Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft
File: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft (raw, json)
Hash identifier: 42vglLni6XK4WZrr5j2zJWcZx6q++wBBw4itt8bwlF8=
Subject key identifier: 30:00:B8:A2:9B:B4:42:E9:18:87:16:B4:61:32:FA:7E:E1:E9:5B:B5
Authority key identifier: 29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52
Certificate issuer: /CN=A916022F/serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452
Certificate serial: 108A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft
Manifest number: 235E
Signing time: Fri 31 Jan 2025 17:02:50 +0000
Manifest this update: Fri 31 Jan 2025 17:02:50 +0000
Manifest next update: Fri 07 Feb 2025 17:02:50 +0000
Files and hashes: 1: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl (hash: CnKSYJgVdkSvi39S3pR+IVGa6Cs2h/0yvS1lgIqupnY=)
2: DE0A75A605EB11EA94CD7287C4F9AE02.roa (hash: rQZ+LsPDuc4EXnC/GiBOmzFAxUE3pMz5tb4kdOhgWwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4234 (0x108a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916022F/serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452
Validity
Not Before: Jan 31 17:02:50 2025 GMT
Not After : Feb 7 17:02:50 2025 GMT
Subject: CN=679d023a-d2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:46:1a:6d:ce:71:ab:f9:21:f9:9e:64:6b:
c2:2e:c2:6e:a7:26:7c:95:82:5e:1f:80:78:7a:38:
cb:4c:d9:45:4f:f9:f0:15:24:23:8a:d3:2d:94:70:
5c:dd:8b:ed:a2:3c:58:c9:c6:8a:62:86:b6:e3:63:
f5:07:05:8a:fe:4a:1f:7c:49:5d:ec:2c:16:c6:fb:
fc:60:c4:b9:3f:f4:09:56:18:35:66:df:41:94:0c:
48:52:e6:7a:46:e5:38:1b:a0:28:22:20:97:3d:0e:
63:14:d6:6f:f2:8c:ba:d1:a5:bd:49:c1:c9:d1:92:
84:46:ca:be:88:47:2b:46:7c:f0:b0:e7:c5:1a:7e:
6f:8c:df:29:72:f5:69:e6:54:46:8d:0a:69:c5:79:
69:4b:7d:88:7a:c1:6e:3d:d2:2e:1f:2a:4d:ca:b2:
79:c2:15:10:a7:68:6a:27:3b:c9:6c:0b:5e:05:8b:
2b:c0:18:b4:d8:3b:7f:38:8f:2e:0f:dc:7c:47:e9:
b7:05:db:ff:83:86:36:67:eb:38:6f:bb:bd:ee:2f:
94:54:ab:b4:88:4d:08:32:31:ef:23:5c:9a:e4:3a:
01:e3:87:c3:df:2c:3f:53:0d:e7:fe:8b:86:09:a9:
da:f5:cc:97:85:40:35:e9:73:a8:d5:08:04:71:a6:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:00:B8:A2:9B:B4:42:E9:18:87:16:B4:61:32:FA:7E:E1:E9:5B:B5
X509v3 Authority Key Identifier:
keyid:29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:c3:fa:8b:ec:64:69:9d:92:7c:d1:92:a5:11:e4:72:4b:
29:bc:dd:44:10:9b:14:dd:13:24:84:b7:15:94:6d:e1:e3:69:
b6:7f:a5:8f:fb:0b:d5:7d:e7:cd:c1:fb:49:9b:80:0e:d4:fc:
b3:60:65:89:c3:1b:73:57:14:50:64:d8:c5:83:a3:74:d8:0d:
24:2b:ab:62:5c:b6:1e:ed:f9:c2:0e:70:02:df:a5:67:ab:13:
2f:84:de:0e:64:13:79:7d:4e:74:23:35:6d:b6:6c:1f:e8:80:
f4:85:0f:1b:fa:63:89:db:03:81:ad:a7:7a:98:a8:73:5d:0a:
55:92:5c:a0:ea:41:c9:23:df:a7:5e:f4:d5:5e:51:a5:bc:4c:
6c:b0:21:c3:9d:3f:ce:cc:70:b4:2a:87:7b:2c:be:0d:ff:f9:
25:d9:ab:2f:ff:ae:94:a8:3c:9d:14:d7:29:94:70:57:9e:36:
2e:57:4e:eb:9e:69:a6:26:52:f9:8a:9b:42:8c:5e:30:88:a6:
fa:c5:d7:03:8b:87:5c:09:de:07:02:a9:4c:47:6d:31:ae:ae:
af:2f:78:90:cf:05:dc:65:b0:88:7a:b2:4e:b0:ce:0b:d9:22:
01:7f:df:ed:47:00:b1:67:99:20:19:81:c0:8b:7e:d9:7d:37:
84:a6:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:07 2025 by rpki-client