Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File: KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier: h9Bc0SmyiWQyl869OyFZ9nypZrKD1zKkxsNWxO6yd8U=
Subject key identifier: D7:9E:0C:B2:F2:DB:DF:CF:2E:47:22:54:75:3E:FD:4D:44:03:00:00
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number: 0154
Signing time: Fri 31 Jan 2025 03:24:49 +0000
Manifest this update: Fri 31 Jan 2025 03:24:49 +0000
Manifest next update: Fri 07 Feb 2025 03:24:49 +0000
Files and hashes: 1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: oUMOcqtbFnedjQMU/E+Oco1bEmfeoVkIKpVeVHXTDcg=)
2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: vRqbrEIa3Ebp4/kjRD23GtQNaRXqlpiIyqZhi9Zmdu0=)
3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: Nzmti6ikO3dYYJ18CJOeeWiZRyxWKdkVvxxrlj7q/RA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Jan 31 03:24:49 2025 GMT
Not After : Feb 7 03:24:49 2025 GMT
Subject: CN=679c4281-1fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:ea:ba:25:3f:9c:63:ff:16:cf:e0:bc:94:
1e:7d:64:47:97:3a:e3:4b:63:c3:b3:be:54:56:89:
55:7a:7c:a3:34:5c:ab:53:cc:db:40:90:67:f6:4d:
90:5a:10:82:da:99:41:c4:37:5a:89:75:da:e9:89:
3d:ab:5f:96:f5:82:33:8b:41:eb:bc:05:bd:f7:4a:
57:a5:de:96:46:9c:2f:38:65:d1:5e:61:d5:d9:13:
2b:6c:42:c0:8e:c0:d0:86:33:1b:ee:7f:50:a1:22:
0d:ec:65:09:18:55:ff:d3:31:37:6a:30:d6:71:08:
55:15:1f:b1:6e:be:2b:38:1d:a3:b8:e4:8c:cb:7e:
eb:b1:77:94:73:a4:b8:38:5f:2e:ab:d9:63:23:f3:
9f:73:a6:0e:f4:f5:e0:1c:e4:4f:2b:93:87:28:10:
14:da:27:aa:ab:e3:7d:a3:1b:d8:47:12:0e:62:c4:
71:b6:3d:44:6d:23:53:b4:30:bc:30:ba:00:a4:7b:
cf:90:ba:1f:2d:0b:9f:51:f1:ae:3c:ff:6d:08:4a:
d9:37:aa:90:0a:47:d2:e3:a2:54:7a:4a:52:ca:3e:
cc:9e:13:96:4b:47:47:59:33:f2:d7:71:90:1b:ed:
1d:a0:a9:cd:67:0c:5c:d6:04:44:30:53:02:df:f2:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:0C:B2:F2:DB:DF:CF:2E:47:22:54:75:3E:FD:4D:44:03:00:00
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:ef:29:32:0c:ea:e7:6b:6a:d8:8b:99:98:2e:87:85:8f:
1c:37:b6:27:b9:29:7d:76:ef:18:b8:b8:e3:33:0b:e7:91:27:
51:81:3f:12:5d:be:31:89:ed:54:13:ff:42:58:d4:b7:6a:15:
7b:39:2d:cc:28:1c:d9:8b:e9:1e:39:96:75:35:08:18:0a:6d:
9c:48:4b:1d:04:dc:28:d2:85:71:28:18:f0:f7:de:1d:c0:a2:
dc:ec:31:ee:50:46:25:78:cd:43:97:30:aa:db:ee:e0:7e:6f:
90:56:d1:5f:98:eb:bc:c1:59:61:36:ac:9e:39:b6:37:b5:3e:
1f:8f:e4:38:68:79:a2:c9:36:b6:74:0b:c4:67:70:d9:95:6c:
f9:af:33:5b:15:07:cb:e2:5d:63:ff:95:16:e6:71:2e:d1:55:
72:fd:f1:9a:9f:15:51:db:6c:d6:97:1a:04:1f:11:eb:ee:99:
c4:5c:a5:3e:7a:cf:7e:47:17:2b:48:3f:b0:32:b8:d4:22:cc:
c7:fb:6b:38:42:2d:ac:a0:a9:19:fc:2d:0f:2a:79:0d:45:87:
01:13:2d:cc:2e:59:ff:c7:c7:93:35:3b:6c:ae:80:fa:6d:9c:
78:80:f7:7e:41:c6:c9:c1:c1:7b:85:61:cf:89:e3:47:10:80:
bd:40:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:02 2025 by rpki-client