Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json)
Hash identifier: KNXgGtIOHQuBWUZgIbipxaf1fsSFXW5JWijO5r1WDAk=
Subject key identifier: 74:B5:11:6D:80:F4:21:24:2D:8B:C1:DC:42:2E:15:19:AF:13:53:BE
Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72
Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
Manifest number: F1
Signing time: Fri 31 Jan 2025 04:24:54 +0000
Manifest this update: Fri 31 Jan 2025 04:24:54 +0000
Manifest next update: Fri 07 Feb 2025 04:24:54 +0000
Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: XR/0afwD5Tc2niz5fzDU0eIlOD57fuVCbbnmkscHcrs=)
2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: fKu+QnI9JJSs0/0qC7wtQtv1o9IdD9KvcLGhg+7rRMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672
Validity
Not Before: Jan 31 04:24:54 2025 GMT
Not After : Feb 7 04:24:54 2025 GMT
Subject: CN=679c5096-135a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:ac:eb:6e:00:1c:8f:be:78:c3:0a:38:64:
29:71:ed:92:25:9d:67:4d:08:62:07:d4:5f:eb:d5:
d6:58:2f:22:d6:92:e2:d6:71:b0:61:42:59:9d:d3:
a7:23:cc:5b:50:a1:02:74:af:26:d5:b1:56:0b:47:
69:d3:ec:fc:bf:a5:9f:36:be:5a:b9:7f:d8:d6:5a:
69:20:fa:ba:d1:d0:f0:64:75:1d:71:3d:7d:bf:f7:
cf:73:16:7c:c6:db:30:22:8e:00:4e:b8:f2:01:d8:
47:40:36:63:c0:b2:5c:16:84:aa:7c:4d:c3:5f:93:
b5:96:73:6b:3d:a8:48:62:14:f5:d5:73:5b:9e:34:
c9:84:44:60:75:4f:d9:3e:1f:41:1d:af:89:08:b0:
3b:e1:da:00:8f:4c:de:f3:8e:ad:18:0c:23:ae:07:
06:46:b1:e0:9a:f7:57:e2:be:a2:6c:30:40:b5:0c:
3c:d0:4b:8a:d4:44:fe:5c:90:77:65:dd:aa:74:7c:
5a:e0:6f:ea:12:87:3b:0c:68:20:71:f0:64:3e:82:
a4:04:a3:69:80:1f:6c:d1:8f:5b:cf:4b:d3:6e:23:
d5:b5:dc:0a:a1:3b:05:e8:4f:70:75:db:aa:77:10:
dc:9e:f0:c1:3d:58:61:3f:51:36:82:6d:2b:f1:bb:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B5:11:6D:80:F4:21:24:2D:8B:C1:DC:42:2E:15:19:AF:13:53:BE
X509v3 Authority Key Identifier:
keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1b:56:a2:78:91:67:3c:95:02:ce:31:14:c0:d5:2d:9a:99:
6e:0f:08:c9:1e:6b:d9:7d:56:de:52:c0:70:59:03:17:fc:5c:
89:60:26:c1:29:78:6a:2f:ee:17:ea:26:be:40:b6:01:d3:26:
26:32:28:a4:bf:0a:7c:85:9f:a3:6b:95:89:97:d8:c6:36:57:
a3:3a:f0:3b:8d:8a:5d:b5:22:8a:0d:d0:a0:4a:a1:7f:bc:a2:
6d:50:9f:eb:3a:38:09:a9:95:9c:6e:fa:bd:3c:67:eb:53:5a:
dc:f3:8e:20:e2:0d:f4:98:bb:ec:e2:86:be:fb:ae:fa:3f:32:
0e:c5:ea:cf:ca:eb:3e:7a:33:4c:25:a7:2a:fc:0e:da:03:ca:
1e:7c:b4:85:86:d4:8b:7c:80:87:e0:ea:ef:e0:eb:bc:ac:d1:
30:cf:03:ab:23:d5:6d:af:0c:06:d5:7d:59:48:ec:97:25:fc:
66:0b:73:23:1a:8d:63:a7:52:a2:47:df:cb:af:fc:70:2e:c7:
76:1d:3e:c2:8a:10:34:04:ed:b1:ac:d7:c5:67:3b:2a:4b:e9:
79:df:e7:64:a4:5c:c0:9d:9e:0a:a6:b9:f9:d0:d9:ed:f3:a0:
d0:de:d7:20:92:3f:09:f4:c0:8f:b0:4e:91:d7:85:08:c0:3e:
85:2a:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:46 2025 by rpki-client