Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File: KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier: oJi+1Kt5ezXkiIQXaqSuYZ1K/N1AEDLJfIYcaVxDWRE=
Subject key identifier: 3F:14:3E:68:02:B7:BC:4E:92:40:F2:C6:A2:6C:82:4A:FA:BC:49:74
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number: 02BB
Signing time: Fri 31 Jan 2025 01:32:39 +0000
Manifest this update: Fri 31 Jan 2025 01:32:38 +0000
Manifest next update: Fri 07 Feb 2025 01:32:38 +0000
Files and hashes: 1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: SoExRD3DDPwz6Po546OTgqq9tBvj8iGmPO9LBU9JTZg=)
2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: X92cUniuja3j0fCsHUIuSIZrgASXCC/Dqmgvow0h/1A=)
3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: OECkIlj17co6mkQPfqLaCAPspTHEJP8pYNRcO1GHXvE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: Jan 31 01:32:38 2025 GMT
Not After : Feb 7 01:32:38 2025 GMT
Subject: CN=679c2837-92b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d1:66:9f:32:1a:d2:8d:d2:01:b2:1a:eb:b9:
2d:a5:8d:48:94:e1:a3:8a:c9:19:59:c8:58:45:12:
59:d8:c0:a4:fc:9e:ba:af:d2:05:99:da:2d:da:98:
9a:a7:24:06:0f:f6:46:75:9d:37:1c:39:de:08:99:
8d:e4:b8:fb:f1:d4:e6:34:b6:2d:1e:41:0b:bd:cb:
57:f7:2c:17:61:93:22:b2:0d:f8:83:3c:9c:0e:25:
7a:87:57:51:07:fa:a5:f2:fe:f1:0a:69:67:c1:09:
1c:5e:6f:40:43:05:ac:b4:e8:39:fb:a5:90:52:15:
54:b0:2b:f2:82:05:f1:b6:f8:cf:66:dc:41:49:e7:
69:8e:ba:6d:f0:d0:97:9b:be:5b:17:b3:8e:93:68:
0d:81:02:6a:35:29:37:2b:f1:f4:9f:09:44:99:24:
4d:93:cd:ae:3c:c4:fa:3b:69:60:2b:1a:51:f3:d5:
78:d2:a9:e7:1d:a5:00:f1:3a:54:5e:2f:48:5d:27:
50:63:47:5f:09:5f:fe:b0:5a:f9:dc:f7:95:17:8c:
ed:f3:b2:b8:7f:11:fa:65:a0:95:1e:b4:29:d1:d5:
52:e8:e8:b9:ba:3a:98:6d:1a:56:33:0f:a3:2c:3e:
08:96:79:33:39:5e:cb:ab:17:bd:97:5c:c3:37:fe:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:14:3E:68:02:B7:BC:4E:92:40:F2:C6:A2:6C:82:4A:FA:BC:49:74
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b4:26:eb:bc:fb:48:ea:d1:fa:86:2f:4f:f8:81:c8:f6:51:
72:f4:34:1f:9b:ac:e9:82:a5:eb:91:ba:38:a1:35:55:e3:85:
c3:7b:45:eb:f7:89:47:bf:1d:8c:8e:d7:f7:86:ec:07:37:3a:
11:58:fb:41:20:fc:f5:05:12:ce:1e:7c:d4:ea:eb:85:96:67:
25:b1:de:91:d0:a7:2a:bb:9b:39:09:7d:e0:e9:0f:d6:7a:f5:
6a:5e:2e:c8:57:5a:60:4e:98:6e:5c:c8:a8:6d:9e:d7:8c:00:
81:d5:bd:5e:d0:07:da:2a:95:68:77:de:30:85:3c:2c:73:cb:
15:77:d2:07:cf:36:6d:ea:24:3c:f0:99:69:93:98:18:2f:25:
87:61:34:20:71:8d:2e:13:90:7d:a3:10:fd:3f:83:bf:eb:c2:
cc:c4:69:a9:ed:2a:49:e8:99:47:34:5a:3e:44:7b:61:04:78:
e2:a0:c6:2e:b8:9f:3c:45:77:a5:5a:db:e0:5b:29:32:0a:a9:
ed:45:19:f7:8c:f9:01:91:e5:ea:dc:b4:02:eb:1b:fe:6a:65:
62:2b:e0:e0:14:70:0b:e5:fb:24:1e:c9:60:ea:80:89:01:bd:
e8:6b:21:d1:4f:0e:01:ec:f5:e8:08:be:33:09:f3:86:48:3c:
c4:74:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:15 2025 by rpki-client