ab:9b:5a:17:91:bb:c5:d9:bb:9a:
6a:91:c4:c0:df:9a:4d:77:96:a5:50:4f:10:b2:e6:
75:2d:07:4a:fc:0d:4d:bf:4b:1b:ea:38:16:49:1f:
12:a3:ff:4a:71:fe:59:5b:bf:4a:bb:03:ed:63:d4:
c9:44:c5:66:22:e3:be:35:87:af:ff:c0:40:03:29:
40:53:6b:6b:02:0e:a7:e1:d1:66:af:f2:b9:32:9e:
80:43:8b:08:b9:25:bb:3c:9a:57:61:0e:80:16:e0:
43:69:e6:02:96:5e:10:46:d9:02:b1:ac:52:d1:7a:
b9:c7:69:88:4a:d6:73:07:84:35:d7:c2:4e:b3:2a:
78:68:a0:ef:84:6c:ff:31:a5:3c:ad:30:ad:f0:ad:
db:eb:8a:e1:09:6a:f4:be:fe:63:7f:a6:88:29:bc:
d9:7e:71:c6:ed:63:65:f7:ea:73:9c:24:df:06:ab:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:28:83:DC:7E:EE:6C:67:A7:AF:3A:E1:3E:69:2A:F3:19:80:CB:53
X509v3 Authority Key Identifier:
keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:34:ba:f7:ed:48:2a:4a:c8:ef:5e:ab:1f:3f:a5:4b:f2:ea:
34:34:9f:96:69:68:2b:a1:13:12:f3:c1:2b:b5:a3:16:07:9f:
42:61:04:77:4b:79:85:82:5e:d3:a0:4b:40:e0:f3:33:9d:32:
23:79:23:5c:e7:06:a1:56:73:6a:f8:60:e9:67:61:63:f0:f5:
25:fd:d0:d3:d5:67:be:f4:92:ee:1f:b6:19:03:fa:95:60:e1:
8f:f4:18:ed:80:00:75:0d:05:f6:1d:0f:d7:4e:bb:58:91:04:
57:e8:bb:91:6e:06:46:ea:1b:7d:20:54:ef:50:28:7d:a4:03:
89:cc:89:59:eb:06:33:c2:df:dd:f0:fd:cf:30:29:10:9e:95:
8f:fa:e8:7d:e0:df:43:7f:1b:cc:81:02:4c:10:5a:0c:5c:6e:
eb:33:b1:e1:e7:1a:11:cd:5d:80:f8:b3:06:e2:ed:f3:e9:4d:
43:39:c8:eb:da:c8:e8:6b:bb:39:0c:87:a9:b4:92:43:1d:8f:
6f:57:ad:45:ec:04:dd:72:c7:eb:36:33:2e:d9:85:5e:15:a5:
c7:e6:63:c3:ca:e1:ac:8d:4b:ab:5b:e6:1f:6d:a8:69:39:a4:
bb:f1:cb:47:25:16:7d:e4:9f:46:3a:14:7a:e8:60:18:d1:e3:
52:ec:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:11:44 2025 by rpki-client