Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier: ZRRyRmK/XPMbNlxUbdwfgtlKaT+tlnoHj6PSCOug+30=
Subject key identifier: 7F:C9:E4:1A:3B:84:87:EC:C8:47:45:1F:12:F9:B5:6F:CA:D0:EA:64
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number: F7
Signing time: Fri 31 Jan 2025 04:22:09 +0000
Manifest this update: Fri 31 Jan 2025 04:22:08 +0000
Manifest next update: Fri 07 Feb 2025 04:22:08 +0000
Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: aEodnKhh7Lhuwn0p5a9fRgdaRoQYEQCgva/b1UfLCI0=)
2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Validity
Not Before: Jan 31 04:22:08 2025 GMT
Not After : Feb 7 04:22:08 2025 GMT
Subject: CN=679c4ff1-35d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:11:ff:d0:14:31:f9:ca:64:c6:8b:90:e1:
a2:fa:4e:1d:a4:b1:af:6d:4c:cc:02:8f:ff:75:b7:
ed:f9:b3:13:99:02:ad:ae:7e:e4:3f:e6:a2:b2:a5:
71:0d:d5:e2:32:4f:7e:6f:12:bf:59:4c:62:04:cd:
05:ce:b2:28:d6:0a:6b:af:64:3b:bc:08:6e:e8:2f:
02:5a:ec:4a:9e:dd:8b:78:7c:4b:1e:dc:19:25:d7:
0a:c3:24:bb:11:f7:87:3f:41:47:f3:1e:aa:9f:01:
05:a8:db:88:f1:68:cb:6f:bc:0f:2a:73:90:d1:78:
ac:8a:8f:d2:83:3a:7e:59:74:90:34:7c:80:eb:42:
93:18:d3:0a:9f:f0:a2:2f:7f:7b:43:e6:c4:ff:aa:
81:9e:b6:9a:81:45:9c:73:af:9a:a3:53:13:c1:ae:
5e:aa:de:c4:a1:c4:40:26:bd:cd:e8:aa:cb:5a:02:
3b:6d:e5:f6:43:d3:21:04:e8:4b:81:a5:32:07:56:
fc:a4:0e:41:e9:b7:a5:29:8e:e4:8b:fa:fe:5d:0e:
d0:76:ee:90:4c:62:ab:91:af:5f:5b:17:b6:40:37:
e2:ff:19:74:5a:c7:ff:61:c3:a3:7c:a7:6f:9c:73:
de:d4:40:1e:c8:ef:31:e2:b1:5c:f9:4c:d2:f8:f9:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:E4:1A:3B:84:87:EC:C8:47:45:1F:12:F9:B5:6F:CA:D0:EA:64
X509v3 Authority Key Identifier:
keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:fe:c2:37:9a:95:9f:1d:8f:64:b2:53:58:a1:65:b3:a3:6a:
57:51:21:f9:4a:2d:02:56:08:72:f6:31:6b:05:da:55:a3:d2:
0a:f4:92:ad:a5:45:c6:b7:55:de:7a:89:df:05:3d:59:79:e4:
15:cf:cf:9d:fd:d2:9e:78:fe:6f:b7:db:f8:5c:f5:4d:89:d7:
17:df:c8:47:e1:fb:ae:04:bf:55:d4:35:ed:63:54:98:e8:4d:
72:a7:4f:75:19:96:eb:97:54:7a:50:3e:a2:9e:ac:6b:f9:01:
fc:27:95:56:dd:74:84:61:27:13:73:7e:98:23:b3:78:93:64:
ee:f1:e4:a1:23:96:32:3c:27:c2:8f:fc:c2:19:eb:5f:29:b6:
9e:85:49:7f:8f:2b:b4:52:80:73:31:9d:38:27:5b:e4:82:84:
cb:1e:95:36:ce:55:8b:c7:4d:e1:bb:04:0a:84:58:9b:59:f9:
50:8c:9b:c2:cc:3d:93:ab:a0:1e:fe:5c:89:4a:77:a0:ed:3e:
a5:c8:a1:4a:af:40:2e:c4:04:66:59:5e:bf:30:30:2f:f6:4b:
f3:a1:36:cf:bb:cf:d2:45:19:ec:db:47:bc:4b:0b:57:b6:6d:
ee:5d:cd:9a:0d:9b:f6:38:44:45:ee:60:5f:22:2a:99:21:89:
2e:bd:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:02 2025 by rpki-client