Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: n8ZSlH5XmqA02kUfo0XpgUL1MaoEZnqt8qfTpDT1hNE=
Subject key identifier: 3E:40:62:A7:56:4C:E2:08:3C:E9:94:3D:6B:20:BE:40:EC:9C:17:1E
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: AB
Signing time: Fri 31 Jan 2025 05:15:54 +0000
Manifest this update: Fri 31 Jan 2025 05:15:54 +0000
Manifest next update: Fri 07 Feb 2025 05:15:53 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: 9U/Is5gapVbVo/QWZq68hD8jqN9DN99Tumql3gK+iCw=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: C1pdAbl6h5et4uQ/HDMA/uODKhTj4EU2QcxZSh3A4J4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Jan 31 05:15:54 2025 GMT
Not After : Feb 7 05:15:53 2025 GMT
Subject: CN=679c5c8a-b0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:a0:0b:dd:38:25:3b:ab:26:58:e0:f9:33:
0f:f6:d1:0c:5b:60:47:e9:74:b0:b9:6a:e8:a7:5b:
c8:8e:0d:85:64:fd:c8:df:b1:ff:17:62:51:33:0d:
20:56:2c:76:31:ad:ca:61:e7:38:72:ab:9b:02:ef:
e9:2b:88:90:fa:36:6e:4c:91:ff:10:d0:e1:f6:a8:
57:41:13:0d:1a:b8:a1:db:84:94:36:68:22:73:dd:
e3:17:86:ee:c3:12:3c:9e:37:59:f6:4d:f4:8d:21:
cd:d3:ad:d8:1b:87:08:8f:09:a2:c6:f4:62:a4:ce:
0b:e3:15:20:5b:c8:1c:25:e4:40:ae:09:e7:21:0f:
de:68:d2:b9:8d:1d:57:30:cc:1e:39:88:e4:7c:9b:
08:f0:04:18:9e:d4:70:d9:27:1b:c1:4b:b2:13:cf:
fc:b3:6d:5e:db:33:14:26:29:c1:51:24:2f:20:11:
3b:47:90:78:62:fc:5e:ab:73:00:e4:55:17:28:27:
0a:4f:45:a1:ac:59:f3:a0:49:09:7c:28:37:86:7f:
95:5c:ed:59:f5:33:ec:d2:ce:3b:72:b5:e6:24:4b:
da:c4:35:11:03:3c:f9:ba:d5:a5:9f:e4:55:57:4d:
be:57:ae:dc:04:96:e2:7f:9c:a0:1f:fe:36:d4:88:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:62:A7:56:4C:E2:08:3C:E9:94:3D:6B:20:BE:40:EC:9C:17:1E
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1c:ce:de:00:0d:b5:b0:31:80:54:0d:31:7c:3c:5a:0c:cc:
2c:a7:3a:87:87:2c:58:9b:38:e2:7b:9e:a3:c5:00:76:be:cd:
71:74:3c:3f:0c:47:76:46:9c:a0:29:cc:24:1b:df:8a:c4:cf:
f0:80:2b:3f:db:8b:1e:f6:8a:af:76:c2:c8:04:6c:62:90:df:
9f:b3:90:31:c9:d0:3f:37:c0:f8:5d:35:ff:80:d2:a3:96:ca:
88:73:ee:f0:14:d1:f0:35:c9:6d:fe:2a:3f:11:bf:46:3d:05:
b7:e1:3c:08:8d:1a:9d:59:3c:a7:37:5c:a1:6a:ec:fa:44:26:
4f:54:c3:d7:60:63:ed:89:61:21:69:23:60:5f:33:90:c4:8f:
d1:41:a7:d2:c9:b7:9b:2d:1a:7e:55:f5:b1:5a:64:cf:60:2a:
b5:b6:38:12:16:67:5b:17:c1:fe:3e:f8:55:58:17:4f:39:52:
a6:a0:2f:e3:39:11:26:61:9c:e7:1c:bc:b4:5b:67:5d:4d:af:
0a:f1:c5:e1:50:66:74:49:fb:88:3b:b4:f8:c1:1f:17:62:d7:
37:a5:63:52:06:35:df:46:a7:bd:01:ca:e6:99:9c:2a:8f:b3:
c3:3f:ab:1f:52:50:db:b0:38:f3:2e:fc:a4:fd:42:1b:5a:f4:
2d:bf:a8:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy
NDlDQ0M4RjQwHhcNMjUwMTMxMDUxNTU0WhcNMjUwMjA3MDUxNTUzWjAYMRYwFAYD
VQQDEw02NzljNWM4YS1iMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvO+gC904JTurJljg+TMP9tEMW2BH6XSwuWrop1vIjg2FZP3I37H/F2JRMw0g
Vix2Ma3KYec4cqubAu/pK4iQ+jZuTJH/ENDh9qhXQRMNGrih24SUNmgic93jF4bu
wxI8njdZ9k30jSHN063YG4cIjwmixvRipM4L4xUgW8gcJeRArgnnIQ/eaNK5jR1X
MMweOYjkfJsI8AQYntRw2ScbwUuyE8/8s21e2zMUJinBUSQvIBE7R5B4Yvxeq3MA
5FUXKCcKT0WhrFnzoEkJfCg3hn+VXO1Z9TPs0s47crXmJEvaxDURAzz5utWln+RV
V02+V67cBJbif5ygH/421IjxzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5AYqdW
TOIIPOmUPWsgvkDsnBceMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD
RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54
ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChHM7eAA21sDGAVA0xfDxaDMwspzqHhyxYmzjie56jxQB2vs1xdDw/
DEd2RpygKcwkG9+KxM/wgCs/24se9oqvdsLIBGxikN+fs5AxydA/N8D4XTX/gNKj
lsqIc+7wFNHwNclt/io/Eb9GPQW34TwIjRqdWTynN1yhauz6RCZPVMPXYGPtiWEh
aSNgXzOQxI/RQafSybebLRp+VfWxWmTPYCq1tjgSFmdbF8H+PvhVWBdPOVKmoC/j
OREmYZznHLy0W2ddTa8K8cXhUGZ0SfuIO7T4wR8XYtc3pWNSBjXfRqe9AcrmmZwq
j7PDP6sfUlDbsDjzLvyk/UIbWvQtv6gY
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:51 2025 by rpki-client