Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier: ZUO9YS97csduGvgH99SwIyGVKBo5okNnkBcDlVtfLJs=
Subject key identifier: 64:A2:BC:EF:6A:C0:6B:8F:A0:B3:46:BA:DD:BB:91:3B:1A:18:6E:DA
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number: 54
Signing time: Fri 31 Jan 2025 06:17:19 +0000
Manifest this update: Fri 31 Jan 2025 06:17:19 +0000
Manifest next update: Fri 07 Feb 2025 06:17:19 +0000
Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: g8boaXbpBMld3HGpgg2Q/ksfkKJrrWpD6y77FeXljgs=)
2: 6BD5C90A647C11EF9BA53B64C4F9AE02.roa (hash: gZZzxWZWc17nIbYko/2au0DsO+Bhzyn2xAf0VZf3CAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Validity
Not Before: Jan 31 06:17:19 2025 GMT
Not After : Feb 7 06:17:19 2025 GMT
Subject: CN=679c6aef-a6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:2f:a5:34:4f:1f:d8:fa:2c:00:dd:a1:be:
0e:06:e7:ae:27:6b:94:a3:5c:64:fa:30:2b:b6:31:
27:ec:00:56:21:7c:99:90:62:63:47:92:df:df:9c:
4f:25:73:a7:1a:7d:9c:fd:3e:5b:6a:fb:78:5c:11:
e7:59:f7:99:32:9a:d2:78:5c:89:46:33:c5:3d:b4:
30:a2:90:2d:28:6e:d7:88:02:75:a4:d1:a4:cf:5e:
49:e1:63:46:da:a7:19:d6:91:ac:82:53:2c:16:3b:
e9:70:f5:16:7c:ed:45:32:96:e5:cd:c0:9b:38:1f:
e6:00:8a:4a:bd:0c:77:e3:54:52:5e:a3:a9:00:85:
98:0d:34:d7:39:15:f9:18:83:ce:54:17:ab:e5:d1:
8d:f3:3c:78:c5:34:3c:5c:49:a3:30:20:bc:49:f3:
4b:b9:c6:c8:17:49:5a:84:3b:5d:bd:17:62:9b:da:
21:d7:e9:e4:59:b1:8b:dc:67:2d:d5:6a:6a:18:f0:
a7:9c:6d:34:81:21:95:09:91:1a:b0:af:7e:f2:80:
48:29:4f:e9:7e:92:a3:f5:f6:90:bf:70:eb:f1:fc:
8f:93:55:11:3f:b5:2b:ce:b2:b6:a2:8b:ab:c7:3c:
2a:c1:80:2d:51:24:51:00:2d:ea:d3:4f:09:74:6e:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:BC:EF:6A:C0:6B:8F:A0:B3:46:BA:DD:BB:91:3B:1A:18:6E:DA
X509v3 Authority Key Identifier:
keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:19:dd:70:9a:0f:e8:4f:e7:86:4b:f0:13:73:1c:71:a6:
96:d2:d7:4e:79:ab:54:5f:59:e8:34:e8:f4:b7:5c:2f:9c:60:
98:6d:cc:bf:63:fa:92:98:4b:19:d2:91:5b:28:1e:cf:e1:8d:
1c:d5:55:4e:75:52:9b:0c:b8:f3:eb:71:82:9a:aa:21:57:ed:
92:24:96:a2:93:0c:3e:ad:46:3c:bc:c8:8a:66:88:5b:b9:82:
08:38:d2:b5:bf:8f:f9:c4:90:2b:a6:ec:5e:c3:9a:3f:62:27:
8e:43:2f:a5:2e:a3:ba:4e:18:2c:d6:3d:ef:77:53:58:7e:3b:
df:cd:b6:22:48:f2:99:9e:31:0f:30:b2:ba:2c:51:48:6f:af:
19:05:47:90:16:9a:b8:ea:48:24:b3:ee:90:0a:e5:bb:85:20:
22:67:bd:f2:15:15:68:a0:31:bd:2b:7e:90:48:48:de:8b:98:
e9:0c:6b:c7:68:45:61:83:57:16:a6:76:0c:50:82:fd:1b:92:
87:af:e9:34:31:d8:fe:ab:a4:55:81:a3:1a:65:ce:41:bf:b5:
7c:80:d5:d0:d6:a2:42:f0:1b:0b:5f:8c:21:5f:3f:76:08:91:
36:cd:7a:93:a4:79:83:4b:1d:f9:9f:f7:e0:90:3f:f5:fa:b6:
b6:0a:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:56:27 2025 by rpki-client