Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json)
Hash identifier: DVDy2ATF6//NzEcLlmoF9EDF+bh2rzDzMruz6WaNJec=
Subject key identifier: 54:E7:FA:C2:99:F5:AE:F0:E7:0C:69:AA:D1:85:FC:21:87:44:B7:5D
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
Manifest number: 016F
Signing time: Fri 31 Jan 2025 03:10:36 +0000
Manifest this update: Fri 31 Jan 2025 03:10:36 +0000
Manifest next update: Fri 07 Feb 2025 03:10:36 +0000
Files and hashes: 1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: /bVnUDTS7feyqKQhP+R495ti/2MhEwMvrc91yZxyE7o=)
2: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: MC0BNQ8WSdb9k6lw5PW7hJBMQ3Zo5Nq5ihUjlKmX1lo=)
3: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: RACB3YknB3cdpFyJZW5lQ48vMsl9eTtZug3dtaWvByM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Validity
Not Before: Jan 31 03:10:36 2025 GMT
Not After : Feb 7 03:10:36 2025 GMT
Subject: CN=679c3f2c-291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:e2:09:8d:bc:c4:54:79:b8:1a:d9:24:db:
e6:b2:2b:11:4c:da:c1:3a:5c:4a:5a:ca:5e:ff:7f:
d6:96:c5:ad:2d:f5:b6:b5:33:49:b8:97:28:6e:db:
f9:fa:ec:64:39:b5:e3:1f:85:80:3c:90:ca:12:c4:
d8:c5:99:e2:bc:f9:46:de:70:38:3b:57:71:a6:0b:
a0:9b:4d:b5:41:df:80:81:7d:27:d7:47:dd:62:24:
df:b4:66:79:c8:9d:1b:e9:38:87:e4:76:25:bb:50:
4b:46:aa:c3:54:a3:c6:b5:de:e8:aa:bd:b6:9e:72:
e4:ca:bd:fa:e7:59:a8:49:45:47:47:22:d6:7a:b1:
f4:b6:7a:b0:b4:02:7a:3d:0c:54:43:84:42:da:22:
8d:1c:0e:3a:86:0b:4e:b6:0c:54:65:7e:55:14:f9:
d7:a1:95:50:c6:97:72:f9:cc:a3:69:12:68:7a:15:
aa:09:c7:1e:1a:48:1a:aa:3e:4d:66:97:67:d8:fa:
81:c7:59:83:59:93:b4:10:96:b0:d5:46:e8:db:b1:
dd:a0:e8:f6:74:55:d7:a5:2a:57:b6:71:17:31:5b:
7d:79:0c:0f:e9:4a:50:9a:9d:ce:44:1b:4f:60:77:
97:5f:94:2e:32:28:50:9f:3d:a4:cb:c7:65:ef:fa:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:FA:C2:99:F5:AE:F0:E7:0C:69:AA:D1:85:FC:21:87:44:B7:5D
X509v3 Authority Key Identifier:
keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:48:4b:bc:cf:b2:b7:37:78:bd:14:b6:76:9b:aa:0b:3d:
a7:fa:85:49:b4:8c:a3:0f:99:bf:a3:3a:4a:e4:ea:d9:cd:2a:
9a:41:89:ef:66:59:d4:b7:19:c5:4a:00:af:fb:60:73:87:de:
8e:93:21:ce:41:f3:75:26:d8:04:8d:c8:f8:53:b8:e4:d0:9e:
b1:b8:1d:a3:08:c4:6a:29:71:ad:f3:f0:33:d5:f4:af:05:b1:
89:1e:3b:d0:57:d6:2c:64:c2:bd:62:1b:45:2d:5f:ff:50:2a:
3b:33:6a:82:f5:06:dd:a0:8a:a5:05:83:77:a2:33:18:59:0a:
c9:b9:46:13:85:78:8e:3a:16:be:44:be:db:90:20:1b:e4:3a:
14:47:ac:23:be:de:22:f6:03:ed:4a:f2:2a:8a:d3:98:59:1b:
72:55:7d:1f:2a:27:05:61:84:6f:52:91:10:d8:cc:ba:c4:79:
82:1b:fc:94:13:51:8b:4c:af:03:97:0f:54:22:48:dc:f3:df:
14:aa:08:7b:1d:51:2d:d8:a9:ee:d0:12:7c:f9:c2:c5:c5:d6:
5e:4a:94:3d:7d:33:7f:a3:35:8b:ff:a5:69:a1:96:d0:5e:be:
f8:e0:0a:a0:24:49:bf:fc:72:00:6f:19:eb:ce:c0:5c:25:1f:
b3:13:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:22 2025 by rpki-client