Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier: sI+4ni4P0N65n1z6iy+a18rwzBAr+F/3Nl9efvacB1s=
Subject key identifier: 71:9B:B2:50:AC:AB:7F:6A:14:94:6F:EB:A1:4C:1C:C9:23:70:D8:24
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial: 0FAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number: 0FAE
Signing time: Fri 31 Jan 2025 17:28:31 +0000
Manifest this update: Fri 31 Jan 2025 17:28:30 +0000
Manifest next update: Fri 07 Feb 2025 17:28:30 +0000
Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: E5dE9FQAosK+iAb1NNfDWAc6AZtf2jHgOZgSpqrfUB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4014 (0xfae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Validity
Not Before: Jan 31 17:28:30 2025 GMT
Not After : Feb 7 17:28:30 2025 GMT
Subject: CN=679d083e-5945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:c4:97:81:7c:cc:62:86:db:1c:6a:fd:2a:
f5:1b:f5:7a:0f:3d:23:d8:2a:5b:b3:06:97:18:09:
26:a2:2d:7e:f3:da:5d:d3:d6:2a:3e:ba:02:bb:90:
d2:2a:6b:98:0d:bb:80:e1:9c:8d:86:d2:f3:cf:16:
76:80:12:41:68:43:50:d4:aa:b3:c2:8f:dc:14:04:
bd:95:c2:9c:6a:6e:18:89:da:85:3b:6f:06:4f:71:
6d:c7:c1:8d:7c:90:c2:42:d0:c6:40:f2:7b:cf:6b:
de:39:6e:b2:7e:4e:f0:4c:20:ea:0d:36:b3:59:60:
c0:4a:44:14:36:92:d0:6b:1c:a4:c0:3c:d8:e0:0d:
49:ac:76:91:9b:47:b1:db:30:5e:14:ab:e0:51:84:
93:d0:21:2e:d4:fc:99:e9:bd:c2:08:45:6a:f3:15:
37:a9:86:0e:e4:78:32:03:20:07:53:3a:7a:60:d8:
ee:8c:6d:a4:32:f1:ea:9a:f5:cf:54:fc:cd:a9:c5:
d1:82:1e:03:fe:4f:d5:f9:a3:c6:37:c7:60:ea:a8:
19:f2:98:07:91:7c:ce:c3:f5:b7:b0:e3:df:0a:4d:
31:3f:58:37:75:57:46:28:9d:6f:d6:f1:ef:5a:d6:
b3:e4:d5:da:d1:74:18:f7:47:4c:b4:27:92:94:50:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:B2:50:AC:AB:7F:6A:14:94:6F:EB:A1:4C:1C:C9:23:70:D8:24
X509v3 Authority Key Identifier:
keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:1e:9e:89:09:2d:07:7c:fa:77:62:36:a3:9a:db:cd:a6:
af:1d:b6:e9:3d:37:62:b4:7e:19:fc:65:4c:a2:24:b2:56:0b:
10:cf:db:b0:98:03:89:c3:48:84:d0:85:4b:2a:e0:2c:7b:72:
28:13:2a:d8:96:15:b8:64:cc:9b:3f:d3:cd:39:83:f9:08:56:
e4:88:df:9e:ab:f5:da:2e:79:db:82:d6:1f:39:ec:0a:fd:fb:
b8:da:8e:bb:92:51:75:6d:7d:ce:b4:35:36:51:d3:ae:0c:12:
f1:5e:64:bd:fd:7f:4e:78:5f:e6:a9:47:60:83:6f:67:16:34:
5e:f5:5e:5c:ac:4e:25:38:20:3a:14:a9:41:51:5a:d8:91:8f:
cd:89:1b:9d:2f:71:fc:83:b7:bd:da:04:8e:0f:36:1c:1f:cc:
2c:cf:2a:34:83:12:d2:37:f1:0b:b6:11:54:fe:74:8c:e3:a3:
46:69:11:14:5e:a4:2e:02:c2:e0:da:bc:8d:41:ba:35:7f:7e:
b5:31:c4:70:28:c8:af:a2:ab:48:ac:db:17:53:25:0e:ef:31:
19:ff:ed:1f:af:29:d3:1d:5b:c6:f4:b1:20:a4:69:a7:c7:3d:
95:2f:ff:8f:8b:62:af:46:87:2d:85:de:cb:a7:c3:a7:09:fc:
da:0e:9e:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw
QTBDRDJEQkEwHhcNMjUwMTMxMTcyODMwWhcNMjUwMjA3MTcyODMwWjAYMRYwFAYD
VQQDEw02NzlkMDgzZS01OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69LEl4F8zGKG2xxq/Sr1G/V6Dz0j2CpbswaXGAkmoi1+89pd09YqProCu5DS
KmuYDbuA4ZyNhtLzzxZ2gBJBaENQ1Kqzwo/cFAS9lcKcam4YidqFO28GT3Ftx8GN
fJDCQtDGQPJ7z2veOW6yfk7wTCDqDTazWWDASkQUNpLQaxykwDzY4A1JrHaRm0ex
2zBeFKvgUYST0CEu1PyZ6b3CCEVq8xU3qYYO5HgyAyAHUzp6YNjujG2kMvHqmvXP
VPzNqcXRgh4D/k/V+aPGN8dg6qgZ8pgHkXzOw/W3sOPfCk0xP1g3dVdGKJ1v1vHv
Wtaz5NXa0XQY90dMtCeSlFA8iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGbslCs
q39qFJRv66FMHMkjcNgkMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC
MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK
cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLIR6eiQktB3z6d2I2o5rbzaavHbbpPTditH4Z/GVMoiSyVgsQz9uw
mAOJw0iE0IVLKuAse3IoEyrYlhW4ZMybP9PNOYP5CFbkiN+eq/XaLnnbgtYfOewK
/fu42o67klF1bX3OtDU2UdOuDBLxXmS9/X9OeF/mqUdgg29nFjRe9V5crE4lOCA6
FKlBUVrYkY/NiRudL3H8g7e92gSODzYcH8wszyo0gxLSN/ELthFU/nSM46NGaREU
XqQuAsLg2ryNQbo1f361McRwKMivoqtIrNsXUyUO7zEZ/+0frynTHVvG9LEgpGmn
xz2VL/+Pi2KvRocthd7Lp8OnCfzaDp7W
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:37 2025 by rpki-client