Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier: 2TSOoFhb/hj2ojG3MJgBfqGydz2mlumUhyLr7g+RrG4=
Subject key identifier: 6B:89:29:DB:7B:C0:CA:DC:53:E6:12:D8:0C:D4:97:94:1A:6A:F9:61
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial: 042C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number: 0428
Signing time: Fri 31 Jan 2025 00:23:22 +0000
Manifest this update: Fri 31 Jan 2025 00:23:22 +0000
Manifest next update: Fri 07 Feb 2025 00:23:22 +0000
Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: mLVEwVEazbGiG4AqU6Q86uTzidi26oJ7+hxJsIp5E9E=)
2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Validity
Not Before: Jan 31 00:23:22 2025 GMT
Not After : Feb 7 00:23:22 2025 GMT
Subject: CN=679c17fa-2438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:0c:e0:b0:39:0d:53:ec:b1:56:8d:8a:88:
00:e5:04:1b:df:4c:a0:eb:16:bd:86:43:c5:9b:4f:
a1:e7:e8:78:ea:bc:8e:bc:9f:17:31:d9:e5:16:c8:
9d:cc:76:89:e5:4e:6a:26:7b:1a:3c:90:f7:73:34:
c4:d2:59:66:31:2b:d7:f0:c7:d1:bf:a0:f9:da:c4:
49:32:bb:41:82:a8:a9:02:01:b0:6d:2e:07:48:e8:
f5:33:87:11:ce:9b:59:54:6d:3d:f8:fb:ac:19:f8:
6b:8c:79:21:b5:3d:96:e1:6e:14:4d:b5:7d:fb:7b:
f7:c7:55:13:c4:00:b1:b3:ed:a6:07:9e:c2:5b:13:
46:55:35:45:e6:bf:22:de:ad:a8:89:84:a0:3e:06:
b7:5b:7a:82:18:58:1f:81:c8:03:96:28:22:ab:b2:
e8:20:c6:f9:fd:c0:0d:19:c0:86:3c:9e:ac:e9:cf:
d1:36:d2:7d:66:a5:c7:41:2a:aa:4f:d3:23:d3:b6:
6f:b6:39:76:e1:2c:97:29:6f:cd:76:07:10:04:26:
28:60:40:e3:c0:d2:68:6e:9f:47:2b:16:8b:fb:ff:
d0:9e:a3:c4:06:3c:f1:24:91:28:0e:53:f0:ac:86:
1a:dc:d0:3a:71:6f:6f:f2:de:d9:43:3b:79:4a:a4:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:29:DB:7B:C0:CA:DC:53:E6:12:D8:0C:D4:97:94:1A:6A:F9:61
X509v3 Authority Key Identifier:
keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b7:51:63:50:88:5e:9f:e7:6f:37:ac:0d:86:a1:5f:0a:0b:
9e:73:41:ff:c1:09:32:99:85:22:48:d3:9a:bd:6b:f1:99:82:
5a:15:4b:d0:c8:ed:4d:62:a9:e4:43:49:ad:80:65:2d:72:5f:
01:04:b3:f0:41:76:30:51:df:eb:c1:d8:68:86:e6:46:87:43:
d8:b3:02:09:9d:91:65:bd:9a:94:56:79:86:35:f4:c4:1a:b0:
63:50:36:6d:b0:d4:ca:69:3a:4e:a6:71:1b:08:cf:5d:46:6b:
42:c6:a7:1b:0a:7c:1e:78:ae:8f:56:0b:eb:7c:6d:c5:be:42:
07:5e:37:a5:bf:c4:40:80:bf:b7:78:11:7c:95:8f:b4:fc:55:
8d:7c:f9:ca:6c:19:b4:c7:95:3a:35:41:bd:73:00:83:de:8c:
d5:f3:b6:cf:0c:5c:97:41:f9:db:34:e1:6c:53:e7:a2:1e:93:
94:3d:56:1d:6f:3d:e3:69:fc:6d:dd:48:62:da:cb:5a:08:fd:
8d:59:76:05:d7:1c:ce:ea:cb:8d:63:c8:26:44:d3:3b:97:ca:
1d:99:78:22:14:1f:a9:3c:fe:e5:39:38:a6:3d:ba:ab:b1:5e:
7b:0f:86:8e:f2:7a:0d:80:0d:69:70:af:d5:2a:74:33:18:37:
d9:ee:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:46 2025 by rpki-client