Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft
File: KUrNCNoZE4w376-ydKHndXceRT4.mft (raw, json)
Hash identifier: nRSbzDITAPb7AchWL3aJiEer8raI+7PGszFA5vipdf8=
Subject key identifier: E3:F5:AA:28:C2:AE:C9:F2:F2:3B:CB:4C:47:DC:CD:A9:AD:6C:DE:AA
Authority key identifier: 29:4A:CD:08:DA:19:13:8C:37:EF:AF:B2:74:A1:E7:75:77:1E:45:3E
Certificate issuer: /CN=A919C8F9/serialNumber=294ACD08DA19138C37EFAFB274A1E775771E453E
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUrNCNoZE4w376-ydKHndXceRT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft
Manifest number: 04EB
Signing time: Thu 30 Jan 2025 23:45:27 +0000
Manifest this update: Thu 30 Jan 2025 23:45:26 +0000
Manifest next update: Thu 06 Feb 2025 23:45:26 +0000
Files and hashes: 1: KUrNCNoZE4w376-ydKHndXceRT4.crl (hash: 8u42Mu2szDhBzoQBSiVEt2BT921AWq/KSia8kBN8HjU=)
2: 2D7BD4EA03DD11ECA448405BC4F9AE02.roa (hash: KKWKrtsh/34nl8r+0Ut1+Gkgstz0StRYtgWm9ide930=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C8F9/serialNumber=294ACD08DA19138C37EFAFB274A1E775771E453E
Validity
Not Before: Jan 30 23:45:26 2025 GMT
Not After : Feb 6 23:45:26 2025 GMT
Subject: CN=679c0f16-01d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:d0:71:34:94:d3:75:0f:62:c4:83:21:ad:
f9:d7:a8:b2:19:de:e2:a9:ca:4b:56:4f:b1:57:8a:
86:96:0c:15:90:1c:98:e3:bc:c2:4c:83:eb:ba:17:
0a:07:8a:f3:33:57:c8:fc:e8:9b:30:f1:94:5b:e1:
6e:4a:81:74:d4:c2:06:26:2c:bd:c5:fc:6e:4b:10:
7d:49:c2:cd:d6:18:ac:98:d8:95:37:d3:74:0a:5c:
21:fd:86:6f:2c:24:8f:61:1b:37:65:36:90:28:4e:
d0:59:ba:57:3f:94:9c:62:aa:21:27:9b:a1:6d:0e:
6d:6d:f1:57:12:bd:6a:08:34:af:3a:c4:7d:26:d9:
ad:72:f7:be:6a:86:84:e3:0f:86:d4:6c:0d:94:7c:
3e:93:78:b2:1f:c9:eb:63:72:21:24:2b:cc:48:2e:
7c:d7:4b:0f:13:ab:33:58:6e:09:4b:7a:9d:54:e3:
42:35:81:89:c7:87:8a:48:4a:f5:f0:94:d0:6a:24:
10:a7:c9:f6:1c:4c:b8:47:e7:07:44:ae:a9:05:1d:
3f:82:c9:82:1a:4c:5d:d0:a5:6c:3b:59:22:2d:89:
c5:a5:04:9f:6c:cc:3c:de:40:29:97:fb:2a:3c:ac:
e8:32:60:16:f3:b4:aa:80:f2:14:99:29:a8:c1:2f:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:AA:28:C2:AE:C9:F2:F2:3B:CB:4C:47:DC:CD:A9:AD:6C:DE:AA
X509v3 Authority Key Identifier:
keyid:29:4A:CD:08:DA:19:13:8C:37:EF:AF:B2:74:A1:E7:75:77:1E:45:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUrNCNoZE4w376-ydKHndXceRT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8F9/DC6B3614FE6D11EBB83F2B22C4F9AE02/KUrNCNoZE4w376-ydKHndXceRT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:5d:54:79:18:bf:16:1c:a5:3a:96:13:7f:16:20:1d:db:
6a:f7:77:7d:79:0c:a8:43:d9:3a:19:af:d0:47:58:b1:02:a9:
e6:39:9b:59:67:e7:6a:e8:a1:19:cd:32:2e:87:79:c1:5f:a7:
4c:f4:f6:00:62:b9:e6:32:b0:ab:63:af:1c:d6:20:e6:c7:84:
ef:d4:b9:3f:ba:9a:03:98:2d:ef:94:63:3b:5a:78:2e:ae:48:
7b:10:0b:c1:d8:1d:c2:a4:7e:d0:71:cb:4a:fd:c2:d8:40:70:
01:4d:f0:bd:a0:c7:9c:06:f6:2e:9a:e8:63:5a:11:b9:88:71:
5a:98:d8:4c:37:92:7c:fc:2d:fc:c9:ce:ff:dd:e3:44:b3:db:
d1:76:78:69:9a:62:c0:74:0f:30:6f:42:8f:3c:d8:36:24:7b:
1d:f9:14:a5:e1:9d:21:98:1f:04:0f:13:a0:cd:d5:d4:e4:37:
5f:db:70:3d:af:46:ba:36:cb:4c:bb:11:b5:0e:f6:2a:c8:ee:
93:ee:57:88:ab:53:f6:e7:4b:b1:c8:3a:6b:ad:04:f6:13:49:
2b:ae:a8:1b:d8:6a:5e:1d:7c:0c:d1:05:5a:1d:99:a7:d3:7d:
b5:bf:c8:61:91:b1:67:7d:91:c8:b3:ce:71:7b:f3:8c:d0:4b:
c5:6a:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:48 2025 by rpki-client