Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json)
Hash identifier: 4voP5QZV7Sesm28On3pE1JGtcYrBSR19asDFJ6ztNG4=
Subject key identifier: 02:75:05:FF:F3:D9:E4:B0:B8:57:61:00:D9:9A:3B:B0:89:1D:01:A3
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 04:43:50 +0000
Manifest this update: Fri 31 Jan 2025 04:43:50 +0000
Manifest next update: Fri 07 Feb 2025 04:43:50 +0000
Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: EXt7chr1tPVrOvKSA2Vly9sPEbBD4rlMYN1PtR41fd4=)
2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: 3QR/UvKzS+sKKfIIK9uHF2so+MGpUcPtji7e/5xzyuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Validity
Not Before: Jan 31 04:43:50 2025 GMT
Not After : Feb 7 04:43:50 2025 GMT
Subject: CN=679c5506-8033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:ce:74:21:8b:bb:e6:05:ac:31:e9:6f:56:
54:b3:63:fc:0d:4a:d4:41:0f:ef:c0:3c:9a:1c:e7:
18:98:ab:2a:09:b7:f5:c4:9b:15:65:22:b9:f7:55:
64:a0:54:11:ae:57:88:8e:bd:37:9e:79:9b:cc:1f:
ae:d2:55:2c:88:24:d2:6c:0a:81:03:3c:bc:5f:e1:
2c:34:96:bd:c8:f3:c3:03:c9:62:2d:90:6b:65:99:
1e:1b:bf:0e:cf:9f:9b:34:0d:01:39:74:c9:93:cc:
d4:26:e2:11:0c:7b:b8:3c:83:a0:9d:59:9b:d1:97:
b2:03:89:66:53:d4:54:44:76:8f:8d:ee:b1:2d:74:
db:46:16:af:84:61:3a:0e:80:c8:de:31:c1:2b:67:
a8:e9:a7:c3:9c:40:ba:9c:b1:60:31:33:23:b8:72:
f9:42:88:3d:f0:18:fd:17:08:03:06:d4:74:08:21:
5b:b6:02:0b:60:5c:d6:1b:f1:c4:d4:35:39:49:7c:
76:16:a3:f8:7a:74:62:44:2b:f6:0f:b3:83:56:55:
67:d9:df:e3:1c:24:da:f2:44:cf:63:26:c7:2d:30:
33:2b:00:73:b6:5e:0f:58:cd:4d:f1:44:16:14:6e:
2d:c8:c8:b1:ab:b3:32:60:b7:a1:51:d4:e4:fa:e8:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:75:05:FF:F3:D9:E4:B0:B8:57:61:00:D9:9A:3B:B0:89:1D:01:A3
X509v3 Authority Key Identifier:
keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:c9:0c:ad:ce:67:14:01:10:82:93:b5:27:62:69:07:05:d5:
aa:3a:71:65:91:42:b2:10:7b:b9:3a:25:3a:88:0a:c5:a0:57:
4a:ac:e4:83:7c:cb:3d:c3:73:62:8b:e8:5f:4e:80:86:a2:69:
c8:f6:2f:6e:2b:8b:16:c1:6f:c2:ef:98:8c:22:3d:48:9c:4e:
ca:3b:2c:a9:f2:f6:f4:7d:04:7d:6d:23:cc:e3:78:dd:5c:76:
d2:cf:96:e7:40:29:8a:7a:57:be:28:24:7b:bf:50:f8:d1:5a:
ee:b0:fd:e8:94:3f:f1:d9:2e:aa:25:7d:8d:57:81:fb:ee:5b:
5a:b1:af:5d:65:5e:bb:83:cd:47:8d:3b:77:7c:27:e5:78:b3:
46:9f:08:56:97:d8:3a:a6:35:85:3d:3c:9c:b7:e8:41:85:db:
57:89:3d:9c:d0:cb:4c:7e:34:1f:07:4b:11:85:bc:3b:55:bd:
30:a3:f2:1c:fc:2f:72:18:5c:ea:c8:46:74:09:03:be:b7:6a:
15:8b:8f:94:64:58:ea:e7:a6:2a:37:d2:6c:d1:19:e4:8e:2b:
9c:78:fc:ed:ae:d6:3a:0d:fb:fd:ef:a0:90:fa:58:68:04:c9:
6a:31:ed:38:91:9d:b9:0e:10:c6:b6:fe:96:9d:bb:15:a5:44:
d0:8f:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:25:02 2025 by rpki-client