Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier: UzMbs6TzsJ0DGH/5tjv8IbYPmrruJ6HshCLI28OcGOU=
Subject key identifier: A1:89:3B:93:16:CC:24:F3:66:5E:28:05:9B:71:35:9F:1A:11:68:D7
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number: 0253
Signing time: Sat 29 Mar 2025 02:04:17 +0000
Manifest this update: Sat 29 Mar 2025 02:04:17 +0000
Manifest next update: Sat 05 Apr 2025 02:04:16 +0000
Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: SBfq2RjQUiVl2KCJrIBnvANTWWbKeXArqQecD0nW8i4=)
2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=)
3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=)
4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA8E8
Validity
Not Before: Mar 29 02:04:17 2025 GMT
Not After : Apr 5 02:04:16 2025 GMT
Subject: CN=67e75521-4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:20:46:34:2d:5c:dd:69:db:70:5d:8a:ad:
1f:3c:6e:02:2d:75:bd:b5:93:02:85:4f:ff:b1:56:
c4:46:e1:14:ad:b9:ef:a9:9d:5b:ae:84:e3:c7:74:
6b:b0:80:4b:c6:1e:f6:8f:22:e5:a2:7c:2b:33:7b:
d9:09:91:a6:3e:4f:8f:3c:0e:4f:51:11:b0:a5:bc:
9c:44:64:bb:81:40:7a:c4:40:f9:69:2f:ce:dc:9f:
6b:6c:d6:f3:05:70:7f:1b:26:94:96:96:60:44:81:
1c:49:fa:ea:78:f0:6b:10:dc:8c:63:b7:07:81:3d:
a9:f7:a1:97:22:d0:b9:4f:d4:59:e6:ff:33:74:f4:
66:60:42:1a:3b:3f:51:fd:0f:97:4b:69:de:17:fe:
81:94:ae:43:07:df:e5:fa:02:16:a2:53:c8:ab:4f:
e1:8f:5a:e5:a0:be:37:6d:44:a2:6e:37:67:03:9f:
b9:29:61:b2:b1:5b:3d:0d:03:fd:97:e4:a7:5d:b9:
6c:70:cf:6f:50:a0:c7:24:9d:52:08:98:09:fb:f5:
de:5e:31:48:b2:06:35:85:af:f3:86:a3:90:0a:47:
d3:1e:24:fb:41:60:c8:44:40:81:8e:ff:96:a7:52:
8a:49:54:1b:40:cb:9a:2b:c8:11:34:1c:3d:e5:a5:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:3B:93:16:CC:24:F3:66:5E:28:05:9B:71:35:9F:1A:11:68:D7
X509v3 Authority Key Identifier:
keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2c:e4:58:51:56:57:65:19:5a:38:96:8e:c5:92:03:17:95:
72:5b:19:67:bb:04:e4:9a:06:62:7a:3c:68:2d:cf:ea:90:a4:
b8:86:f0:e5:e0:48:06:6c:85:4e:a8:13:19:27:f0:5b:10:46:
31:7c:bc:72:ea:d2:90:b1:4e:44:92:1e:1c:82:9d:3b:6d:03:
a2:9c:ee:9b:b0:2b:e5:f6:6c:9b:b9:89:a9:12:ae:b6:e4:34:
e4:92:5d:4c:61:89:e9:e5:0b:24:d8:50:df:ff:f1:e7:a8:6e:
e2:7f:20:52:2a:77:08:5d:83:17:4c:28:a2:20:3b:bc:1e:42:
e6:c7:b4:ff:83:48:5f:c8:e8:4a:dd:16:49:64:0b:c7:7f:df:
ca:9a:09:67:ed:7e:e9:a8:ff:db:cf:73:ae:87:47:19:16:4f:
6c:aa:1a:6e:ed:3f:08:98:0a:ac:50:dc:c0:a9:d7:88:2c:d7:
86:cc:6e:dd:07:13:50:c2:1a:61:6d:b2:ad:5c:fa:f5:62:86:
a7:b0:1e:2b:10:3c:79:e2:bd:4f:be:3e:84:dd:79:85:04:a2:
33:27:93:70:10:2e:b7:96:a6:67:e2:90:2c:f8:d0:b0:f9:54:
2e:ff:66:77:3d:ac:ab:28:5f:9f:02:4a:57:bf:20:11:e9:78:
03:d1:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:36 2025 by rpki-client