Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json)
Hash identifier: jnZiCoKstmPRM+fpMQ2zL8tWMJDKrZ8+XpmZVOL65j0=
Subject key identifier: 1E:2F:37:69:28:5C:68:BD:39:10:E5:DF:5B:2E:0C:06:A0:47:75:48
Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Certificate serial: 0619
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
Manifest number: 05FF
Signing time: Thu 30 Jan 2025 22:54:05 +0000
Manifest this update: Thu 30 Jan 2025 22:54:04 +0000
Manifest next update: Thu 06 Feb 2025 22:54:04 +0000
Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: AXkLj/20hTRQv7C8aToLicr8NG50ou1pMVkTXdAAX+g=)
2: 8D54D41CFF4A11EBB2CFB65CC4F9AE02.roa (hash: IySlzgFnWkP7TsDdopcASX0s9EjyawqZzPr968OhJ/U=)
3: 5C75E87C95F511EBA6D31767C4F9AE02.roa (hash: lfQZb+Cu5k1P9aIBAVZr1VIcUuyX72bxEGl/rtrTc0A=)
4: 176E1D3E961411EB80BD4E1DC4F9AE02.roa (hash: guMsQztHXJe0nHYo+3sRzxnbrPq9rNiGro7Edp8V/SQ=)
5: 6CFB0FFCF65711EB8988A924C4F9AE02.roa (hash: 0e9NIIe4Eh6DQ3FvIOOg4nTVMnHbYlzq1N/yU/4pzQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Validity
Not Before: Jan 30 22:54:04 2025 GMT
Not After : Feb 6 22:54:04 2025 GMT
Subject: CN=679c030c-ec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:90:7c:2c:1c:24:06:60:57:df:42:30:f4:
e0:70:40:85:7f:c6:a3:89:8a:d3:76:64:e1:d4:d7:
73:fd:1f:d4:00:81:ef:34:a1:49:5e:cd:55:60:25:
ac:0d:48:69:63:8f:37:ba:87:96:f6:49:ad:f9:14:
02:4f:74:53:65:12:9f:f8:5c:fb:bc:3b:5b:34:09:
a3:74:3d:4b:7d:d0:b4:f1:25:22:de:10:3d:00:b8:
3d:40:ca:1d:d6:24:72:05:50:4f:4e:8a:8c:c1:b4:
d2:bb:05:ef:b9:dc:c5:b2:79:23:2c:e6:d6:43:b4:
45:99:b2:79:56:f4:2d:7b:1f:72:79:9c:be:ad:b3:
a9:91:ca:2b:5a:53:7f:e4:3b:7d:3c:dc:55:58:77:
df:c1:ce:28:92:50:57:1f:4d:1b:47:4c:b0:c3:2b:
2f:98:34:50:b2:73:60:b6:d6:4f:45:6b:99:b4:01:
b3:90:48:7e:7f:56:13:69:60:ef:d5:f0:38:ac:f6:
19:8d:64:14:48:ac:49:c8:84:e3:bf:de:42:2e:22:
9a:37:13:b3:25:eb:53:1f:07:db:c9:ee:93:be:e6:
8e:08:8b:ab:d1:e3:7a:e3:3f:a4:84:ee:37:a7:f8:
0f:6e:fe:01:b2:98:3a:82:da:fd:b3:0a:c2:f3:df:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2F:37:69:28:5C:68:BD:39:10:E5:DF:5B:2E:0C:06:A0:47:75:48
X509v3 Authority Key Identifier:
keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:47:d9:c9:12:c2:b7:0b:cb:ea:a8:b7:f7:00:66:4c:99:
a4:99:97:ef:98:e8:4a:93:f0:63:54:60:35:4b:2b:64:2a:72:
ed:52:9c:57:95:f9:2a:44:1d:ed:da:43:fe:8f:2e:6f:2e:8b:
d6:27:ac:cb:7b:24:c2:b8:7a:35:14:22:ee:82:07:fa:fc:4f:
81:53:6d:08:5e:f9:92:3c:3f:2c:85:11:80:8e:0d:df:af:de:
55:00:74:1e:1c:dc:2d:e0:21:13:68:65:9c:b2:f0:5b:84:6e:
3e:dd:4f:f6:13:41:cd:8a:81:39:69:ff:1a:b5:03:1d:6b:ee:
4f:65:ce:5c:37:5a:e6:96:27:fe:a0:e4:87:34:03:88:46:93:
9c:e9:0b:1e:c9:b8:f9:a7:df:7d:37:38:0c:10:34:49:a6:fc:
2b:c4:12:f1:d8:61:c4:2d:b6:2f:a6:20:fb:b4:ae:9d:df:b5:
1a:de:dd:2e:2b:73:3d:5d:0f:bc:ed:78:86:d0:e1:91:d2:f0:
16:3c:23:a4:0b:54:eb:fe:03:7d:1f:f7:93:e7:ed:af:b5:43:
54:de:d0:b9:67:c3:53:12:02:24:99:01:5f:b5:a6:77:00:e1:
f5:33:85:9d:38:85:4d:fa:0d:5d:da:50:d0:ae:0b:74:dc:63:
63:85:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:00 2025 by rpki-client