Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
File: 2kcnine73_Ktn5igEaKnoufNYNg.mft (raw, json)
Hash identifier: kossgHJKPp1LG7ZYRhNyhW4ddQdQyfb/Mjr877sQumw=
Subject key identifier: E8:1F:9A:47:44:06:AA:98:AB:F8:27:89:CF:58:2A:8B:31:10:29:37
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Certificate issuer: /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
Manifest number: 5E
Signing time: Fri 31 Jan 2025 06:05:52 +0000
Manifest this update: Fri 31 Jan 2025 06:05:52 +0000
Manifest next update: Fri 07 Feb 2025 06:05:52 +0000
Files and hashes: 1: 2kcnine73_Ktn5igEaKnoufNYNg.crl (hash: YnRnH04KlJMzV8pc+1G1+iov9eqCoIdnU1tVSjKu++E=)
2: 05A966C652DB11EF990CB840C4F9AE02.roa (hash: 7cyDiCG+GWMMc47d/9wE/tr8+3lmCjNtDuQzc5Jy9ng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Validity
Not Before: Jan 31 06:05:52 2025 GMT
Not After : Feb 7 06:05:52 2025 GMT
Subject: CN=679c6840-767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f6:51:9d:0b:60:ba:dc:7b:67:2f:df:f0:ea:
00:b2:a4:b6:66:b1:60:d4:a3:56:60:07:bb:4d:50:
e8:74:d6:47:d8:a0:e0:a8:a8:92:f2:25:58:fe:4c:
f7:81:64:95:a5:e2:21:73:10:50:56:b3:9c:41:f6:
b2:8b:5d:f5:ae:9f:42:bc:5f:0c:59:c7:f6:81:57:
67:9c:e1:81:89:cf:a2:e3:f2:32:4a:0f:71:30:0e:
68:23:fa:bf:81:2f:85:57:14:a4:a0:ba:b4:91:f7:
10:c4:9c:90:0a:1b:38:5e:e7:14:ea:2e:9e:a2:8a:
62:93:29:94:45:3a:07:8f:f7:d2:46:27:c5:c3:48:
5f:cf:03:82:9a:a8:20:67:d0:aa:58:f5:d5:ab:6e:
b6:4a:eb:15:ea:eb:78:1e:da:5b:26:1a:81:59:ef:
d5:94:94:c4:bd:77:b5:c3:83:c9:44:1e:1b:99:b3:
90:94:99:c1:2f:1b:c3:63:a3:e0:f4:cb:3f:a3:32:
8a:94:28:57:a4:17:7a:f5:07:a2:a4:94:ab:be:fe:
77:e6:00:d9:b8:38:e3:0d:ac:af:2a:a1:d8:ae:a3:
e6:54:91:89:41:05:05:4a:e0:7d:37:37:7a:ef:4f:
7d:ba:15:61:31:2d:56:01:45:89:6a:4c:7b:3d:1c:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:9A:47:44:06:AA:98:AB:F8:27:89:CF:58:2A:8B:31:10:29:37
X509v3 Authority Key Identifier:
keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:90:53:a3:f0:ea:f4:e3:56:c5:f9:89:af:b4:63:6f:50:
e3:9c:36:0b:9c:8e:6f:29:88:3a:ab:9e:3d:31:c8:3f:6b:be:
39:28:66:17:4e:76:7b:bb:b7:5d:22:0e:ea:24:63:5c:42:fd:
03:74:3d:21:e1:b3:91:34:ac:72:49:43:45:e1:75:27:a6:a2:
2b:1f:1d:d5:0a:fe:77:3e:58:77:3c:f1:b6:e4:c3:5e:65:04:
10:67:4f:44:d4:a3:bd:38:e5:d2:a4:7a:cd:1e:bc:cc:e3:3d:
30:40:b4:49:87:b7:13:02:0f:48:90:7c:91:16:b4:0f:20:53:
41:55:97:af:ea:4f:34:6b:49:ca:3b:7d:56:8e:6d:96:c9:a5:
aa:17:a4:4b:10:90:5d:77:b8:99:68:9d:4f:6d:07:c2:46:3c:
22:eb:36:e5:52:a8:36:90:2a:36:7e:1a:33:80:58:89:9d:c3:
c3:07:c5:77:57:4c:c6:49:27:3a:33:4a:81:ab:f9:2e:7e:4e:
92:3d:c2:44:ec:69:4a:ba:c9:a7:56:f7:73:5c:e5:29:97:e8:
2e:c8:ef:5b:2b:e5:62:d1:bb:e2:6e:65:17:0e:ce:2a:de:16:
66:c3:12:70:a5:23:ce:2e:d8:c3:07:13:ff:ca:d5:c4:73:b2:
4c:90:04:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:24 2025 by rpki-client