Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier: 8l7xhD+xHkjrcd03Wo26ZbpV2UJUxB3xMyj9CuNW8CI=
Subject key identifier: A1:5E:A3:61:DC:BD:53:9E:4D:94:36:6F:02:B7:32:5E:5F:E5:DB:16
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial: 0A10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number: 0A00
Signing time: Thu 30 Jan 2025 19:58:06 +0000
Manifest this update: Thu 30 Jan 2025 19:58:05 +0000
Manifest next update: Thu 06 Feb 2025 19:58:05 +0000
Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: 9jM3LKTbW3ppDNRmOMpaDdh8OlVJI+VbHKNOWGCfh68=)
2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: CYluTFrgBey6y13Wc0qfpVx8mUC8dXDBrmvQpYKEaB4=)
3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: f/OYcKgJTCnL8tuuo/kt3yp3h+qpGdrKS6DF6woKA8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Validity
Not Before: Jan 30 19:58:05 2025 GMT
Not After : Feb 6 19:58:05 2025 GMT
Subject: CN=679bd9ce-5edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:13:3f:59:2c:ad:93:6f:4e:55:27:de:f5:
57:e0:12:f3:79:bb:7c:90:a1:66:4d:37:73:7c:ee:
6c:a9:6b:0f:ac:ff:39:44:cb:61:20:25:7e:59:1d:
5d:19:ea:0b:87:c9:7b:65:02:7a:f3:1d:1f:42:35:
e0:11:38:e9:0d:cd:0c:c0:dc:79:a0:c4:42:7d:8b:
7b:33:31:ce:79:e7:e8:d3:4e:c1:08:f6:eb:69:1b:
a0:0f:7d:d9:ad:a6:44:35:3b:e8:db:c1:8b:d4:f0:
e1:25:5c:14:bd:26:21:1c:6b:12:90:19:7a:02:e1:
05:24:6d:b6:f8:52:85:c0:8d:d1:52:a1:fd:85:bf:
54:21:e2:99:1e:27:21:0c:de:98:2f:7e:a3:92:d9:
e3:da:90:f2:0f:a6:9d:70:7d:3f:92:23:b2:a7:ee:
21:c7:04:8a:f6:29:05:77:a9:5c:16:12:f6:6a:5a:
22:fe:58:80:d2:ae:b0:1c:8e:c7:46:fe:27:2a:35:
5c:ab:5f:38:dc:7d:d8:cb:c8:72:80:2a:20:2b:78:
6e:2e:f5:10:7b:e3:c3:b2:90:85:d8:89:67:f9:00:
2b:00:f1:bc:9c:e7:c7:19:88:86:61:50:38:e4:30:
6c:2e:11:e2:2e:dc:41:a5:2c:cb:57:f3:5e:63:79:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:A3:61:DC:BD:53:9E:4D:94:36:6F:02:B7:32:5E:5F:E5:DB:16
X509v3 Authority Key Identifier:
keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:08:d9:25:3c:eb:da:bb:a7:d8:6d:aa:87:7c:34:f0:5c:d5:
e0:bf:39:fb:f0:08:f0:cf:f2:8f:8a:a2:5a:41:ac:23:b6:4b:
f0:47:fd:b1:d5:41:e4:07:fe:69:b4:43:d1:07:31:bd:ee:9c:
10:fa:6c:6c:e0:2c:0b:99:ca:fb:7e:97:0b:4f:ad:e3:55:59:
54:bd:8d:40:32:bf:42:2d:d7:40:e0:78:75:4c:e9:1b:ed:c2:
3f:57:eb:b6:18:5f:11:f0:fa:99:a8:26:ca:03:f7:4f:82:68:
06:ed:cf:96:18:b1:0b:42:76:83:f2:e9:4b:b1:8d:14:c9:66:
29:ec:ad:68:1f:6e:61:88:91:f6:68:08:1b:62:81:cc:d9:e9:
f2:8e:c7:e4:b6:69:8a:d0:7c:3c:3b:9f:f7:41:f7:b0:32:45:
f6:3c:2a:fe:f1:6a:3a:c7:31:09:ac:14:c9:83:e1:d9:3e:4f:
2c:b2:9f:29:2e:fc:7e:86:e8:b3:c9:67:86:86:5a:4e:f8:0a:
27:83:02:70:26:ff:17:7c:40:91:33:0e:45:03:eb:37:93:59:
c5:66:62:69:0b:cb:84:fd:9b:28:3f:15:9b:92:3f:5e:06:fc:
bc:df:f9:28:84:e0:5f:9a:a1:b5:32:43:66:dc:87:68:7e:65:
6f:ff:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:21:53 2025 by rpki-client