Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier: Jccd/2YiEkWXwYJpf5Pdj3ZRyKJBAV6oiRimnt1pmy4=
Subject key identifier: 91:CB:F1:7D:C9:77:F1:F3:CF:59:30:92:EC:D6:25:6F:C2:C3:E9:E9
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial: 0203
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number: 0200
Signing time: Fri 31 Jan 2025 02:11:23 +0000
Manifest this update: Fri 31 Jan 2025 02:11:22 +0000
Manifest next update: Fri 07 Feb 2025 02:11:22 +0000
Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: L9qhE+Au9dwPCpUOUx8quH6dI5vsjDH2goJ/ctXSZWI=)
2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: 6xgX7RCx1jR+s1bDY/KUKo4N6DkkwUVmskiN+xXDBfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515 (0x203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Validity
Not Before: Jan 31 02:11:22 2025 GMT
Not After : Feb 7 02:11:22 2025 GMT
Subject: CN=679c314b-9fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:95:72:0d:27:d2:d5:16:0e:ea:a2:b6:e1:
3b:e0:58:09:48:e1:19:a1:1f:a8:8f:e8:2c:81:f1:
e4:0f:be:96:39:8a:c4:5f:95:ec:68:2b:22:ac:ce:
1c:b9:f7:38:9a:b9:f0:ff:98:55:8c:c9:61:10:fd:
0d:54:43:56:de:61:c0:e4:fb:3c:52:ef:db:ce:ec:
12:45:d7:01:bf:d4:f7:bc:5e:21:a6:57:f0:a5:13:
31:58:60:81:2a:bb:a3:e4:93:af:59:d3:5a:6c:c1:
97:22:e3:29:6f:07:1e:68:c6:4a:52:76:35:ae:0d:
07:cd:90:61:d0:1e:6c:a7:3d:9d:c0:ee:fd:14:cd:
60:7b:8b:e4:dc:81:d5:81:58:ae:b4:f4:79:e1:7e:
57:ad:48:6f:e5:f1:d3:d9:98:39:eb:3d:46:5f:91:
01:6d:55:7a:c2:31:ac:52:48:dd:04:9c:e5:4e:a4:
14:cb:30:df:d4:db:ed:25:8a:da:38:a0:44:17:7d:
ab:d2:4a:cd:ca:5f:c4:57:8b:f5:07:86:34:aa:45:
af:db:d5:b9:29:c1:4b:32:7b:b6:4a:d4:2c:a5:1d:
f5:90:5b:76:3f:81:bb:c3:77:a5:89:74:b1:c1:f5:
16:a8:5d:1b:5d:a9:34:f9:39:91:33:2d:a9:56:39:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:F1:7D:C9:77:F1:F3:CF:59:30:92:EC:D6:25:6F:C2:C3:E9:E9
X509v3 Authority Key Identifier:
keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:37:c5:3c:6e:47:5c:15:ce:5c:6f:1d:05:96:99:69:d9:
3c:4d:10:7b:61:92:70:82:0f:9c:97:b8:b8:11:df:67:78:be:
39:51:e9:32:e9:f3:5b:02:05:3a:e3:44:83:37:da:61:64:59:
75:d9:bc:54:9e:1f:f6:86:ff:51:c5:a7:18:af:6b:f1:54:4d:
64:a1:45:24:20:c6:ac:07:5f:18:01:ab:93:f8:0c:31:a0:83:
54:8f:de:33:d5:54:16:ba:84:45:58:e8:cb:dc:b2:0e:e5:80:
60:8a:18:93:c4:d0:15:18:a5:71:92:3e:09:3e:4f:49:80:24:
63:2f:fa:48:e3:c2:67:36:73:84:ee:ae:2a:1e:25:37:64:3f:
0b:5b:fc:61:22:02:79:7c:78:e6:fa:96:d2:8d:0c:08:d9:ab:
10:0b:c0:22:68:15:ad:65:8d:5e:29:83:76:12:46:4c:b4:b8:
87:85:6a:ce:a4:b7:81:30:16:a0:e4:a5:a1:63:ba:bb:34:d5:
f2:89:19:a7:c4:68:32:24:58:39:94:dc:c6:2e:54:71:d2:8b:
dc:98:99:8b:1a:c6:4c:fd:14:e8:93:fc:75:74:c2:ad:3e:5c:
7a:2b:7f:ef:7e:fc:d2:b2:6a:0e:5e:77:45:d3:b1:2f:89:c7:
e3:8b:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:32 2025 by rpki-client