Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json)
Hash identifier: hodxd+gQm45c1OFYP8f6dtXh5Ieb6HK75gsRCvYtVhI=
Subject key identifier: 25:F4:4A:E4:B9:6A:90:F4:8B:BD:9A:8C:CB:95:E6:41:35:C7:29:17
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
Manifest number: 060A
Signing time: Thu 30 Jan 2025 22:48:22 +0000
Manifest this update: Thu 30 Jan 2025 22:48:21 +0000
Manifest next update: Thu 06 Feb 2025 22:48:21 +0000
Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: 1ZWukvtodZ19GZndfAvNcFqtR+tODzbOceMaZRwrAJM=)
2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: QIcvi4uK4+sV4KonLrCq7np3/p5FTh38+jPZf45l5Uo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Validity
Not Before: Jan 30 22:48:21 2025 GMT
Not After : Feb 6 22:48:21 2025 GMT
Subject: CN=679c01b5-7b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:2f:9a:82:76:23:6c:e6:a8:86:db:c2:85:
4c:10:40:de:7c:55:e2:12:9e:e1:70:27:d8:a2:4b:
bd:9f:7a:90:35:91:5d:17:51:b9:a0:df:a6:90:07:
c2:d5:71:f6:fa:3d:66:50:58:7e:12:36:8c:61:3d:
e2:a6:7c:61:72:1d:b2:a4:10:b2:6e:3c:07:27:6f:
f1:12:1e:1b:f6:00:f0:17:34:ba:75:37:c2:d3:5b:
17:6f:16:2a:f7:c7:3d:52:33:f8:e5:35:e9:6b:f3:
9d:74:bc:2b:6a:ef:73:ad:81:9a:2a:4f:f2:f0:5c:
5d:1c:b6:de:5e:a0:5e:fc:1e:7c:f2:ad:ea:e8:a5:
1e:ca:76:86:3c:60:11:62:8f:8f:ae:5a:0a:98:52:
5a:82:72:4d:b3:81:75:49:4b:db:d8:3a:85:2b:5b:
a6:9c:0b:74:31:19:49:f7:35:ac:6c:c1:cc:e2:c3:
e3:d5:61:9b:b9:21:44:36:06:28:58:7b:eb:9a:53:
bb:d9:8d:9a:80:69:83:f0:48:ff:df:8d:4a:f4:d0:
9e:44:05:e3:ec:fd:9c:6c:07:6b:16:33:95:19:e1:
b5:30:06:ce:9c:2d:f0:d2:c2:f0:85:f3:05:04:9d:
6d:60:0a:2f:c9:c2:2f:28:01:6f:4f:62:97:ab:48:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F4:4A:E4:B9:6A:90:F4:8B:BD:9A:8C:CB:95:E6:41:35:C7:29:17
X509v3 Authority Key Identifier:
keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:c4:74:37:40:3a:fe:38:86:6b:7a:0a:fa:c0:39:6b:49:
5b:6a:63:18:dc:90:d5:5b:ef:79:12:cf:28:f6:48:b4:ef:1a:
ee:e3:f1:39:b2:6c:a2:d1:a0:3f:96:0a:d1:e4:d5:d1:2f:6b:
55:2b:09:bb:01:2f:de:ff:05:1a:b9:86:b1:15:e2:6b:b8:61:
2f:3d:5b:ec:8d:6c:c8:c2:f4:60:4e:e9:46:9c:db:2b:49:68:
6c:c5:54:d2:0e:4a:c9:fb:cd:8d:14:6d:7d:f3:db:7d:ae:26:
08:ea:dc:63:5b:7d:74:a0:67:0b:d9:f2:8d:ee:a4:a4:9a:52:
06:2f:8a:9c:77:92:a3:cb:21:0b:e3:74:a7:94:dc:0b:67:c2:
00:6d:02:92:e8:3b:7c:fe:41:14:88:d8:d0:cb:a7:0f:c6:76:
3a:32:59:f6:6a:2a:f3:e2:b2:ca:71:60:e4:1b:eb:eb:3a:03:
eb:69:c2:31:17:a8:3a:1d:62:df:3e:30:ea:39:d9:e0:b7:12:
82:a4:c9:18:ec:65:b6:53:0a:f2:b1:10:96:a4:5d:19:0e:11:
d4:ee:39:53:6e:1f:26:b1:d0:71:ee:55:ce:2b:dc:22:97:39:
47:98:03:2f:12:f2:ca:b3:7c:46:cf:1b:d1:ab:93:50:44:38:
30:53:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:17:39 2025 by rpki-client