Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier: mIVdNrCd7cwkYcPvk2clUctkCgHTC5Uh8crmufxnT8Y=
Subject key identifier: 44:A8:64:C1:8F:86:CA:64:41:84:70:2B:1F:BC:79:0F:18:62:14:10
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number: 0A63
Signing time: Thu 30 Jan 2025 19:49:00 +0000
Manifest this update: Thu 30 Jan 2025 19:49:00 +0000
Manifest next update: Thu 06 Feb 2025 19:49:00 +0000
Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: NvxMWeyNalKPBZV2lpctmL5hmEYd1lA8Q0PguvlbTJ4=)
2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: vez5gs+Pt4ya6YLdOueO0QMF6IGNEZr0U1SUVMLX8CY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Validity
Not Before: Jan 30 19:49:00 2025 GMT
Not After : Feb 6 19:49:00 2025 GMT
Subject: CN=679bd7ac-80c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:2b:85:63:e2:17:7a:5f:4c:09:78:7e:4e:
91:5f:de:c3:52:dd:0f:d5:62:bd:8e:e6:3f:76:59:
8b:ca:38:3c:6c:df:d8:70:29:ed:40:20:b5:bb:9d:
d3:8f:f7:5c:b1:c4:75:56:ee:e0:fc:30:42:77:0e:
24:06:cb:fa:c4:68:e7:4f:3e:56:62:47:9b:6d:cc:
ca:79:3f:2b:d6:91:32:a1:4e:28:b2:e9:87:79:d4:
d4:ef:9e:a8:63:c6:5a:c6:b4:03:ca:c0:5a:0d:cf:
ba:1c:43:6e:46:db:09:55:25:68:ab:7c:b4:09:90:
0a:e0:cb:c7:07:09:74:48:51:cc:89:9a:bd:cf:d4:
49:31:9a:fc:45:68:e6:64:51:7b:91:20:e2:55:a5:
fd:ef:a0:9e:2f:36:0e:46:ff:1f:52:bd:ab:25:c9:
76:2c:d8:97:fb:f6:dd:af:19:0b:62:1b:1c:ed:2b:
c4:62:0e:63:f4:cb:53:5e:69:59:15:d3:a8:fa:86:
5e:71:5f:1f:4a:2c:3f:f5:d3:aa:9a:11:1b:48:3c:
b9:4b:66:b9:f5:8b:d9:03:e4:fe:41:6d:83:53:1f:
bc:63:79:aa:ba:f3:43:c7:f3:87:46:ca:4f:e2:34:
5a:cc:fc:01:1f:43:ce:77:ec:06:94:df:af:b0:f4:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:64:C1:8F:86:CA:64:41:84:70:2B:1F:BC:79:0F:18:62:14:10
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a1:7f:8a:49:f7:eb:25:3d:58:17:a5:b5:cf:8b:0a:9f:b5:
79:11:37:56:f9:59:ba:1d:5d:42:bd:ae:ec:dd:60:0a:b4:0c:
79:b9:52:08:fa:f2:a5:15:ea:27:da:7c:9e:02:fb:c6:93:d4:
36:17:e0:2c:b5:52:f6:ec:55:75:75:6c:91:0e:9a:fa:d5:e9:
9b:4b:b7:ef:98:32:f8:54:61:f9:a1:d4:e2:f3:85:0b:d5:11:
b6:a9:58:dc:0e:90:87:a6:7b:38:99:90:51:80:45:db:27:aa:
46:f0:7d:4d:93:e8:a8:e6:e5:3c:c3:b8:6c:57:76:15:ca:d1:
0c:24:11:87:45:12:78:e8:a5:32:42:46:be:6c:12:ef:64:ae:
e8:a5:5a:7b:e1:2d:c4:41:99:b2:2e:2b:91:76:11:31:74:26:
54:34:a1:e8:13:72:96:0c:45:10:f6:3b:cf:72:75:5d:c7:53:
54:39:f0:70:24:5c:1d:49:1f:69:95:ff:b7:cf:a6:74:74:5c:
32:77:a4:a3:ff:ad:99:74:45:3c:e6:8d:e2:d8:77:73:d2:44:
31:d6:c6:35:e8:c5:bb:53:eb:f9:c2:04:08:df:2a:3f:1a:56:
e5:c2:85:f4:68:2d:da:a6:a9:bb:69:7f:fb:c0:11:29:67:90:
ea:bf:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:55 2025 by rpki-client