Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json)
Hash identifier: 2uw2CJJNzEkTJF4aWmoOPPrjP4Wd1On5h2Rk+w8xY2w=
Subject key identifier: 09:79:EB:13:58:D1:BF:3A:C8:07:0C:A1:3B:08:DD:B6:69:92:8A:6F
Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78
Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 06:03:45 +0000
Manifest this update: Fri 31 Jan 2025 06:03:44 +0000
Manifest next update: Fri 07 Feb 2025 06:03:44 +0000
Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: pVF56/dkjK0ESpFyfiblA3vqM0ha6Y8zejrnrJXp4fM=)
2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: BCtiz+Xsbj/enu8rGESoHoFCbppwu+/N8w360i6xkrY=)
3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: IYR9mQ1VQUiO08kcI4RHdp/FLN6UHawsT13ESG27pvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678
Validity
Not Before: Jan 31 06:03:44 2025 GMT
Not After : Feb 7 06:03:44 2025 GMT
Subject: CN=679c67c0-3ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:3a:a2:84:8d:b7:ca:f3:9b:7c:08:de:73:
ad:ef:e1:f4:64:a5:72:fd:e6:cb:fc:9f:15:15:90:
f8:65:6f:26:4e:ac:ee:26:aa:63:1e:a3:61:c7:41:
33:3d:77:38:4e:e2:7f:5d:68:c8:a2:77:f7:01:07:
d6:bb:96:67:4f:59:76:2a:43:90:2a:67:fa:65:1e:
e8:e4:76:84:32:1d:ee:f3:61:4e:10:e9:06:3f:62:
ef:74:a1:71:44:ea:43:bf:0d:b5:f1:89:2f:8c:31:
dc:64:ee:3a:54:79:a9:9c:69:56:58:fe:92:ac:09:
33:47:d2:8c:a7:e3:cc:1b:e7:74:e5:7d:47:9f:13:
c8:84:12:12:29:98:3b:17:3d:aa:c7:df:87:cd:d7:
78:a0:08:07:be:1b:e2:f8:0f:74:0f:04:72:d1:e8:
92:1e:64:cc:12:9d:52:b0:dd:89:33:0a:07:d4:8e:
41:4e:5b:95:ae:d4:51:26:89:93:38:8d:04:07:43:
c5:c9:99:8a:19:b5:a7:72:95:6c:aa:4c:f6:69:6b:
63:7e:15:18:fb:78:87:6c:95:a2:46:27:d5:f9:31:
34:e5:a2:a2:8a:58:7e:31:69:a1:81:11:e5:73:04:
f3:07:01:dd:70:76:a0:c4:0f:78:0c:45:3e:f9:c4:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:EB:13:58:D1:BF:3A:C8:07:0C:A1:3B:08:DD:B6:69:92:8A:6F
X509v3 Authority Key Identifier:
keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:50:d6:11:a1:16:1c:50:07:35:87:c9:79:96:31:a1:30:30:
4a:45:fc:86:2a:b8:87:b4:b6:2b:16:45:0e:d0:c3:a1:25:39:
9d:b2:eb:68:7f:12:4b:0a:ad:1f:89:02:d5:72:93:e6:2c:c3:
22:92:82:1c:90:8e:68:5d:e5:52:49:ca:9c:5d:ee:39:e3:82:
2b:23:1b:c1:a8:43:a9:76:75:ac:8d:6a:66:e6:da:43:98:4d:
5e:e1:6a:95:69:c3:4d:5c:d4:0d:5c:b3:b5:b6:ac:24:0f:d1:
38:f2:29:a1:ba:38:22:15:de:03:63:66:2f:74:2a:67:cf:73:
3e:15:e7:52:44:a2:27:24:1e:b8:b6:85:5c:ee:9e:ee:40:89:
fe:fb:fe:0c:60:79:69:40:51:cf:cc:46:06:15:16:2e:b4:b6:
f2:32:0b:1c:7f:bc:a9:62:58:9f:31:d8:e3:e1:fa:ff:de:38:
67:78:d8:4d:7c:58:e8:ff:fc:ea:30:12:46:c0:54:35:24:db:
20:60:e6:51:4d:67:12:38:56:5e:7b:e5:5c:74:d3:d1:d7:9e:
aa:f8:2c:61:7b:0e:e0:55:b2:5d:b9:40:d5:99:c6:6b:cb:c0:
0f:09:9e:a5:54:d5:07:aa:01:ce:fe:97:09:7e:bf:7c:c8:2d:
9c:61:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:10:49 2025 by rpki-client