Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json)
Hash identifier: H2k57CzBnS55PjXF54eZEPorDKO+lJ+PLHMaDHe7Xc4=
Subject key identifier: BF:E6:6A:D7:FB:84:FD:F2:4E:E3:46:59:1B:A5:90:5E:FE:63:E4:9A
Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E
Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E
Certificate serial: 061E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
Manifest number: 0619
Signing time: Fri 28 Mar 2025 23:02:28 +0000
Manifest this update: Fri 28 Mar 2025 23:02:28 +0000
Manifest next update: Fri 04 Apr 2025 23:02:28 +0000
Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: 3lstCXPgQN9BWW3w/j1wPfZCnZS8xIuYi1hMIsienLw=)
2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566 (0x61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8392
Validity
Not Before: Mar 28 23:02:28 2025 GMT
Not After : Apr 4 23:02:28 2025 GMT
Subject: CN=67e72a84-70bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:32:80:ee:68:5a:18:df:10:44:f8:70:5f:
9d:6c:78:a8:4f:a8:99:5f:a0:9b:08:4b:df:65:e6:
0f:07:bb:3a:8d:c0:43:47:ef:02:c8:6a:35:cc:6c:
5a:70:68:e5:bd:21:c4:cd:61:61:6f:f9:04:43:09:
7f:6e:14:95:cc:9a:21:81:9b:c8:e8:e1:05:f6:c8:
97:85:37:2e:24:ba:23:88:c0:ec:60:cd:73:9d:70:
0f:a6:34:f2:5e:87:ab:0c:eb:03:8c:31:35:db:a4:
7b:cd:1b:69:fa:46:36:03:e7:51:36:e4:f8:f3:99:
ff:75:e5:e8:27:99:8a:71:06:01:a7:dd:b4:a2:4b:
fd:11:f4:69:3e:3d:eb:ba:77:4b:8b:b2:9d:8f:86:
33:0e:f5:49:63:5f:0e:63:5f:1a:46:fe:24:ae:4e:
ea:48:32:1c:9e:d0:8b:aa:a1:d5:81:8f:ba:01:7e:
a1:d7:cf:ac:23:fb:4a:58:ac:c4:52:1e:8e:b3:31:
e2:08:15:e8:42:28:03:b6:d6:e5:65:47:4d:cc:55:
8f:21:dd:56:c5:22:39:91:2d:89:0c:25:69:fe:81:
2b:4d:18:9f:b6:20:21:18:42:c7:f6:24:15:2a:12:
17:30:f3:5a:2b:5a:38:75:29:b8:6b:c6:4f:97:8f:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:6A:D7:FB:84:FD:F2:4E:E3:46:59:1B:A5:90:5E:FE:63:E4:9A
X509v3 Authority Key Identifier:
keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:3c:99:76:46:3a:a7:f7:e5:62:e1:b8:1b:47:d7:74:ed:
92:3c:2e:b5:05:67:4d:26:bd:88:e9:ef:ea:27:cc:c4:7f:a3:
89:ab:36:6a:c0:bd:03:2f:c5:de:7d:9e:ff:d5:d2:4b:eb:6e:
a2:62:6f:92:d9:93:99:e5:df:d7:c4:d9:10:2b:75:6c:88:01:
44:4f:52:9d:b2:25:64:74:20:df:e2:07:33:a1:44:f5:d9:cb:
5f:3d:42:0b:47:bb:b3:f9:36:45:e0:e3:24:06:77:be:50:0e:
00:af:aa:a3:e9:1a:58:9b:4b:45:e8:29:af:e1:63:a4:e9:9d:
13:2d:07:89:90:34:79:47:80:28:15:12:a3:ce:34:62:c9:97:
14:d2:fa:90:f8:eb:c4:14:b6:0d:e3:e7:71:06:ee:d6:62:a2:
85:71:65:ae:a3:d4:b1:f6:5d:2f:af:03:62:f4:a6:5d:1d:6a:
fb:9b:03:22:77:11:19:aa:4b:44:81:88:de:85:26:ed:52:7e:
bc:f4:17:bc:42:8d:19:3f:0f:84:42:bd:75:09:34:f8:36:02:
e0:9b:35:21:8b:61:d1:30:83:51:17:3d:3d:fd:67:ed:14:26:
e7:69:63:2c:e1:37:35:d1:af:90:b0:79:76:f4:7a:51:c0:13:
54:f8:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:03:35 2025 by rpki-client