Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
File: KPut8cC1pCW10h189FxAyqRO3OE.mft (raw, json)
Hash identifier: +8ojUqVZ4EY2qUCW9VRhno0Vw8nawgr5h/+8y28IgDY=
Subject key identifier: 9B:B3:C0:AC:30:3B:DB:54:78:84:55:6D:02:FE:51:5A:D6:87:C0:3F
Authority key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
Certificate issuer: /CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Certificate serial: 0C76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
Manifest number: 0C65
Signing time: Fri 31 Jan 2025 18:10:26 +0000
Manifest this update: Fri 31 Jan 2025 18:10:26 +0000
Manifest next update: Fri 07 Feb 2025 18:10:26 +0000
Files and hashes: 1: KPut8cC1pCW10h189FxAyqRO3OE.crl (hash: iFrOAOrBevE5IoJQEEkmgnHuzYrFnYhwjMbX9RnrHU0=)
2: E8803B90F27411E99E67A342C4F9AE02.roa (hash: j/tViZ0nSoCHoTJaF9BKW+gM3NYgjTtuFHxNByXlgnk=)
3: E73FF93CF27411E99E67A342C4F9AE02.roa (hash: waKC3XDUVxJ9NfsFSQr2/Kcb9rARuPIn5lSsXa8DYwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136AF7/serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Validity
Not Before: Jan 31 18:10:26 2025 GMT
Not After : Feb 7 18:10:26 2025 GMT
Subject: CN=679d1212-f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:c0:10:ac:e2:5f:f3:7a:9f:53:61:f1:26:
ac:89:c1:6a:83:8e:53:35:b5:b3:ea:91:7e:ab:4b:
a4:39:45:6e:74:a3:79:c5:46:98:d7:53:77:cf:7c:
27:14:2b:4f:54:cb:ed:54:a8:1e:d6:d4:1b:10:2f:
57:9f:aa:6c:cc:00:7d:f2:41:24:31:37:05:68:ce:
e6:e2:31:53:28:31:4d:6d:d6:dc:b1:1e:f8:5a:cb:
6d:0b:84:8f:0a:d5:ca:4b:aa:a5:6a:9a:35:5c:34:
dc:ba:b4:ee:a8:39:2c:9f:98:fb:1c:ac:95:cb:cd:
b0:0e:39:3e:17:c4:2a:48:65:66:5e:c8:2c:bf:be:
08:64:d3:66:c2:bc:aa:66:15:c2:0f:86:db:bf:2e:
6f:a1:62:3a:1a:c3:09:d1:23:fa:d1:fe:4e:c6:87:
a9:c7:10:6d:ba:51:b6:47:cc:02:f4:5b:2c:40:f6:
f0:e4:95:7a:f1:32:91:41:a8:bd:f2:38:c2:31:a0:
17:19:e2:4d:77:07:c0:91:b5:7a:ba:b7:7d:32:6f:
f8:cd:89:42:48:52:cf:c1:9d:57:f2:3f:80:9b:01:
54:22:03:b4:e9:51:a7:d8:27:4e:a2:b5:fc:d3:63:
87:93:2f:c4:e3:5a:59:29:25:52:42:79:81:85:bc:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:C0:AC:30:3B:DB:54:78:84:55:6D:02:FE:51:5A:D6:87:C0:3F
X509v3 Authority Key Identifier:
keyid:28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:64:77:72:07:f1:e2:ba:b4:58:7e:bb:83:7d:0d:e8:6d:
48:7c:35:e3:fa:70:bd:bc:85:78:c4:62:56:01:02:a5:af:ac:
14:bd:7f:2c:f4:1c:a6:6d:d4:74:49:d8:87:10:04:82:62:82:
b2:32:a7:52:71:2e:09:76:99:c9:8c:4c:a6:d3:93:01:2a:11:
9d:1b:a4:43:42:d1:43:1f:b1:cf:d4:3e:93:8d:68:9b:64:2a:
44:71:a4:89:99:6b:b7:1b:ac:eb:f9:46:2f:36:5e:ef:14:71:
b5:32:21:56:7d:c3:e3:13:86:58:18:23:a6:8f:5a:c0:f8:6c:
18:92:3c:91:bd:9a:04:dc:07:6e:8d:1d:0d:6b:5d:53:ea:87:
47:05:09:66:b1:f3:55:2b:01:8a:13:9f:c2:29:1a:34:9e:0f:
fd:c9:0e:69:68:10:c0:87:45:b7:d2:4f:09:94:5b:97:39:9e:
dd:5c:fd:0a:f8:2d:c3:a6:82:d9:78:8e:d2:a8:f4:db:46:90:
76:52:c7:47:53:3a:8d:b7:f5:55:f9:2e:c8:ee:8c:e0:1d:e4:
be:8d:5e:26:7c:b3:79:aa:70:b5:de:cd:d5:3f:a1:93:db:e6:
f6:59:7a:6f:0b:91:14:e5:f1:3b:1a:14:04:1d:5b:2e:7f:52:
0b:30:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:16 2025 by rpki-client