Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json)
Hash identifier: oWFdGfVNNpFQyGss0UlzvOxzUrSS9EAqq2tAVxPRCUo=
Subject key identifier: 66:80:7A:39:F5:FD:F5:20:52:41:A0:AD:C6:E7:6E:63:F3:64:E3:83
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
Manifest number: 041B
Signing time: Fri 31 Jan 2025 00:26:26 +0000
Manifest this update: Fri 31 Jan 2025 00:26:25 +0000
Manifest next update: Fri 07 Feb 2025 00:26:25 +0000
Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: 6fDXR69ao/AJJboyk73zNLPwYvW4ULdM7qgrdL0AybQ=)
2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Validity
Not Before: Jan 31 00:26:25 2025 GMT
Not After : Feb 7 00:26:25 2025 GMT
Subject: CN=679c18b1-0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:d4:30:f9:fc:37:f0:e2:1d:d7:06:df:5c:
ac:bb:c4:14:69:7e:e3:db:2d:93:28:90:a0:41:ca:
e6:2d:37:c2:48:89:11:cd:91:7e:61:42:6d:b8:38:
f3:82:b6:8c:4a:6d:70:23:45:6d:25:1c:94:11:bf:
9e:f1:7f:ed:a9:9d:dc:dc:35:51:87:fd:bd:82:a3:
b0:6f:13:5c:a9:92:0e:a8:69:89:40:78:97:23:fb:
f0:c8:64:ff:0a:92:b2:d5:bd:f1:f6:a5:ce:88:bf:
ac:2f:c9:24:fb:4e:7e:1b:e8:24:9a:1f:69:06:b6:
50:e1:62:81:c1:42:63:e5:03:88:30:51:9a:29:96:
21:7f:90:04:9b:59:e7:0b:82:73:b3:4a:ac:1b:15:
ec:90:fd:47:02:38:2c:fb:32:d5:5c:fa:9c:18:cd:
6c:cb:51:12:c8:b9:56:5a:6e:3d:c0:ca:1c:70:d8:
bf:ce:44:4c:16:5a:28:6d:8d:cb:2a:c4:f6:b1:97:
f4:1e:0a:b4:45:fd:67:a0:33:61:c8:09:af:7c:59:
bd:1c:77:1e:de:c4:f6:b2:43:ce:11:4b:75:8f:c3:
31:b6:c1:9a:d8:76:09:42:71:bf:96:ba:09:f2:e2:
83:b3:9a:c7:72:ae:7e:43:af:70:99:d5:81:31:f9:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:7A:39:F5:FD:F5:20:52:41:A0:AD:C6:E7:6E:63:F3:64:E3:83
X509v3 Authority Key Identifier:
keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:81:68:f9:57:20:b6:08:aa:d7:64:46:96:3c:df:f3:9f:b9:
02:4f:4e:3f:cd:a1:c5:3e:9a:00:38:10:6c:c8:8c:b1:7c:60:
33:9a:9f:78:cc:46:00:97:be:04:75:d8:35:73:0d:73:ab:46:
4e:13:7b:b5:0b:a8:0d:f8:c2:da:bc:e6:37:1b:d3:dd:17:42:
70:f9:18:03:21:f6:28:64:bd:90:cd:22:55:f9:89:49:c4:d7:
98:c3:c0:92:13:38:ed:e3:76:54:8f:40:a1:e2:f3:02:64:7b:
e0:be:b9:7c:e7:65:33:94:2f:28:66:54:42:cd:a1:df:fe:7c:
b5:98:29:41:4e:d6:ea:2a:7d:60:17:a4:3a:a5:5f:dd:c0:b2:
0d:56:31:72:2f:5f:b6:07:a6:a0:9f:c0:7b:61:a0:ca:17:8d:
b0:17:68:25:9b:d3:f6:62:7c:12:4e:32:04:fa:23:c6:2e:20:
50:bd:b7:8e:6e:41:1f:55:47:1e:c7:b9:bd:94:03:4b:01:a0:
b5:5c:08:74:b1:1e:eb:9f:37:03:0b:48:09:ed:ba:26:ed:60:
a8:72:e7:ea:0d:56:11:92:d7:cc:ba:4e:37:31:c8:4d:5b:15:
ae:60:87:03:20:91:91:16:e0:8a:0f:7b:9c:9e:3b:10:47:82:
24:42:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:52:40 2025 by rpki-client