Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File: kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier: ltc7XSPtpN1f+HRoyxvUW1AWLFYfguTUtLYLf5XG+lo=
Subject key identifier: C3:C3:E1:81:3E:FD:7E:8A:35:86:89:F3:A5:DB:28:DB:8E:CA:E4:D1
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 04:43:43 +0000
Manifest this update: Fri 31 Jan 2025 04:43:43 +0000
Manifest next update: Fri 07 Feb 2025 04:43:43 +0000
Files and hashes: 1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: Z2T+cgRCLQTyDCkzQzLHZ+katO8WDc4Qq0Tx9MMpB+U=)
2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: iKey44OboTB8NilxUb2DzRzq18OyDEY6fi5JIxPzxK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Validity
Not Before: Jan 31 04:43:43 2025 GMT
Not After : Feb 7 04:43:43 2025 GMT
Subject: CN=679c54ff-6aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:32:fb:f5:ce:04:c7:19:76:66:40:4a:e7:
7b:07:91:c9:1a:ca:fb:57:e7:27:31:ca:37:a3:5c:
9e:a4:c4:27:e2:50:6a:d9:61:f5:f3:7a:8a:e9:81:
c5:3b:ac:c6:2d:f5:17:24:c8:1b:5a:dd:b3:d8:3b:
cc:50:3d:0a:2a:6f:47:07:d3:5d:10:aa:09:1e:83:
43:3b:81:c9:b4:26:23:1b:91:ba:33:70:f5:94:62:
fb:8e:fd:c6:6d:71:67:aa:27:4b:9f:24:0d:cc:d1:
cf:03:16:7a:d4:db:ca:a8:e3:19:13:93:57:da:b4:
da:76:0d:df:86:1f:b4:e0:e8:ee:48:21:00:62:0b:
64:e5:3e:80:a8:81:06:0e:eb:38:ce:ad:1e:96:91:
d8:2c:23:e1:99:98:71:3f:3e:61:ed:f6:d8:ab:d9:
d0:dd:97:e9:4c:8b:83:dd:e7:e1:7a:cf:a4:6a:3f:
dd:24:cd:c5:c1:1b:68:f1:c4:4c:bf:d1:2a:c0:43:
f4:ca:8d:00:18:3f:ad:16:44:2e:83:f9:da:cb:5e:
b6:1e:90:72:e3:50:e5:d7:45:70:41:ff:f5:c3:ce:
1a:26:52:92:29:ec:20:84:00:e5:db:15:81:f4:d7:
e8:4c:14:cc:5d:c4:47:3f:e7:af:22:b2:58:57:88:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:E1:81:3E:FD:7E:8A:35:86:89:F3:A5:DB:28:DB:8E:CA:E4:D1
X509v3 Authority Key Identifier:
keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:37:75:17:80:ed:02:f5:7e:57:3c:93:b3:20:61:0c:76:
33:32:8b:32:2a:a1:7e:24:62:c1:e1:4e:e8:e2:e2:ab:27:9f:
92:65:da:aa:23:25:47:71:24:3a:00:6e:4e:e6:c0:9e:22:df:
58:bb:63:99:5b:4d:82:f2:ad:42:2a:d4:ee:e2:a5:35:54:05:
9d:c9:6f:e7:28:64:db:cd:97:32:92:19:2d:57:26:28:1f:1b:
1d:80:d2:2e:4a:1b:7f:65:03:fb:4e:07:5f:3f:f8:46:30:d4:
a3:8a:02:6d:aa:fe:05:f8:0f:ca:04:48:a4:e0:35:d6:94:5c:
ff:ce:a6:78:34:5f:60:a5:5c:79:12:5b:a0:1e:67:7f:f4:1c:
9c:fd:de:a3:fe:c1:97:24:64:e5:76:9b:c8:0f:14:98:91:e8:
a9:8c:2c:53:b2:96:2b:cb:02:f7:3c:f6:03:81:1c:fe:4c:8a:
9d:bc:c3:72:0c:3b:f0:be:62:49:1f:21:82:e8:28:2b:d8:4f:
ee:47:f1:c8:cd:11:aa:75:47:34:9a:5a:71:c1:31:c6:8b:60:
c1:29:95:d9:7e:f3:06:a1:cc:ef:c2:af:66:67:2d:ee:eb:e6:
23:8d:1e:63:9d:a4:44:35:02:7d:fb:e8:34:60:26:7f:66:ca:
8f:94:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:33 2025 by rpki-client