Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json)
Hash identifier: /NW7gEtO4VsPgXGuqM6wuLmhAdun5NIvt+Ah7LUH+jQ=
Subject key identifier: 98:FB:FA:61:13:2D:D5:E1:07:EB:10:09:0E:69:9E:54:AA:91:C4:71
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial: 139D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
Manifest number: 1392
Signing time: Fri 28 Mar 2025 17:04:59 +0000
Manifest this update: Fri 28 Mar 2025 17:04:58 +0000
Manifest next update: Fri 04 Apr 2025 17:04:58 +0000
Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: l8oYGbgEPj7nt8BimkEt4YvkuEsTZ2K39QOZaTRNRLw=)
2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5021 (0x139d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8B7C
Validity
Not Before: Mar 28 17:04:58 2025 GMT
Not After : Apr 4 17:04:58 2025 GMT
Subject: CN=67e6d6bb-3318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:11:2c:5a:b1:2d:31:27:46:1b:5c:f8:74:
45:29:c9:c6:c5:9f:7b:4f:16:e4:4a:25:3f:a0:e9:
9a:cb:b2:aa:4f:73:a3:a0:18:17:75:28:25:07:b5:
1c:a1:3a:f2:0d:06:e7:a8:0b:71:21:6a:bd:8e:87:
43:c4:28:64:c7:e6:97:af:d9:59:e8:83:c6:51:cd:
d4:60:b2:99:50:f1:26:c6:11:41:79:5a:05:7b:bf:
3f:76:0b:f9:59:ba:55:e0:7a:31:e5:ec:fc:fe:8a:
fc:14:40:7f:45:72:d7:9f:72:60:b4:6f:12:84:68:
b5:08:04:bd:62:f3:fe:83:34:45:6b:a0:35:f2:39:
0c:16:5a:8c:91:7e:08:f4:11:d2:09:24:6b:80:07:
f4:08:f9:e0:25:0e:ed:b4:18:eb:4d:b7:e3:87:a4:
a1:eb:3d:ff:ea:de:26:e8:9a:0c:b3:d3:9f:da:a9:
1b:df:95:55:b1:30:e8:14:bd:9a:d7:79:89:8a:29:
e1:79:26:af:10:87:7b:81:e3:00:e6:af:1d:30:2a:
81:5d:31:92:c5:21:21:b1:97:a4:c2:6a:46:97:d7:
1e:56:be:04:01:64:ca:c8:63:ad:6d:62:4c:b0:50:
f0:ae:43:2c:fd:70:36:3b:87:ff:b6:50:6d:8d:2f:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:FA:61:13:2D:D5:E1:07:EB:10:09:0E:69:9E:54:AA:91:C4:71
X509v3 Authority Key Identifier:
keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:21:32:b8:a7:b7:f9:79:4c:95:12:a7:69:a9:5b:36:5e:ba:
70:bc:16:31:1f:35:99:df:a0:73:c3:3f:d1:bd:34:9d:38:df:
27:e4:f4:0c:7a:1a:be:17:72:08:d7:a5:86:3d:9a:ed:66:34:
ab:31:98:28:99:49:0b:31:1f:45:30:b2:46:0d:32:0f:3f:0f:
05:0e:e3:5d:53:9a:9c:f9:64:08:f7:e1:21:65:fe:8e:a5:57:
5b:da:e7:10:ce:f7:e4:a2:bd:bb:5b:3c:f6:c8:70:58:e0:e7:
73:35:3b:64:5e:2d:66:b1:28:2c:7c:0d:dd:05:30:34:32:49:
57:04:89:52:e4:a6:71:e9:a3:28:7e:5b:58:c7:23:3e:34:48:
44:a8:37:ba:3d:fa:67:e9:e0:83:8d:6f:c0:a3:0a:4d:6d:82:
22:75:a6:b6:6b:2b:20:66:e4:c9:5b:ff:54:cf:70:27:6e:3b:
8b:42:e4:d9:f0:b9:5a:bd:79:25:6e:a3:8e:8a:8f:7a:cf:ff:
6a:2d:76:ed:94:ca:5b:fd:51:1d:a6:07:84:be:d3:f0:a9:d4:
ab:e2:29:59:46:b0:39:5c:9c:f8:8f:54:47:be:ee:2e:45:02:
09:ba:bf:42:60:e7:64:2e:b8:22:dd:90:bd:1d:1a:6a:a3:75:
e3:90:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:18 2025 by rpki-client