Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
File: KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json)
Hash identifier: X7O+qbMc0Nn+iTv+yy8yJuu7oBlLORa5WhviiVJ6lDo=
Subject key identifier: 01:CA:63:F7:7B:27:72:7D:B3:DA:5B:B8:37:54:AA:40:97:D6:AE:73
Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30
Certificate issuer: /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630
Certificate serial: 15D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
Manifest number: 15C6
Signing time: Fri 31 Jan 2025 16:47:12 +0000
Manifest this update: Fri 31 Jan 2025 16:47:11 +0000
Manifest next update: Fri 07 Feb 2025 16:47:11 +0000
Files and hashes: 1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: 8KSDe5NQZIZPwKlS2bhoQxCzOPH0cfYN7vnVx4ywQTI=)
2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5584 (0x15d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630
Validity
Not Before: Jan 31 16:47:11 2025 GMT
Not After : Feb 7 16:47:11 2025 GMT
Subject: CN=679cfe8f-ca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:89:1c:fb:38:3a:c3:32:23:80:e0:ea:24:
58:74:b1:bf:3d:2d:a3:2e:1a:ce:5f:c9:7f:4b:13:
a6:72:61:d2:35:2b:e8:fb:37:06:d7:f0:29:a4:d0:
6f:8e:eb:1d:c1:86:4a:cd:7d:33:09:ab:f8:8f:82:
34:bd:b9:bd:64:f6:4c:1c:42:a2:a1:dc:54:b6:6b:
a4:85:82:1d:65:3e:29:1d:6a:e8:19:89:1a:7a:d0:
fa:b2:1b:56:43:ff:f6:13:f5:2a:05:0e:2b:9a:d6:
86:cf:d6:1f:86:2c:af:cf:30:90:33:d2:f7:69:f8:
2b:19:6c:cb:78:7f:1b:a6:ad:6d:a6:ed:9f:0c:b7:
22:02:b1:37:2b:25:b9:6c:c5:89:99:a4:95:6d:8e:
3b:32:be:09:a5:fc:2a:6d:8d:84:78:05:02:77:34:
02:25:4a:3c:f1:da:93:79:09:4e:e0:84:88:be:d1:
cd:d4:2d:28:38:f9:eb:66:55:d2:79:bf:b8:6b:36:
d5:81:8f:61:f0:91:1c:a5:0f:2e:6e:77:27:c1:c5:
c4:92:6c:b5:fa:29:da:52:a9:14:e0:55:05:64:04:
9c:06:37:51:cc:60:99:38:8f:fb:20:a0:83:b0:10:
47:08:23:da:53:24:ab:9b:4c:fd:e8:1f:b3:77:b3:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:63:F7:7B:27:72:7D:B3:DA:5B:B8:37:54:AA:40:97:D6:AE:73
X509v3 Authority Key Identifier:
keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:1d:2e:89:90:91:ef:66:a0:88:f3:a4:7f:72:d5:6f:27:
65:8e:f8:2c:af:5f:47:16:40:20:46:9f:6f:bf:e0:60:b4:86:
df:08:66:70:be:c7:c7:01:d4:d0:b1:0c:fb:4d:c8:65:5f:3e:
da:c7:7e:a0:bc:d2:6e:17:55:ba:3f:e2:fc:c3:18:bf:ce:4f:
27:d4:0a:a6:82:20:6b:33:9e:bc:a3:f0:28:0b:c1:26:c7:fb:
8f:84:0e:3d:fd:46:10:74:1d:3e:48:93:23:98:40:04:bc:a0:
56:ed:6b:25:45:44:a7:aa:7f:2d:d8:48:c3:a8:a5:8b:d1:c9:
dc:6b:2e:4b:06:ba:26:c9:0f:35:36:6b:0b:67:c9:41:1e:56:
66:05:af:66:35:01:4a:19:31:1d:e8:40:1a:3a:cf:90:35:b6:
ba:a2:57:76:97:74:5f:07:f5:2b:81:31:75:04:af:c7:25:e0:
7d:b6:c5:dd:a6:4f:92:85:d5:b0:1e:17:8f:5b:bf:52:04:51:
d2:57:59:ee:ac:5a:25:b0:67:00:22:3d:0a:55:fc:33:87:3b:
d7:fa:51:d6:ed:09:6b:b2:85:85:37:7a:65:15:50:b0:97:56:
85:1d:12:dd:ce:6e:be:d9:a3:47:7d:13:f8:95:fb:57:ec:65:
ee:db:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:54 2025 by rpki-client