Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json)
Hash identifier: BwYbOMLnriQO9Djou+7sj7XPyOHmv13FCrX8Jwrps6o=
Subject key identifier: 8F:DF:79:A6:A5:A9:DC:49:59:00:7E:30:F5:A5:8C:81:C9:09:A6:F7
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial: 194F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
Manifest number: 1942
Signing time: Fri 31 Jan 2025 16:25:37 +0000
Manifest this update: Fri 31 Jan 2025 16:25:36 +0000
Manifest next update: Fri 07 Feb 2025 16:25:36 +0000
Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: 1CCFdh82HR3S3eMG5pwv3tryO7rU7HdMGIZAjIkXmb0=)
2: E7729178378211EF822BAA6EC4F9AE02.roa (hash: RpWQrrzOF7m9VblMswDEPjg4dQz5qJ23/hrPkxdWkfU=)
3: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: Ca2UAKyheAxMu3mmz18qTaLEBY0cF4nQ72JfwkXPvJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6479 (0x194f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Validity
Not Before: Jan 31 16:25:36 2025 GMT
Not After : Feb 7 16:25:36 2025 GMT
Subject: CN=679cf980-0175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:43:e4:7d:0a:40:08:d1:de:43:4d:ca:d2:
b0:30:1f:47:ad:fb:e3:9f:7b:29:9f:00:15:c8:bc:
5d:45:4d:24:9d:de:82:b7:54:c3:c4:81:09:da:91:
1d:c2:ff:d9:05:84:d4:f2:5b:80:03:a7:25:fd:1e:
85:81:54:7e:35:35:a0:ce:db:fd:d5:23:8b:6e:57:
e6:8d:f1:b2:6a:2e:bd:46:8e:96:37:14:aa:94:5d:
5d:d6:16:75:d1:4c:d9:e7:c3:e6:c4:80:40:f7:ca:
de:5f:a4:40:95:24:dd:ee:e1:3f:a3:ed:28:e6:67:
14:64:a3:ce:a2:cf:20:a0:06:5e:75:07:b7:52:d1:
be:a0:bf:22:da:3b:13:0c:3c:fd:3e:7a:8e:c1:77:
ad:0e:a0:d9:57:dd:69:b1:0d:d4:91:6a:42:45:b0:
c2:e9:c7:df:f3:ce:ee:cf:de:fa:ab:c9:be:3a:ac:
79:2a:01:83:ba:7a:c7:21:6d:a4:3f:9a:de:2a:61:
b1:91:02:d1:11:5c:58:05:96:68:c1:ba:2f:63:18:
be:ab:6e:18:7f:e1:0d:de:26:87:e8:d5:ed:0f:0c:
27:a5:4d:3b:23:52:39:24:89:a9:e2:8e:ab:94:c4:
75:1b:cd:4a:16:54:b4:28:fc:bd:47:94:b9:80:4b:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DF:79:A6:A5:A9:DC:49:59:00:7E:30:F5:A5:8C:81:C9:09:A6:F7
X509v3 Authority Key Identifier:
keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b0:67:bb:26:1e:48:47:8b:ce:6d:83:62:c4:02:c9:13:0c:
db:ea:45:f0:27:53:a6:33:39:60:17:69:04:ad:50:49:f6:2e:
d8:fe:d8:22:54:14:9e:35:96:c4:5f:f7:2b:10:7f:fa:e2:9f:
7e:66:77:f8:c8:34:19:db:ec:1e:00:9f:7f:19:45:c0:65:8e:
06:7d:4c:60:ca:9b:9c:93:8d:f4:de:8f:60:17:a1:14:1e:4b:
98:af:30:b4:a3:36:9b:b6:c4:16:e2:e2:6a:3d:0b:1d:35:22:
60:06:2e:9b:ff:dd:4c:ae:f7:33:31:69:20:32:05:dc:c7:a6:
70:ca:5e:16:d8:26:14:d8:6b:4d:52:71:e9:c2:4b:48:05:4c:
c8:28:1a:70:35:7c:76:0a:82:cf:cd:3f:58:06:80:37:5b:86:
b8:00:80:b7:80:2e:03:4f:df:8c:86:a0:2a:df:da:92:91:d8:
08:12:52:46:26:d1:c9:e0:c6:3d:46:98:8b:72:37:f7:64:15:
2f:9d:31:23:84:92:6c:4b:92:77:81:a9:39:38:1c:79:90:7f:
c0:13:a3:09:89:ed:62:1a:ee:9f:bf:50:9e:2a:4d:7e:4f:a5:
9d:0e:e5:82:da:ac:01:17:75:9b:09:80:00:c5:50:7f:8e:9b:
b3:36:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:56:17 2025 by rpki-client