Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json)
Hash identifier: Rrxa+QM7iV9DeNmhjtBvjm4j7Vtyrwsd+IkH8KUz1p4=
Subject key identifier: ED:6E:B1:48:83:89:16:F8:59:5C:62:D1:F6:3D:A0:32:D1:86:F4:19
Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Certificate serial: 0353
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
Manifest number: 034D
Signing time: Fri 31 Jan 2025 01:06:48 +0000
Manifest this update: Fri 31 Jan 2025 01:06:48 +0000
Manifest next update: Fri 07 Feb 2025 01:06:48 +0000
Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: 210mDhvgRfpyzEkphnO9R7DITvNxU4cJPE+otDeziJI=)
2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 0e5zzWh6ApozGk/jFChRqF4rHk2hQMmiudaU4V4FOFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Validity
Not Before: Jan 31 01:06:48 2025 GMT
Not After : Feb 7 01:06:48 2025 GMT
Subject: CN=679c2228-c0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:a8:ca:53:9f:94:fd:08:d9:e5:52:51:a2:
db:72:b6:c8:88:90:d4:35:30:b6:95:88:87:5f:a0:
72:15:b4:bc:60:c4:74:ba:68:7d:df:c7:89:40:ba:
e4:37:e9:c2:e7:9e:66:a5:90:0e:50:94:59:e8:c1:
d0:e7:8d:63:4c:28:36:a3:ec:79:20:61:fc:7e:61:
6a:fe:dd:e7:e5:8e:b6:fa:75:0e:e1:c4:f0:60:9b:
c9:44:02:1b:ad:97:8e:bb:8e:89:7c:b2:2b:6c:79:
76:62:b2:5d:48:da:f0:cb:5b:07:32:ee:93:ba:52:
da:ee:13:75:e4:5c:ee:ea:d2:81:1c:25:8e:72:f1:
0f:6e:95:00:62:4f:f5:b6:75:d6:5d:fc:d9:05:9e:
ed:83:fd:43:82:55:8f:64:89:cb:cb:bb:51:8d:62:
dc:fe:61:77:71:24:5e:af:62:6c:85:1d:f1:16:ee:
ce:49:40:39:a8:3b:d7:e8:8a:8c:86:00:8a:07:a8:
a4:6b:83:2a:d2:11:93:96:65:14:2b:85:60:66:7d:
be:3b:31:97:e6:bc:40:8e:2d:04:cc:fa:1e:3d:ef:
90:ef:8b:e6:e3:b9:17:10:08:bf:e2:22:b8:64:f6:
49:db:23:62:e6:c8:79:0a:9a:c5:2d:7f:e0:d9:b2:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6E:B1:48:83:89:16:F8:59:5C:62:D1:F6:3D:A0:32:D1:86:F4:19
X509v3 Authority Key Identifier:
keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4c:90:af:d8:a7:79:d3:0c:49:36:4c:34:9c:ea:ea:0e:98:
39:2f:8e:37:59:f5:3a:64:ed:ac:f1:47:73:78:34:cd:71:7a:
59:d5:f5:d8:75:04:28:bf:a3:4d:62:d5:71:cd:83:5e:e3:37:
e7:9f:b5:4e:00:06:e8:ea:ef:6f:86:b7:40:48:09:0e:e0:38:
bd:fc:52:3f:ce:81:0c:1f:58:43:99:f1:c4:9e:2e:47:84:aa:
12:ee:80:bc:a4:7e:b0:d1:42:7e:ee:42:ec:80:d2:f8:16:91:
28:5e:76:6b:a5:31:f0:ca:c0:48:2b:3d:65:22:85:d1:3d:b3:
20:fc:41:c5:7a:9f:df:f0:3f:f3:5a:01:98:23:22:44:f0:ed:
33:5f:82:3b:9e:f1:30:95:89:38:da:3d:eb:4a:05:77:d8:24:
a8:a0:52:fd:4e:12:5e:29:a8:06:74:c0:08:df:3d:9b:39:a1:
3a:11:28:89:10:75:b1:64:d1:2f:91:05:97:9b:d0:c0:68:d5:
27:27:3f:a7:52:1e:d9:0b:0e:df:f0:e4:19:2e:eb:ad:56:2b:
15:27:0a:9a:cd:49:6d:2c:ee:f3:ff:7e:8a:f4:53:ce:72:00:
6d:c4:28:fc:0d:ac:2e:3e:fb:87:07:44:b3:fd:81:3e:3c:cb:
82:ed:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:48 2025 by rpki-client