Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json)
Hash identifier: QoZXHZchB39LbzD6CGerE8evDDvki3PtQlX9ldj/3zE=
Subject key identifier: E5:CE:46:DD:3E:DB:5F:BE:E6:CC:51:F9:E3:39:EB:DD:2E:60:85:3D
Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Certificate serial: 0699
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
Manifest number: 0692
Signing time: Fri 28 Mar 2025 22:32:04 +0000
Manifest this update: Fri 28 Mar 2025 22:32:03 +0000
Manifest next update: Fri 04 Apr 2025 22:32:03 +0000
Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: lRwIBQ1Rm5VkoTA3hkO3qjWHXafXJ0rgorMbiaBgxPM=)
2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDB80
Validity
Not Before: Mar 28 22:32:03 2025 GMT
Not After : Apr 4 22:32:03 2025 GMT
Subject: CN=67e72363-4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:14:18:16:1e:18:82:ab:39:65:a0:34:04:
50:65:23:be:d4:4e:bb:99:ac:6f:95:63:39:e4:5c:
04:f2:a8:e9:74:6d:91:79:e4:df:5a:d0:a4:ad:f3:
39:d3:06:7e:b7:43:1e:64:ca:d5:bc:89:af:4b:1f:
ae:ca:4e:7f:76:3a:16:43:0b:87:35:96:87:86:74:
1d:91:74:e3:6b:ee:7c:28:b0:cf:3f:4e:e0:e2:9a:
f1:ce:e8:ac:f7:02:79:54:95:99:fc:a2:d4:2e:13:
14:22:e6:78:b9:b2:c2:79:f9:fb:00:be:00:03:29:
4f:97:75:a2:29:a2:aa:2f:0c:d1:25:0d:bf:c4:d0:
5e:d6:d7:b5:09:26:38:b9:9c:45:b8:1c:fd:23:08:
48:53:df:d9:d7:c9:d3:46:bf:64:21:a1:30:ae:70:
ba:b3:ca:f8:28:57:29:fb:17:e0:0c:2f:0f:51:6c:
86:fd:63:5c:00:ea:1a:e6:23:50:d4:c8:12:f8:c4:
e7:d4:2a:e3:26:5f:25:36:19:cf:c9:34:f6:44:8b:
d9:b0:a8:3f:7c:0b:24:88:2c:3b:38:ca:cf:41:a3:
6e:8a:a8:ce:47:00:d9:57:29:2c:f9:a8:66:95:10:
d5:e1:9a:c0:17:54:a5:93:18:14:bd:79:d7:84:67:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:46:DD:3E:DB:5F:BE:E6:CC:51:F9:E3:39:EB:DD:2E:60:85:3D
X509v3 Authority Key Identifier:
keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:2f:16:23:9b:c0:76:9e:60:65:73:19:94:b3:a9:82:c4:58:
65:72:4a:13:ff:e2:50:5b:29:0e:ff:4b:19:13:cc:b3:63:da:
19:5c:e5:9d:57:99:0d:d5:b3:49:c9:f4:74:4a:2b:47:f4:3e:
5d:47:97:f3:0d:a2:88:b7:f1:a9:ee:b2:bf:8f:03:d8:44:bd:
6f:68:7a:60:6b:1f:72:3c:73:e4:25:22:68:16:97:b9:f0:26:
1f:a6:8a:a5:a4:0a:fa:dd:63:4e:c4:54:67:23:69:18:ec:bb:
2b:5d:80:9e:3e:88:68:81:25:39:fc:06:91:7a:14:1e:0f:c2:
92:05:46:f8:f5:b3:74:c9:99:6b:cc:ab:20:13:67:db:ba:a2:
c7:df:b2:4f:80:eb:10:89:54:41:70:a5:7b:f9:69:3f:f6:c6:
a9:15:00:2d:07:68:26:a1:98:5a:fc:2c:55:a5:47:e4:7b:78:
88:6b:a1:44:ff:5e:c8:dc:ab:3c:bf:1e:a7:97:6a:a6:0d:72:
ff:5a:7e:40:e7:c9:7c:cd:21:8c:ee:55:19:5e:0a:e8:3e:04:
90:ff:66:b9:e7:d9:33:27:96:2a:ad:5e:70:74:68:e8:cb:19:
62:44:72:e7:f4:b2:4a:b3:89:91:98:8a:ae:73:a8:e8:7d:26:
21:d5:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:29:12 2025 by rpki-client