Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json)
Hash identifier: 2TtfchriOslDmPC+fSlRxOtHNseZ3u99GgC8JiZ7L38=
Subject key identifier: 7C:00:45:EF:B3:81:00:C5:DA:20:3C:F3:CC:5E:EB:7F:06:62:A3:F4
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial: 04A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
Manifest number: 04A1
Signing time: Sat 29 Mar 2025 00:12:02 +0000
Manifest this update: Sat 29 Mar 2025 00:12:01 +0000
Manifest next update: Sat 05 Apr 2025 00:12:01 +0000
Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: /+4QzMxjAZ5mHFn5P2Jn2ykepVj7StMDmfXCjh3wDkg=)
2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=)
3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2412
Validity
Not Before: Mar 29 00:12:01 2025 GMT
Not After : Apr 5 00:12:01 2025 GMT
Subject: CN=67e73ad1-2c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:c1:47:e2:b4:79:f9:f0:07:4f:39:05:0d:
ef:57:7b:35:0f:4c:4e:a9:93:2e:05:8c:c2:51:06:
68:43:8b:8a:9c:96:04:2c:30:47:90:c7:0d:96:65:
97:88:82:b0:e2:c7:80:a1:e6:b9:a4:62:a0:1f:af:
08:b8:0a:2a:b3:06:05:c5:2a:17:90:1d:9c:53:57:
9f:1f:4c:cc:d7:8c:1f:cc:53:24:14:d1:71:bc:61:
79:d6:a8:68:d0:0e:64:93:4f:c9:50:71:fc:68:b9:
b2:85:b9:a3:71:aa:7d:ea:5b:9f:db:e4:b5:cd:dc:
fb:2d:00:8b:b4:48:19:be:e7:4f:b9:11:44:9c:83:
ec:38:df:d9:35:94:2e:81:60:19:de:9b:40:f3:51:
a1:b1:c6:fb:53:4e:9a:44:a8:14:2b:54:bf:c5:eb:
d1:d5:8d:2e:1c:c3:48:02:5e:32:1b:e2:db:5c:7e:
ee:db:66:bf:9c:f2:e3:8c:c1:88:12:84:f6:ce:0c:
2c:04:87:6e:bf:90:01:17:e3:cf:90:b9:dc:79:1f:
b1:74:55:fd:0f:48:7c:72:a8:86:1c:4a:9c:5c:0e:
a0:ac:ff:34:dd:5e:d4:d7:04:aa:8b:f6:88:34:d0:
a9:a2:1b:57:00:fc:2f:ba:a4:ff:e6:38:f9:91:ef:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:45:EF:B3:81:00:C5:DA:20:3C:F3:CC:5E:EB:7F:06:62:A3:F4
X509v3 Authority Key Identifier:
keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:57:4f:5b:3a:59:2a:46:46:2a:2c:33:3f:9d:52:de:00:40:
1b:5d:bf:5b:30:ef:a0:1d:c3:3a:83:ba:f5:b2:64:14:dd:e0:
cb:80:4e:8e:75:75:64:6f:b9:a8:fb:cd:67:00:4a:b0:e7:c4:
9f:b2:b2:84:b1:e4:6b:58:33:2b:76:15:92:b0:56:de:a5:d0:
32:b4:5b:1c:3f:9d:9c:9c:80:e3:0e:f4:f0:20:35:93:ce:ea:
fe:17:81:61:d6:d9:da:49:78:e5:44:b4:29:1a:c2:7e:3d:f0:
3a:4e:6e:a6:cd:e5:b3:49:fa:a6:86:29:49:fb:ab:c7:05:14:
c0:0b:3d:38:d6:86:04:61:8f:80:2a:23:b5:1e:27:eb:c2:b2:
61:34:cf:41:20:bf:54:41:a7:9b:e5:66:5c:5a:28:f0:d0:55:
41:ad:52:dd:40:0f:1f:4b:7b:8b:03:d1:92:5b:6d:de:12:6c:
db:0c:50:17:f6:22:79:dd:57:25:03:17:78:d6:48:a3:b0:d7:
dc:39:9a:42:36:c9:e4:fc:8b:48:dc:a1:d3:5b:a0:60:69:98:
24:f9:b6:cc:42:73:4e:21:20:17:75:97:38:bb:08:61:53:4a:
1f:ec:5f:47:6c:0a:13:f9:b8:4a:c3:dc:51:b6:3b:aa:61:59:
c0:8a:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:36 2025 by rpki-client