Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier: hrEVJykxQDfppi3KE7vPFE3PFo7U1y6mdVpi5iSaL8Q=
Subject key identifier: EB:18:C3:56:5A:F8:B9:1C:64:92:25:FF:A6:92:71:1D:3B:70:24:B9
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 06:57:18 +0000
Manifest this update: Fri 31 Jan 2025 06:57:18 +0000
Manifest next update: Fri 07 Feb 2025 06:57:18 +0000
Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: DHjmosKYPw9EOPnHzn7jO0xJPPG7vXM9A0xSsWjaIBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Validity
Not Before: Jan 31 06:57:18 2025 GMT
Not After : Feb 7 06:57:18 2025 GMT
Subject: CN=679c744e-0ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:44:34:5b:9b:b4:5c:92:2f:94:6c:9f:28:
19:9e:02:03:c6:6f:42:c4:0a:4f:3b:4e:4b:3b:d7:
a5:1f:48:39:da:3a:28:66:b7:cb:f7:48:dc:3f:ad:
92:5f:35:3a:e7:28:c3:02:82:6c:7f:14:d3:ad:7d:
7e:49:50:6f:64:9f:b6:36:bb:fe:2e:17:80:85:78:
c5:f0:d1:2d:80:25:7a:76:fd:b0:2b:f2:98:6b:9b:
b4:fa:56:b0:27:f9:88:3c:19:b4:46:6c:84:3b:7d:
e3:5d:4a:16:41:03:09:2e:2a:1f:1f:b8:99:26:ba:
2f:4a:66:1b:2a:94:d3:b7:d0:c6:88:57:74:b2:eb:
99:f2:29:92:fb:0e:b0:b5:cf:50:6e:1c:0f:7b:8f:
fd:21:ea:11:5b:94:ca:0b:17:41:13:9c:24:43:21:
fe:63:a1:89:d4:5a:b5:c0:03:b3:5f:32:ee:cf:89:
91:09:01:52:ac:d4:c7:f6:8e:98:9b:ce:7c:e1:e0:
17:5e:2c:ac:38:70:0b:71:b0:32:49:95:98:1d:90:
22:bb:a3:40:f1:d3:33:23:d6:6e:17:15:32:c8:c1:
3c:78:39:ac:c3:02:db:7e:15:17:20:2d:89:79:07:
35:13:45:77:25:b6:57:88:3a:30:44:2a:40:99:fb:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:C3:56:5A:F8:B9:1C:64:92:25:FF:A6:92:71:1D:3B:70:24:B9
X509v3 Authority Key Identifier:
keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:03:84:52:77:90:c1:64:ea:d9:49:4e:93:08:16:8f:fc:1d:
13:f0:2b:f1:c1:62:c8:83:21:5f:0a:e1:d5:50:78:f8:1f:5e:
dd:bc:0b:da:16:96:ae:c7:74:0c:d3:52:07:7b:4d:81:be:97:
31:cb:fe:76:40:dc:da:aa:83:e5:bf:b4:82:fe:7d:d6:d4:b5:
f4:71:28:b8:bc:35:83:d6:8b:03:87:9f:6c:a2:84:08:9c:38:
7e:28:b4:eb:8d:67:79:a2:6c:0d:a4:b5:f2:33:fd:80:d3:ac:
fd:42:fd:cb:07:9f:f5:23:c7:e2:8e:59:2b:58:e8:96:fe:1a:
83:c6:92:57:ed:03:34:e6:aa:00:80:38:83:59:e9:d1:5d:3f:
a1:52:0d:0d:c8:c3:93:2b:06:83:c2:29:ee:45:7b:ae:84:b7:
1a:0b:22:cf:ee:d5:ff:e9:80:ef:3f:fe:53:cb:c0:95:44:0f:
5a:43:70:11:f6:f9:f4:4e:44:26:d1:0f:1e:32:1c:fd:60:42:
d6:a1:b9:76:19:fe:b3:93:46:f7:e4:9a:d3:05:6e:cf:ec:84:
36:20:ff:36:0f:e0:d9:14:59:de:9b:da:6f:2a:cd:74:ec:fc:
8b:29:bf:09:a4:63:a1:e9:19:b2:6f:1f:3f:7b:be:a1:c5:0c:
31:ac:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:02 2025 by rpki-client