Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: i4d7NQ1J3VDVJiqB7xnUM41fQJv6PXVNy4sZS8/MHvk=
Subject key identifier: CD:3D:C9:4C:5D:5F:FE:0B:73:C7:9A:56:F8:39:36:97:FC:D2:22:98
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 03DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 03D7
Signing time: Fri 31 Jan 2025 00:45:41 +0000
Manifest this update: Fri 31 Jan 2025 00:45:41 +0000
Manifest next update: Fri 07 Feb 2025 00:45:41 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: NLlLT4gXXBZIoNreWOO2HWmucztK3EZP+4JXq3Pd+nY=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: h7xEXaEvYTfu7GxDgzGy92oe3f4LEj4g8nYpzof+3gw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Validity
Not Before: Jan 31 00:45:41 2025 GMT
Not After : Feb 7 00:45:41 2025 GMT
Subject: CN=679c1d35-404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:5b:9b:25:a5:e2:e5:31:be:93:97:bf:b3:
b7:70:f9:0e:61:fc:5e:ec:58:ba:4f:55:e8:db:c1:
c6:5d:6b:8a:30:88:78:74:a2:d9:2c:0c:7e:54:f2:
cf:62:4f:bd:8f:05:a0:46:64:2b:a2:af:1e:ee:cf:
bd:10:33:cb:b6:a0:e4:ec:ef:ef:8c:8a:dc:7e:f9:
74:a9:75:62:43:5f:1f:ec:55:5a:f5:af:ef:46:75:
16:ac:c0:31:9d:45:8e:33:46:97:73:27:08:64:39:
8c:0a:25:03:27:64:1d:2e:43:8d:27:a6:88:6a:7e:
3c:a7:b6:7f:19:10:86:23:2f:8c:f1:e8:42:6e:51:
39:f9:66:62:0f:3c:3b:ad:bb:6f:6f:fe:88:fb:e2:
5b:64:9f:af:0e:7b:92:85:69:ff:45:55:7c:35:81:
79:20:50:6b:d5:dc:a2:3a:57:3e:f1:5d:76:17:da:
8c:3a:c7:14:3d:a2:ae:94:af:a3:6e:98:59:f9:9f:
aa:95:aa:9f:2d:85:0d:4c:4c:21:9c:7b:c6:3e:31:
24:65:1d:67:67:08:2c:33:c8:56:2c:da:52:96:4e:
52:53:4a:66:7c:90:ce:3e:a8:02:e8:ef:ed:c9:8d:
69:66:4f:fe:eb:ab:f4:08:7d:a3:19:4c:a5:b1:69:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:C9:4C:5D:5F:FE:0B:73:C7:9A:56:F8:39:36:97:FC:D2:22:98
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:c7:3d:a6:80:61:2c:57:e3:df:ed:c8:cc:f9:95:c1:fd:
16:86:07:92:a7:21:0f:e6:73:63:53:48:58:10:f9:4c:55:e3:
a1:a5:26:9e:16:0d:6a:7c:16:43:60:cc:c1:6c:56:d6:b6:78:
95:d4:95:e8:81:8f:dc:87:48:5a:4a:0f:19:42:b9:0b:42:13:
6b:85:63:d7:18:c2:22:8f:03:d8:52:99:fc:d0:28:23:ec:cb:
d1:99:6c:cc:34:70:7f:4a:df:50:06:80:10:2c:2c:fe:3c:46:
02:3e:dc:af:48:29:90:3c:13:ad:7b:a9:51:6a:64:7b:de:60:
a4:67:13:89:7b:a8:df:c3:e6:07:39:28:b7:0b:dc:fd:da:c3:
33:a1:f7:19:73:3e:c6:45:af:c3:44:1c:83:88:50:f1:b9:c1:
9f:3e:c9:c6:52:7d:6d:8f:24:d6:98:99:6b:b0:e8:cb:a3:1d:
9c:a0:28:82:01:4d:f8:97:92:84:20:21:76:5b:5f:26:1d:93:
31:64:87:c8:e2:e6:61:f0:2d:2f:52:9c:18:8d:c5:19:85:aa:
cd:4d:94:d7:12:27:77:78:35:80:aa:36:4b:22:84:5b:34:2b:
0c:e5:ea:0e:ac:25:bc:63:4b:8d:df:39:0a:9b:ec:a0:b1:21:
e0:e5:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:50 2025 by rpki-client