Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json)
Hash identifier: 69RPxzSVXSXxqHockdgiZDe5cPp955pqqPP+ceY4a7s=
Subject key identifier: B2:47:13:58:27:9F:D6:46:EC:2C:CD:74:A3:F4:42:99:7A:FE:71:19
Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
Manifest number: 010F
Signing time: Sat 29 Mar 2025 04:21:22 +0000
Manifest this update: Sat 29 Mar 2025 04:21:22 +0000
Manifest next update: Sat 05 Apr 2025 04:21:22 +0000
Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: 1QkPB+tZVzpUxzee4Fnh7Gl3MMmIBCREAeNYdXrQbsw=)
2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: fsgwXlrQI8Xf5Rjyp/4eVuAgbFz37cGdGAMKHjxGUCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F79
Validity
Not Before: Mar 29 04:21:22 2025 GMT
Not After : Apr 5 04:21:22 2025 GMT
Subject: CN=67e77542-45ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:84:7e:c7:e4:c8:07:a5:d6:ab:1f:83:ea:
2b:03:d3:8d:81:dc:c0:20:ae:30:5c:93:a4:34:71:
9f:a0:e5:2e:ab:4e:f9:fb:d5:e2:57:10:e9:9f:e1:
01:31:ac:0a:60:62:7c:b7:4c:4b:b5:b4:d1:90:c1:
61:06:63:8a:9c:f4:cf:03:12:e8:9f:4f:1a:ce:64:
d6:73:f2:57:f7:c7:15:9e:ef:3d:d4:c4:4f:12:63:
a3:f5:25:f1:a9:af:fa:54:1b:19:e7:57:0f:10:f8:
10:13:da:a3:42:ee:8f:10:9b:11:13:fb:21:53:ff:
d0:80:3c:a1:42:25:a8:08:19:71:bf:4c:a6:f8:b4:
0b:9f:42:6d:10:df:05:e9:79:42:12:5a:b1:b7:f0:
0c:41:81:1a:06:6b:17:f8:2b:6c:f7:f5:cf:3e:ce:
6a:5a:cc:d3:3b:45:89:b0:82:a9:09:49:53:0b:6f:
e6:0d:a2:36:67:52:ab:50:2f:1d:a1:f3:b0:66:bb:
89:2d:ab:58:b3:27:32:e4:ac:d3:8d:15:63:e7:42:
0c:44:e6:2a:25:a7:df:14:79:66:c0:65:1e:35:5b:
db:de:4d:24:29:ca:33:a5:1b:8d:e0:be:c4:84:9b:
76:12:80:72:43:04:f6:4d:76:02:93:54:aa:50:19:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:13:58:27:9F:D6:46:EC:2C:CD:74:A3:F4:42:99:7A:FE:71:19
X509v3 Authority Key Identifier:
keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2e:64:7b:4f:79:0d:35:05:c9:38:54:97:16:cd:37:f9:60:
29:62:b8:e0:75:85:44:f9:e9:cf:5a:f5:80:ca:45:9b:34:a2:
9f:b9:fe:5c:56:66:77:34:5c:fa:a7:bf:9e:28:9e:a5:78:c9:
b6:ac:4c:a3:32:44:b7:49:25:c0:7d:62:99:10:b9:42:c2:94:
d4:ed:04:60:93:5a:ea:63:f9:4c:d1:01:94:85:4d:ff:61:69:
30:2c:c9:00:4a:91:85:ab:87:3f:e9:55:1c:51:1f:6d:7a:03:
34:26:8d:62:a3:d5:d1:17:be:d2:7c:f1:d1:d7:ae:93:56:db:
1d:c3:87:5b:ef:88:8a:41:f5:e1:e6:a5:a8:78:b1:21:95:c8:
34:51:ab:fd:91:36:d2:da:ef:1f:51:a6:f3:7f:95:ca:c5:d9:
cb:3f:68:01:01:39:b7:d9:f5:c0:ea:81:31:d3:09:2a:90:aa:
26:68:a7:7e:3d:c9:7a:1f:ca:81:7c:14:5a:e3:ec:a3:26:39:
2a:bf:7e:1f:f0:f6:be:91:02:73:83:69:35:28:a3:b9:34:a8:
c8:91:64:13:a8:0b:f3:f6:74:ef:f2:40:8a:b0:23:5c:ab:17:
9e:2c:d3:6b:ba:99:e2:c6:c0:c2:95:bc:c8:ff:70:e8:6c:1d:
09:f2:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:23:08 2025 by rpki-client