
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier: oupGmXWImgSzh6IHCTsq1W6F959RNLohuup6qfN/dME=
Subject key identifier: 8A:B2:EE:CB:F6:D3:82:D9:A3:BC:DA:15:49:FB:77:2E:F2:C8:F6:A8
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number: 03FF
Signing time: Fri 31 Jan 2025 00:52:20 +0000
Manifest this update: Fri 31 Jan 2025 00:52:19 +0000
Manifest next update: Fri 07 Feb 2025 00:52:19 +0000
Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: ckxP5ycN5tpWHGyebw8RoWRo4bld4iTmYg4pxnqpppw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Validity
Not Before: Jan 31 00:52:19 2025 GMT
Not After : Feb 7 00:52:19 2025 GMT
Subject: CN=679c1ec3-a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:c4:81:18:d6:86:40:00:c2:72:9e:38:99:
0c:f5:d1:b3:48:d6:28:9b:7e:54:f8:b8:3d:ba:63:
7f:2e:87:6f:db:90:d8:f5:6c:ea:91:26:b0:93:94:
81:62:ef:54:f6:4a:c2:b9:01:95:76:73:a5:5e:6e:
a1:37:82:1d:bf:d1:42:73:75:82:3f:bc:4d:21:72:
7e:59:e8:cc:cc:dc:b4:28:ee:0b:84:2d:df:d1:b0:
74:af:b7:4e:50:49:37:90:6b:36:61:89:e8:ed:c7:
1a:23:24:53:14:39:3b:72:5a:4d:52:43:61:f1:52:
0c:47:d9:54:04:77:e7:c9:94:09:61:69:bb:8a:84:
b3:a4:01:b9:97:00:61:59:d1:aa:66:1a:03:31:2d:
06:0e:53:e7:06:09:b4:02:4f:7b:f5:cf:e8:19:60:
5e:04:cd:f6:58:11:88:86:22:e5:8a:b8:24:67:7d:
ff:78:ab:cc:f7:67:1c:a1:cc:0b:9a:45:49:1f:84:
7e:2e:b2:47:f4:b4:d9:2a:dd:13:b6:11:0c:fa:2c:
55:27:b6:53:07:30:70:9b:69:0f:5c:4a:d4:1c:20:
21:c9:11:ce:08:7b:4e:cc:e5:97:b1:36:55:0d:5d:
48:5d:8c:e7:76:3c:d1:a4:98:ff:80:2d:09:42:9a:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:EE:CB:F6:D3:82:D9:A3:BC:DA:15:49:FB:77:2E:F2:C8:F6:A8
X509v3 Authority Key Identifier:
keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:d6:96:68:8b:f4:65:aa:88:e0:a3:90:80:f4:7c:f7:eb:
d4:5f:ac:b0:16:93:f2:96:1d:df:57:6f:b1:95:a9:16:28:c7:
0d:5f:84:0a:6c:82:1c:01:7c:6e:64:19:da:3c:29:3d:4b:58:
8b:8f:eb:2f:64:36:07:e8:d6:cb:34:33:f5:59:2d:40:a1:9b:
2a:f4:38:37:7e:ea:74:60:dd:96:00:42:61:ce:28:36:56:e0:
29:a0:eb:93:f9:4e:73:25:8b:5e:5b:fa:e0:06:5a:c6:4b:d9:
5f:d2:70:5a:3e:42:10:19:9b:3c:ef:cd:2d:32:de:a9:b0:ca:
f8:fc:ce:32:04:b7:2c:5e:65:11:93:6f:5e:c7:2e:4a:fd:40:
be:f8:92:ba:79:61:28:8e:c9:44:ec:e8:c9:e3:f1:50:5f:c9:
00:5d:3b:8e:45:19:48:71:3c:38:c3:4e:26:42:a4:4d:a1:27:
75:45:a1:f0:af:bc:f5:ec:6e:98:4c:2a:26:b0:f3:fb:87:8a:
15:19:d1:40:fd:b7:53:33:e6:08:82:b0:81:83:e0:91:1a:eb:
0f:31:99:69:36:3a:04:8a:4f:ef:af:e7:79:fc:21:3f:45:43:
cb:4e:12:93:37:a3:c6:36:a0:f4:a8:9d:b0:88:8c:93:89:73:
36:99:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:07:59 2025 by rpki-client