Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
File: KyraxZ7M9jhPxeNj8GfDueKemaE.mft (raw, json)
Hash identifier: 4hIDcNUNz6fPiOmQFjUIbQWkQdN0TMLWrTLbt1v/Tpk=
Subject key identifier: 0B:B3:86:BD:F8:44:F4:0A:22:F8:CB:94:E0:24:3E:18:B8:10:0C:1F
Authority key identifier: 2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1
Certificate issuer: /CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
Manifest number: 97
Signing time: Fri 31 Jan 2025 05:28:14 +0000
Manifest this update: Fri 31 Jan 2025 05:28:14 +0000
Manifest next update: Fri 07 Feb 2025 05:28:14 +0000
Files and hashes: 1: KyraxZ7M9jhPxeNj8GfDueKemaE.crl (hash: o3o9fwn5LVEQN+eq6fv7DZrJRkRTGYBN78AGT5p5Gag=)
2: 71B685ACF7E511EEBC67981CC4F9AE02.roa (hash: xS6KKVico6q7YAydoXRQP98J8XdPbnXHA9bQvEcQ3gg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A469/serialNumber=2B2ADAC59ECCF6384FC5E363F067C3B9E29E99A1
Validity
Not Before: Jan 31 05:28:14 2025 GMT
Not After : Feb 7 05:28:14 2025 GMT
Subject: CN=679c5f6e-ccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:e0:b3:1d:fe:88:c3:86:d8:e5:89:34:2c:
60:d2:5b:8a:6a:14:ce:57:83:8c:83:6b:40:07:83:
33:78:a2:ec:ae:10:2e:11:51:a1:94:c3:45:ac:b6:
a2:91:45:49:09:b8:9e:a2:4c:c1:2d:23:b3:69:2e:
3a:62:1d:c7:a2:ea:49:77:82:43:00:7b:66:f6:08:
05:85:63:f7:da:f5:3f:84:07:9e:98:a5:a7:10:2b:
2a:f4:40:67:a8:ab:f9:8f:12:1d:b1:f1:6b:6e:56:
b3:4c:61:3d:e7:eb:ac:d7:22:28:5a:0f:0e:f4:9c:
f9:31:3b:8f:08:13:0a:fc:10:a4:72:c4:21:5f:18:
30:2c:f9:fe:f4:21:11:91:8f:83:9f:43:d1:e6:d3:
ed:84:7b:29:a4:f3:46:36:48:cc:7f:8d:13:f0:01:
11:6a:b4:c3:72:d5:70:75:8c:15:e4:c3:9b:8e:f8:
19:83:07:7c:c1:3d:b2:89:d3:e2:d7:c3:c4:4b:f6:
51:5d:18:67:99:fd:e7:3c:71:e7:11:ce:34:e8:f5:
69:ec:a7:16:a2:c4:be:94:5c:5a:e6:bc:b2:b1:84:
d1:07:e5:c4:d6:b8:71:cf:31:fc:e6:51:a8:df:74:
b0:39:5d:ef:b9:74:8d:7f:b9:d2:50:98:05:d2:bc:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:86:BD:F8:44:F4:0A:22:F8:CB:94:E0:24:3E:18:B8:10:0C:1F
X509v3 Authority Key Identifier:
keyid:2B:2A:DA:C5:9E:CC:F6:38:4F:C5:E3:63:F0:67:C3:B9:E2:9E:99:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KyraxZ7M9jhPxeNj8GfDueKemaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/FF94E712F7E311EEB9A1291AC4F9AE02/KyraxZ7M9jhPxeNj8GfDueKemaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:0a:9f:de:07:bb:69:5d:27:0c:1c:c6:cf:56:51:2c:95:47:
df:e4:ea:83:d8:98:e6:e2:17:ae:90:ca:71:f3:88:87:1f:27:
0a:ae:77:76:b7:03:8f:52:ad:2d:1f:f3:d0:0d:65:74:60:24:
25:73:ee:ca:8f:98:54:f5:d3:4c:4b:68:ec:32:9d:90:e3:42:
3e:eb:42:ff:94:a0:18:ff:d9:f0:49:e2:03:82:a8:d7:72:d5:
61:19:ec:7c:af:78:5d:f8:82:ec:8a:9c:a6:33:7b:f1:79:04:
ff:19:7d:8e:94:3b:13:b3:50:c3:32:92:28:b2:de:f6:2c:57:
02:62:19:5f:a6:e4:79:f8:5a:91:bb:70:30:bf:0c:77:22:1e:
6e:60:e0:ca:83:7b:bf:13:ae:7c:e8:60:aa:e7:20:b1:0d:ed:
ac:8b:34:f6:a4:95:11:11:5e:2d:7a:a6:1a:84:2a:f9:34:6c:
b2:54:1c:83:a5:8d:14:18:74:a6:f4:8a:0d:63:fb:62:08:ff:
dd:cb:0b:98:31:45:5c:36:6d:ae:b4:aa:b2:9c:0c:19:97:b7:
bd:e9:ba:cb:5f:c1:ae:1d:89:c0:47:5c:18:76:88:da:97:7e:
ee:06:ee:4f:ef:f5:f1:01:6d:58:19:64:2d:43:83:56:ca:80:
0c:2a:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:58 2025 by rpki-client