Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json)
Hash identifier: eo9Wbp2z6yPbD+ksTkr0/Zy2ZFGSOhttWQdcAgvGyA4=
Subject key identifier: 91:C9:21:2D:D6:57:54:30:19:21:10:B4:58:D5:C8:8A:D6:26:31:88
Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D
Certificate serial: 3483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
Manifest number: 3472
Signing time: Fri 28 Mar 2025 15:25:14 +0000
Manifest this update: Fri 28 Mar 2025 15:25:13 +0000
Manifest next update: Fri 04 Apr 2025 15:25:13 +0000
Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: /I6FtYMiY10Zia11M542E0247KdogRkxdY5ojiaPHHg=)
2: 2417A16240D111EEB97F9366C4F9AE02.roa (hash: 5HxbfCADS0YE8zgWBNeHaLAjeMofIFQYhkC/UJjBOds=)
3: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: qoJIoB5IZhCrFKoONH6w1qM5F//MbDhtykwiUAx2/AY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13443 (0x3483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BAF
Validity
Not Before: Mar 28 15:25:13 2025 GMT
Not After : Apr 4 15:25:13 2025 GMT
Subject: CN=67e6bf59-422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:d3:d6:80:f7:e0:af:41:50:c0:0c:4a:98:
2a:0a:ad:9b:c3:e1:af:cb:0a:18:d0:5f:1c:f3:c0:
92:ae:26:b8:c9:50:fe:57:2d:ca:65:f5:94:0c:35:
18:ee:51:dc:69:74:e7:7d:4a:cc:1b:c0:dd:08:fd:
88:3a:54:1f:b5:b5:e8:bd:61:e6:6c:15:1a:a5:1e:
ea:05:25:a3:0b:20:57:a4:20:1f:08:d1:90:f0:44:
5c:75:df:cd:92:bd:41:c3:55:4d:f7:65:54:37:49:
97:fd:f4:f6:0b:6b:97:3a:a2:df:03:48:53:6e:31:
1a:77:23:89:78:f8:db:be:5c:14:67:0f:2b:e2:5c:
40:bb:4a:74:a4:6a:25:13:83:bf:32:18:82:30:93:
d9:c8:db:df:a9:19:3b:36:40:4b:4e:b1:51:bd:6e:
ec:c0:f5:9e:55:b7:ad:e3:79:43:3b:a8:d3:f9:90:
82:d6:98:ce:91:a4:21:2c:77:d3:9b:32:cf:38:95:
03:9c:56:27:49:b8:09:0a:8e:b9:a7:f9:73:74:98:
ac:c2:ae:49:4d:5b:12:6d:aa:1d:a5:3d:8b:c5:ff:
34:07:72:10:f6:6a:d0:25:f3:12:6f:02:d1:cb:3d:
a8:44:21:d5:1b:47:45:32:96:d6:ba:ed:8d:71:e0:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:21:2D:D6:57:54:30:19:21:10:B4:58:D5:C8:8A:D6:26:31:88
X509v3 Authority Key Identifier:
keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:48:fe:b2:7c:8c:4c:01:bb:35:47:2e:5b:19:ae:b0:3d:ca:
cd:18:7f:fa:76:05:1f:f7:74:45:a5:94:2b:af:45:23:6c:5f:
07:a0:61:e2:dd:e4:24:bd:b0:b8:70:c2:e5:f1:9e:df:01:80:
af:f0:32:28:53:07:43:ba:06:a4:ee:05:35:c1:c7:c5:d1:87:
f3:10:60:9b:17:87:b2:fa:e9:ab:88:77:d1:67:f1:2b:0e:22:
22:fc:87:50:3d:db:f2:03:f1:3f:11:1a:23:f7:64:ab:9f:a8:
9f:21:3c:96:18:b1:2f:a8:7f:09:39:23:e2:d5:25:9b:5b:5c:
23:ff:91:af:f3:c8:6f:76:97:92:67:4a:b6:e3:d0:79:b7:22:
03:6d:73:32:c9:8f:0a:dc:79:7b:5f:65:81:1b:dd:3b:58:3e:
4d:78:6e:b6:27:33:a6:6b:42:cd:7c:76:af:63:58:4e:4a:63:
c3:33:3f:15:c7:25:00:bc:7c:4d:d2:8d:b6:80:6f:da:a6:03:
f7:c8:97:b9:24:18:41:fa:f6:a6:0e:63:33:36:25:61:f6:5a:
bf:f7:c5:74:d0:f3:1d:dc:8b:ed:2a:8a:7c:7a:cc:e2:07:15:
81:7a:a6:5c:11:60:c5:61:9c:9b:bf:cc:97:67:73:99:5b:45:
e8:f0:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:20 2025 by rpki-client