Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json)
Hash identifier: M/8xaPfwD99wQk/mblasbKQWno0ldgA2WGdT2YB+9hc=
Subject key identifier: 73:98:2B:FA:C9:4F:BB:69:4D:29:07:AF:84:F2:6D:7A:CB:17:D7:A5
Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
Manifest number: 49
Signing time: Sat 29 Mar 2025 06:45:27 +0000
Manifest this update: Sat 29 Mar 2025 06:45:26 +0000
Manifest next update: Sat 05 Apr 2025 06:45:26 +0000
Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: nhdOc5tPDVOj7g0Uq7qUKYE9CwpHvjV0IjkSUV40RVA=)
2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98D7
Validity
Not Before: Mar 29 06:45:26 2025 GMT
Not After : Apr 5 06:45:26 2025 GMT
Subject: CN=67e79706-f166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:f9:68:0b:21:58:52:de:32:9c:35:4f:0e:
b3:53:01:93:0d:cc:e8:84:51:4c:62:11:95:34:28:
d0:ea:85:14:fe:8d:cc:87:6d:a8:75:19:38:55:cf:
a9:2d:09:33:18:61:55:23:5d:8f:a3:7a:64:47:66:
96:7c:7b:27:67:22:d0:7e:2c:af:b7:f2:a1:17:6a:
43:09:c6:0f:ca:65:d0:83:fe:77:bb:82:cb:66:ee:
db:0a:35:db:31:ad:58:98:27:db:17:17:ef:87:cf:
b5:0b:e0:55:41:f8:6a:ec:fd:26:bf:45:22:95:51:
da:01:24:2e:8d:01:92:a0:e7:54:86:8c:5b:1f:2e:
80:d6:32:71:16:ad:a1:63:67:05:1a:e7:d9:45:2c:
f1:01:35:52:07:4a:b7:68:da:f0:fb:ed:5a:52:e7:
aa:d4:d7:41:01:af:72:1d:37:1c:fc:e6:e6:45:95:
84:64:17:72:ec:35:a3:ac:24:d2:f3:50:df:83:57:
8f:88:bb:2a:ae:d6:26:3d:9a:71:a0:4b:7c:3a:a9:
af:42:22:57:72:4d:5b:ca:ff:44:0d:83:4b:6b:29:
78:6a:d2:1c:1a:b1:23:90:5a:f6:92:ee:b2:24:0a:
93:f8:37:9a:ee:b2:a4:96:f9:cb:37:92:24:a6:18:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:98:2B:FA:C9:4F:BB:69:4D:29:07:AF:84:F2:6D:7A:CB:17:D7:A5
X509v3 Authority Key Identifier:
keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:61:74:58:97:8e:0d:9f:f6:0d:89:c2:4a:62:7d:2d:bf:
24:70:c6:fc:b1:b8:5f:14:ac:b2:2a:51:74:06:41:a4:14:24:
a0:d8:d2:85:1c:41:6d:42:f7:cb:be:cc:39:31:96:48:53:66:
c3:49:48:2b:8b:ae:49:f8:e2:ac:47:00:da:73:c3:1c:a2:2a:
4e:1a:d9:c7:01:0c:a2:58:f6:4d:d6:fd:7e:0a:d5:6a:06:21:
31:53:a6:a1:b0:9c:d2:54:d5:81:83:f7:6a:9a:a7:20:76:1d:
28:e2:d2:e0:ce:85:67:b3:7d:37:23:c6:b5:86:e8:45:b2:cc:
ea:6f:fe:84:af:ca:cc:0d:4a:a4:29:2f:d4:31:72:77:f8:13:
75:28:e5:ea:fe:fa:c1:16:c1:a9:99:f8:b5:02:7a:80:88:ab:
75:85:33:d3:33:04:fe:eb:ec:e7:54:60:e0:ee:69:20:fe:47:
5c:31:67:81:1d:b8:ae:89:b2:29:91:9b:5e:42:e8:64:6d:89:
33:5d:e7:ba:46:0f:66:66:f7:9f:4c:1d:bb:24:6f:de:64:86:
13:52:67:30:15:32:39:74:05:ce:be:84:8a:c9:9e:fb:b1:6e:
e6:b3:a5:47:dc:0d:20:0f:09:cb:4f:88:a2:d8:11:60:99:8b:
ba:b8:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:08:45 2025 by rpki-client