Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json)
Hash identifier: p7oESEcxUk066h0Q6ihde5bcFrOuSIgbA5+ZpslSC1A=
Subject key identifier: 6F:5E:F9:D6:F5:66:B1:C5:ED:76:26:85:DB:3F:2A:9E:3C:93:97:99
Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07
Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
Manifest number: 01A0
Signing time: Fri 31 Jan 2025 02:32:39 +0000
Manifest this update: Fri 31 Jan 2025 02:32:38 +0000
Manifest next update: Fri 07 Feb 2025 02:32:38 +0000
Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: VrOZTt9+XvrLg9gZbjdbjBHuhpOWVbFyuuNiWpWu3V0=)
2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507
Validity
Not Before: Jan 31 02:32:38 2025 GMT
Not After : Feb 7 02:32:38 2025 GMT
Subject: CN=679c3646-4b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:5a:da:95:0c:c8:91:62:e7:93:b5:46:fb:
b1:59:db:e7:b8:36:6e:3f:81:1c:76:76:5a:45:01:
a4:de:de:ff:b7:1b:bc:5b:f9:a5:a2:a3:1f:a0:e1:
48:80:de:a8:23:a1:21:8d:8f:7b:18:c7:75:b0:68:
32:5f:fc:30:35:0a:67:45:58:c1:41:3e:ce:6b:94:
1c:74:68:db:3c:84:cf:fe:96:95:c6:17:05:85:94:
08:da:4d:ef:42:79:77:cc:4a:92:6c:28:20:2d:43:
cb:67:9e:a2:4c:c5:15:e0:07:c0:75:b2:ca:b1:2a:
c3:bf:2b:dc:62:bd:77:b7:c1:c8:c7:fd:63:ae:a0:
9e:53:59:76:b2:18:35:2a:c1:df:83:4f:9e:9c:c5:
32:80:99:e9:b7:0f:62:94:64:e9:87:02:05:fa:b4:
0a:3b:83:48:46:7d:5a:4f:1e:20:70:85:b6:a2:1a:
0a:eb:2e:4f:7d:47:e8:59:96:80:11:ad:42:88:a7:
d3:57:e3:23:04:63:5b:d4:4f:51:65:d4:74:11:44:
ca:df:15:a9:7f:48:fa:15:28:63:f6:7c:6b:1b:7c:
99:d7:1b:12:27:2a:09:75:5f:05:8c:b9:5f:ad:89:
1b:80:84:bc:c5:bb:b7:b3:b3:87:28:54:c1:19:75:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:F9:D6:F5:66:B1:C5:ED:76:26:85:DB:3F:2A:9E:3C:93:97:99
X509v3 Authority Key Identifier:
keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3a:f9:7f:ce:d7:db:e1:d6:ed:a9:fc:3f:c7:3e:45:f2:2d:
bc:bc:df:7a:0a:f2:db:af:93:ec:66:c0:a8:14:bd:dd:f8:d8:
92:ab:2b:fb:b5:ab:df:aa:a8:68:e5:0f:34:4d:e5:e9:2f:67:
21:10:f3:d6:09:94:7e:45:4a:35:12:93:f2:9b:83:d5:35:30:
46:cd:f5:7f:f2:d9:6e:3e:c0:04:db:ef:6a:23:64:af:e4:4c:
7d:da:84:97:42:06:7f:de:65:7d:8c:ca:45:4c:c8:bc:79:aa:
22:ba:67:43:a3:95:76:2e:49:69:62:30:c5:38:5e:6e:92:68:
e4:00:1a:84:37:e6:dd:ad:c4:52:ab:01:be:4e:cd:ec:c5:07:
92:d3:e1:e8:99:0c:eb:5c:96:ac:1d:ac:4b:78:60:8d:9d:58:
97:1a:75:b3:f1:40:46:35:f4:6a:91:aa:15:79:f5:de:6a:60:
9b:98:58:1e:1a:e5:1d:06:9b:71:d8:97:1a:47:c1:6c:5d:08:
b0:05:34:21:7f:5c:94:af:65:1d:65:66:f4:e8:90:57:10:5f:
2c:95:c4:00:7b:18:e6:4f:03:0b:0f:f7:59:d2:eb:60:e2:58:
b7:2b:53:7a:f3:24:93:c2:00:2f:5e:fd:28:89:28:d7:6c:2d:
3d:12:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:56 2025 by rpki-client