Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json)
Hash identifier: ZankyrihRoN9kZbGPlIxr2heBFlB4X2pYKFTfJIwRMY=
Subject key identifier: FB:18:8E:06:AE:CF:69:3B:6F:B2:08:05:00:DC:D7:3E:DC:9E:E0:37
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
Manifest number: 035A
Signing time: Fri 31 Jan 2025 01:04:17 +0000
Manifest this update: Fri 31 Jan 2025 01:04:17 +0000
Manifest next update: Fri 07 Feb 2025 01:04:17 +0000
Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: or5CLIuXehjcVeQpZQlUGBMleRoLRCOvavl6Btr28r0=)
2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: NMqAki7QKbcI9560/QHlulosJMID1dw06paSnKMXxq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Validity
Not Before: Jan 31 01:04:17 2025 GMT
Not After : Feb 7 01:04:17 2025 GMT
Subject: CN=679c2191-b2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:b7:60:2f:ed:73:c7:77:88:7e:54:06:f2:
21:90:ca:ba:1b:68:5a:29:d8:27:19:3a:60:94:bc:
bc:93:33:52:5c:ce:50:33:04:90:92:4e:0c:7d:26:
a1:dc:4f:f9:0f:1d:b6:2d:67:52:f3:77:e7:89:88:
5a:e5:42:01:de:7c:8e:a7:d7:ff:3f:e5:f8:21:fc:
f3:56:b0:04:a7:4a:b4:ec:e0:0f:cb:be:54:4c:7b:
04:2c:6c:d4:3a:8c:29:24:ec:2e:bf:fb:3a:4d:e2:
0d:84:1e:bc:90:51:27:44:89:20:a0:5c:42:bf:db:
93:c8:d4:d7:53:1f:b0:36:e2:4c:f4:64:0b:0f:3b:
17:a8:f3:4b:51:b1:3e:38:f7:28:a0:6f:b5:a9:b4:
4f:bb:95:e0:54:a6:62:e5:a5:cb:dc:57:7b:d3:69:
01:aa:a2:0f:23:46:3d:b1:f9:54:7d:39:0f:79:04:
8b:b5:69:9f:d8:94:21:0f:1f:c7:d3:90:c3:99:53:
e2:9f:42:96:79:69:4e:d9:64:17:39:23:8f:04:be:
d2:30:55:d7:d3:20:0f:81:fa:9e:44:ef:4d:b9:93:
e7:10:f7:5e:3f:e9:b3:ba:ea:13:ef:73:93:cd:63:
75:2f:39:c9:38:96:4e:9e:af:4b:df:05:18:3c:bc:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:18:8E:06:AE:CF:69:3B:6F:B2:08:05:00:DC:D7:3E:DC:9E:E0:37
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:2d:98:82:ab:d5:01:96:49:ac:c9:fb:df:bf:c9:08:9c:47:
b6:08:a5:0f:80:b6:6a:ea:bc:e2:bc:2a:3c:5e:3c:6e:b8:d9:
83:d7:26:0c:8c:5a:a9:0b:85:1c:8e:17:c8:d1:d9:58:0c:84:
ec:d7:29:a0:17:a1:12:69:6c:57:2b:bc:1b:20:0d:75:0b:c8:
15:8d:89:36:18:87:4a:e3:be:d3:75:54:da:00:4d:3b:d9:8d:
e7:94:97:45:c3:09:cb:4d:11:41:ee:2b:4a:9f:3d:b2:b6:be:
f2:e2:4d:8e:a9:4b:6d:60:5d:6e:cc:eb:32:33:1a:b7:f1:92:
b0:9f:ed:6e:76:42:11:d2:d8:47:0c:98:34:2b:b7:1f:fd:c0:
12:1f:fd:4a:3a:1c:e0:9b:c5:6b:e9:ec:55:9a:78:0f:49:7f:
a1:cd:e6:8c:14:09:5b:81:38:53:56:e7:be:81:68:04:f2:b8:
22:0b:e6:3c:30:7f:a6:0d:b4:3c:89:62:91:34:b2:8c:85:55:
db:04:9d:42:d1:a5:11:f0:8f:9d:39:b2:91:c5:58:87:8d:ff:
52:61:9c:ef:57:ad:ad:dd:94:88:30:6c:e3:bb:d5:a2:cf:02:
e5:82:24:74:58:9f:a0:ec:64:1c:4a:ff:a0:4d:2d:9e:12:a1:
2e:16:bf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:07 2025 by rpki-client