Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json)
Hash identifier: BEt/9CujBGlVQoTY+sf8Dg0/AqZyBlHTfluetKKqkW0=
Subject key identifier: 8C:6E:82:C6:C5:68:A3:12:B2:35:4F:F5:CE:61:70:91:2D:04:81:8C
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 02:44:04 +0000
Manifest this update: Fri 31 Jan 2025 02:44:03 +0000
Manifest next update: Fri 07 Feb 2025 02:44:03 +0000
Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: IEZ/GtVyoI0Ru9l1ZnnHlI4LpoG8EoGl/9c/feOdiUI=)
2: 203FA37E750611ED95126872C4F9AE02.roa (hash: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Validity
Not Before: Jan 31 02:44:03 2025 GMT
Not After : Feb 7 02:44:03 2025 GMT
Subject: CN=679c38f4-92ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:43:2f:43:e5:cc:d1:83:e5:cd:73:9b:7f:
82:96:e8:02:16:22:fa:1a:f8:e2:24:71:f8:0f:bb:
4e:c4:2a:eb:97:18:e3:07:99:5a:e4:c2:48:c1:cb:
16:43:6f:1c:23:d9:4f:a2:9e:ca:9f:77:df:9f:9a:
17:70:f7:06:e2:21:96:15:11:39:a0:c0:ca:80:9f:
8a:74:6a:ca:64:05:b2:40:87:54:5f:6a:34:4f:90:
c0:53:73:a3:80:ff:12:d3:f3:a0:58:c3:ea:37:fa:
de:17:08:b2:47:87:13:b9:79:d6:d7:3b:02:ca:c3:
4b:7e:02:23:8f:fd:dc:7d:ab:6c:18:48:ab:ce:11:
5e:7a:32:3f:bb:4c:50:74:9e:a6:43:e6:de:78:64:
d9:12:0d:b7:7e:13:46:01:7b:66:c9:f2:64:04:fb:
6d:a8:f1:54:81:a8:1c:7d:bb:ae:bc:8e:29:19:c8:
ac:f8:a6:14:e1:54:bf:d4:5b:0a:28:49:df:88:4b:
a3:45:86:be:fe:d5:cb:54:6b:41:59:4a:58:fb:d6:
9b:2e:a1:4d:b6:84:b7:81:cc:0d:d5:9c:da:b9:2f:
d6:04:56:dc:6f:ed:3d:c0:34:5d:c4:7d:c7:60:d0:
58:27:ad:f5:46:ab:10:21:15:0e:0e:59:36:07:59:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:82:C6:C5:68:A3:12:B2:35:4F:F5:CE:61:70:91:2D:04:81:8C
X509v3 Authority Key Identifier:
keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:a4:ee:b8:3b:34:e3:81:db:21:03:5a:19:e0:70:77:34:
a9:69:54:03:93:f6:64:2d:49:6c:a3:a8:09:85:a7:9e:b7:13:
77:94:67:7e:a3:bd:3c:f5:2f:d0:8c:3c:f1:2b:34:e1:82:08:
c1:98:06:20:4d:72:86:60:f2:15:31:e7:38:b6:93:9d:27:1d:
63:7c:d7:4f:fb:e5:27:72:21:09:d8:b2:ac:76:2e:8c:37:9d:
ae:a9:d5:45:b2:c5:69:99:6b:3a:2c:39:3d:05:98:fa:58:1a:
58:57:50:37:79:c4:f1:45:35:92:9e:83:6f:66:70:3d:3f:61:
94:1d:66:3f:93:25:17:c0:74:2c:89:85:08:eb:66:15:ff:2e:
ee:ad:49:e6:c6:a3:cd:ab:a0:82:73:e0:a0:f7:8c:2c:a6:66:
3c:32:ed:9c:fe:9d:eb:a6:8c:32:cc:a3:bf:0b:7c:b3:6f:e9:
d4:e6:0e:f8:c0:fa:c9:ac:0c:2c:fe:8a:0b:95:f6:59:cc:ae:
77:4c:99:4d:eb:dd:66:6d:22:b3:69:a9:7a:df:f3:73:4a:bf:
17:6b:18:39:d8:f1:93:76:52:d7:1d:1d:0c:e6:c4:80:32:6d:
be:76:b7:3e:de:c1:b0:54:36:70:31:fe:e5:49:c1:23:c0:8a:
df:78:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:37 2025 by rpki-client