Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier: BI0mBN0gyzCxpl4ywnVzrRrlQyyE4rGZ+XZSByZ16Oo=
Subject key identifier: C6:83:05:0A:70:1D:63:43:1A:B1:71:85:61:73:AE:4E:D8:4F:20:41
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial: 0ACF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number: 0AC8
Signing time: Thu 30 Jan 2025 19:31:59 +0000
Manifest this update: Thu 30 Jan 2025 19:31:57 +0000
Manifest next update: Thu 06 Feb 2025 19:31:57 +0000
Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: QfFKD4mqyerTu6llETLHTDTiUa0S9H1z00Xw1acEgf8=)
2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: Rrqo0fHhyR6JUNrP9MMcsUE6hhp2tronEE70lXIOPYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Validity
Not Before: Jan 30 19:31:57 2025 GMT
Not After : Feb 6 19:31:57 2025 GMT
Subject: CN=679bd3ae-89c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:5e:ff:44:f6:b5:f8:48:04:2b:10:8e:0d:
e6:22:55:1f:77:85:bb:54:3a:8f:05:aa:0b:10:e8:
01:a2:38:35:b3:f9:f0:e5:32:a9:41:f9:13:bc:ec:
b0:ca:be:0e:b4:11:be:b6:b8:34:56:ca:00:29:c0:
82:93:39:45:95:c3:a8:52:2b:90:11:42:0c:53:7d:
5c:cb:6e:dc:b3:8e:e7:83:e6:dc:4b:26:e2:46:d5:
9b:4c:53:c4:70:70:9f:8d:fa:e8:bd:6d:26:01:0d:
17:70:2e:e4:8f:ee:b1:78:4a:84:de:09:34:c8:48:
73:67:0f:42:72:9d:d0:27:5f:0e:fa:61:56:ef:39:
81:e5:e8:dc:e1:b8:b0:b9:c5:7c:b7:2d:90:14:96:
01:48:cf:7c:7d:39:16:5c:4b:5f:a6:53:66:83:d3:
b0:d2:e0:7a:4d:4a:69:57:7b:ce:00:e4:c6:f8:1b:
ea:d4:36:1b:9e:2c:fb:86:fc:ca:a6:be:e2:ce:91:
26:4c:53:9d:36:72:ec:6b:f7:a7:ba:de:ab:e0:37:
70:eb:0d:c7:d8:4b:e4:87:bd:1b:73:e7:2c:6e:56:
fd:ac:06:85:aa:83:78:c7:94:10:d7:96:ed:01:cb:
91:97:04:38:d2:bd:5a:02:73:d3:6b:04:eb:61:b3:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:05:0A:70:1D:63:43:1A:B1:71:85:61:73:AE:4E:D8:4F:20:41
X509v3 Authority Key Identifier:
keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:4b:b7:4a:17:6e:cd:de:d0:79:9d:3a:66:a3:38:5f:1b:
52:5e:24:c5:4a:df:16:27:2a:9e:65:e2:93:e5:dc:4a:f5:ae:
61:fe:6f:93:fe:68:2b:d2:c0:f1:03:06:62:ee:eb:2c:07:68:
8f:ce:bb:40:b4:1d:19:5d:75:0e:e1:1c:51:62:83:68:6e:2d:
e4:3b:99:a5:63:c4:b0:93:4b:e1:c6:82:17:b0:ff:d7:d2:96:
bf:46:e5:49:9c:88:90:24:a8:4b:c1:fc:72:a1:90:3b:dc:15:
83:3c:76:65:c6:eb:02:f0:3d:fc:60:95:8f:34:6b:54:62:e5:
e2:48:08:61:17:6c:20:8b:38:de:26:ee:03:32:c4:5b:b3:d5:
7e:f4:6f:f5:66:0c:62:3a:4d:20:96:6f:8f:1c:08:a8:8d:32:
da:96:c6:fd:77:a3:18:be:7e:fd:36:1b:b2:f4:c2:4b:e1:76:
2f:4d:b4:67:68:88:26:1c:bc:c3:3a:d8:c5:03:fe:a1:50:b1:
89:84:7c:61:bd:36:6f:7d:25:2a:f4:26:b4:19:cb:ad:2c:ea:
6f:ed:9d:ee:53:4f:fe:9b:93:0f:eb:1c:8b:cc:3a:15:f5:ec:
38:3a:f2:a7:81:5e:0e:ac:d4:d5:19:9d:b8:51:9c:bc:2c:d7:
d3:f6:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:13 2025 by rpki-client