Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
File: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json)
Hash identifier: 2ugJfc1GHpqPVQkyl5Niju7abPbwVJS9tAWfXMoEq5s=
Subject key identifier: 4F:C3:BC:52:BC:35:34:42:2C:4A:ED:E1:C3:F7:58:A2:A4:63:56:4F
Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
Certificate issuer: /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
Manifest number: 0102
Signing time: Fri 31 Jan 2025 04:12:09 +0000
Manifest this update: Fri 31 Jan 2025 04:12:09 +0000
Manifest next update: Fri 07 Feb 2025 04:12:09 +0000
Files and hashes: 1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: LGAH8M01wnTTiflWYYPtnwKmOs5RGBv0+kJL5WKCAy4=)
2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: Pojppps22r3xRUUOYA4Lq5WqJQ1e2Svo0KKFdlUH1VY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67
Validity
Not Before: Jan 31 04:12:09 2025 GMT
Not After : Feb 7 04:12:09 2025 GMT
Subject: CN=679c4d99-f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:c5:7c:84:d6:a4:5a:bc:53:44:86:47:87:
f1:94:c2:08:f8:6f:ad:0c:85:3f:61:40:07:be:c8:
e2:2b:32:16:49:6e:f3:d5:0d:e0:7f:e3:f7:64:f8:
d5:36:49:d2:1c:7d:3b:74:37:ec:4f:4e:fa:6d:2f:
5d:f2:20:dd:cd:db:57:66:37:6b:e4:f8:f6:1c:84:
0e:8c:ad:92:ad:fd:72:85:17:ce:38:f7:52:d4:5f:
85:d6:62:0c:b0:95:cf:dd:a0:96:72:0b:54:66:14:
ba:0b:dd:3d:11:68:60:8b:e0:b2:5d:58:54:5b:4c:
af:66:5d:11:b4:47:b8:fb:27:b2:57:1c:3f:22:1d:
2c:2e:1f:7b:9d:7e:eb:bf:b1:73:23:91:19:6f:1b:
a0:08:c8:22:d7:f7:07:19:0e:3b:5f:b1:cb:a0:96:
9f:39:d3:52:6d:16:d0:07:7f:ec:d0:5e:3a:bc:85:
98:9b:b3:ab:3a:78:8e:02:d2:9c:94:29:8b:3c:4c:
ec:13:b2:0d:12:2a:86:75:98:2e:d2:3b:ee:25:74:
1d:fc:0a:1b:01:1d:41:10:4e:69:e5:ae:c4:55:ca:
1e:e6:30:80:0a:e7:3d:ca:97:d8:b0:e7:06:4e:3c:
16:b2:bd:8a:c1:1b:b3:16:b8:00:2b:41:09:a2:fb:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C3:BC:52:BC:35:34:42:2C:4A:ED:E1:C3:F7:58:A2:A4:63:56:4F
X509v3 Authority Key Identifier:
keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:80:ec:f0:4a:50:f9:ac:4a:c6:97:bf:75:71:b6:48:56:
d5:79:47:02:c8:2b:ce:d2:8d:6a:9e:c1:d4:36:ff:d9:bf:b1:
b2:0d:62:3f:4e:b4:02:55:71:0f:9f:1d:b4:ec:08:66:34:53:
9f:c3:da:d9:a5:69:e4:25:4d:65:08:38:9b:09:52:8b:ac:57:
5b:b7:58:1c:09:3f:a3:a5:a8:fa:12:0d:1a:e9:ec:fe:da:6e:
af:b8:2f:31:af:ad:7a:c1:b3:a7:7a:89:44:11:08:cc:50:94:
f4:1d:c0:61:a2:c4:e3:2d:2c:40:4b:10:2d:0a:c1:30:c9:07:
c7:c6:4e:b9:7a:2e:f7:1e:bc:51:55:c8:74:f8:dc:e5:22:69:
74:f3:72:af:26:5a:0b:96:f0:ee:63:ef:d6:12:e1:c1:b2:fe:
c1:d8:89:f5:66:d6:11:80:5a:2f:9c:99:b0:73:ff:bc:85:9c:
e2:35:f3:42:d0:d3:47:fc:32:10:23:c6:ce:a8:37:f8:05:e2:
2e:c1:58:52:30:f6:84:22:db:9c:c5:b7:f2:64:60:88:35:f6:
b7:93:7c:aa:78:29:ed:f3:2a:3b:a0:04:ce:ec:d6:51:eb:94:
9a:24:92:a8:8d:a8:47:e3:40:79:1f:f5:e0:bd:d6:36:f6:59:
37:2f:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:32 2025 by rpki-client