Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json)
Hash identifier: qD5UIQziEW1T0TKT3cWnzkwldhgdYK7xloMtoAQIjAI=
Subject key identifier: 06:09:91:37:8B:97:B4:F8:13:F6:5B:56:25:1E:92:4C:30:9E:A3:4F
Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771
Certificate serial: 08E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
Manifest number: 08D8
Signing time: Fri 28 Mar 2025 20:41:22 +0000
Manifest this update: Fri 28 Mar 2025 20:41:21 +0000
Manifest next update: Fri 04 Apr 2025 20:41:21 +0000
Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: 8CIvL6M7eReYYS0HaVTi7MXp2UQJcmylB9LK6C8ubE4=)
2: 9A1AEF16A9F511EAAEF63A52C4F9AE02.roa (hash: /K6l2Nk5DFl51F71/YofhWzfQ52cGcF53r9oxtYQCag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9611
Validity
Not Before: Mar 28 20:41:21 2025 GMT
Not After : Apr 4 20:41:21 2025 GMT
Subject: CN=67e70971-9827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:f4:6c:d1:d7:52:1d:ac:ca:b1:ac:ff:47:
69:bb:b8:8c:07:f5:3f:05:ba:1f:c2:ea:ff:b9:f7:
da:c8:8f:92:2f:cc:8b:c8:e4:f3:f9:49:70:87:4e:
a5:64:71:47:43:7c:66:2d:72:42:82:15:3c:43:b3:
d6:9f:b5:1f:45:07:cd:6b:8a:fd:ad:6a:bb:12:e4:
8e:65:1a:5b:fe:77:02:23:01:cb:1a:91:4e:56:d5:
44:0f:37:f6:6d:b6:f8:ad:a0:da:24:55:ff:2b:87:
3c:89:17:e9:e5:55:cb:d5:3e:ac:f6:48:d1:30:8a:
1f:22:f0:0d:36:0d:67:f5:8b:bb:2c:5b:88:ff:d7:
67:50:47:2d:1c:fc:c9:5a:2f:73:5d:0f:db:5f:b2:
7e:cf:c2:16:24:ea:46:94:75:01:41:96:3d:c6:88:
00:6c:c6:12:eb:d2:4e:1f:96:2d:79:cb:b2:f3:a4:
14:fe:27:d8:35:35:6c:a9:fa:ed:ec:f3:07:38:f5:
da:a8:57:e2:41:cb:6f:51:f5:27:96:fb:5b:12:9d:
4c:b0:1e:a2:1e:fd:ee:a5:a3:f5:eb:04:29:1a:0c:
5e:28:2f:2d:a0:65:f1:0d:c0:ec:f5:24:b6:a1:d0:
35:6f:77:7b:e8:86:48:85:c7:5f:48:9f:4f:a7:1b:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:91:37:8B:97:B4:F8:13:F6:5B:56:25:1E:92:4C:30:9E:A3:4F
X509v3 Authority Key Identifier:
keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:a0:22:e7:c7:d5:f3:98:20:73:0c:36:ce:72:2c:3b:3f:3d:
7c:ec:a9:d0:c7:1d:c1:16:5a:39:21:36:56:81:ab:94:74:89:
59:33:27:cc:28:96:ad:f3:06:24:8a:a8:b0:da:be:3e:20:58:
18:17:ef:d2:8a:41:ec:c8:90:83:89:7d:36:10:57:2f:d1:24:
80:ee:cc:86:12:d9:c5:79:23:36:1d:69:3a:88:5a:14:b1:a1:
89:90:d0:7f:ec:9d:5b:69:09:be:28:b8:88:6f:42:c4:c2:13:
03:e3:b9:af:25:1e:3f:4e:25:17:7d:0f:ca:5c:f2:bf:39:cd:
31:30:0b:c8:a2:bb:e2:c4:63:28:1a:82:73:6e:b6:de:30:2d:
04:b3:e1:d1:08:2f:af:92:98:f3:00:04:ee:fa:48:04:73:19:
14:d2:cb:7c:6f:8d:13:c5:ef:1e:aa:51:3a:86:1d:8a:3b:b1:
c2:ba:ac:f0:eb:07:c2:f0:d2:f0:64:08:de:b8:13:69:bd:55:
fa:b3:9b:8d:b5:f9:28:95:b3:8f:44:5f:5c:2d:89:07:63:4f:
6b:6a:3e:cb:e0:df:49:0d:dc:83:8f:6d:07:f1:dd:01:27:ed:
27:d9:4d:59:56:e2:db:fa:40:dc:43:f7:ae:a8:43:df:4e:71:
c2:55:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:22 2025 by rpki-client