Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json)
Hash identifier: 83v2j7P9ZpH7H625KldUkk8DlHbVGljp9Lh1FyTNbJ4=
Subject key identifier: 69:B3:DD:DF:58:CB:09:FC:3D:D7:2D:A2:FE:19:1F:68:13:2D:8E:C6
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial: 04D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
Manifest number: 04C8
Signing time: Thu 30 Jan 2025 23:53:46 +0000
Manifest this update: Thu 30 Jan 2025 23:53:45 +0000
Manifest next update: Thu 06 Feb 2025 23:53:45 +0000
Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: k2pVf6kUwK7rCdqVQ3Z3214tJ9Bw9/VdkXxV55oRNtI=)
2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: 4Lt0Tl7CzwPdD+nUN6H8aD5LDx+lA968UPs17P0Yr/M=)
3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: xZDUc0WXMGb3zzRRcf41Z8+TBxtXNqxHLCOZ0h8MoWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Validity
Not Before: Jan 30 23:53:45 2025 GMT
Not After : Feb 6 23:53:45 2025 GMT
Subject: CN=679c1109-175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:23:65:e3:9b:14:07:ee:e8:68:0b:6c:e7:
98:0d:58:43:61:a0:6c:96:8d:b4:f1:14:61:7b:23:
04:20:a1:a0:14:f4:f8:1e:fb:7a:e2:d5:df:60:6f:
06:c3:a6:6c:be:67:c4:0b:43:13:cf:9c:b2:7e:f1:
0f:f9:fe:e6:fa:36:d3:04:c9:f8:9d:e9:1c:33:d6:
21:cd:6f:8f:d8:ac:c5:7d:7d:e6:78:cf:a1:6f:10:
3a:e2:46:e9:9a:32:12:63:f3:51:4a:5c:b8:c9:76:
88:f4:2e:41:f0:71:d9:91:80:21:51:d6:e4:1a:c9:
f7:d1:24:97:c2:92:8a:e7:ab:81:d3:56:6b:4a:2e:
13:37:07:cc:bb:70:4d:9a:57:2f:0b:d2:c5:f9:d5:
c9:b9:a6:c1:63:82:01:71:36:fa:6c:cc:be:53:e4:
d7:d8:29:1e:52:bc:cd:91:06:48:89:c2:72:f1:19:
a3:ff:fc:7f:a0:f2:e8:f4:40:bf:01:c8:e7:a6:35:
90:50:d0:25:36:50:af:04:1b:61:79:90:ae:65:4e:
4a:e9:5f:f6:4e:ed:07:86:a9:33:01:72:09:e0:4b:
31:00:c6:ad:0e:5b:46:95:36:78:8f:7f:cb:a9:6c:
a8:ec:1a:f7:50:37:9b:66:12:0b:3f:64:04:d9:d1:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:DD:DF:58:CB:09:FC:3D:D7:2D:A2:FE:19:1F:68:13:2D:8E:C6
X509v3 Authority Key Identifier:
keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:f1:46:ac:9c:7d:be:0a:9d:a5:f8:2d:e7:cc:65:a8:f4:
80:9f:b5:8b:3b:68:23:21:f9:bd:7a:ac:14:7c:4e:86:ab:f9:
88:73:60:58:a4:c8:44:b5:9e:35:69:61:b3:34:31:0f:48:bb:
b7:31:10:c6:94:1d:fb:8f:3c:c9:b8:6b:a9:50:63:e7:83:ba:
9c:84:0b:89:1c:55:cf:8c:c2:a9:58:90:12:d4:57:06:a0:f6:
aa:54:7f:0d:b3:92:eb:a8:f6:1a:9a:bd:29:40:54:b5:a5:ae:
fb:d8:17:7d:a2:d9:47:58:ca:d8:a4:da:c8:51:02:5f:0f:3f:
db:fc:bb:13:22:91:52:b6:ef:89:dc:cd:60:b4:07:ec:ea:1b:
21:e4:8f:ea:d7:72:e1:3c:ee:e3:6d:5e:7e:1f:98:0d:84:08:
39:03:b1:c2:8b:28:e9:72:a4:d7:a7:36:07:2c:1e:1c:ca:a2:
01:a3:2c:9b:30:62:db:bc:eb:cb:f4:74:48:19:8d:5c:59:48:
b2:04:ae:8f:46:db:a5:15:5e:f9:33:f3:6d:f2:a8:6a:b3:5f:
72:fc:e0:24:02:12:27:52:de:0c:84:27:d6:e9:bc:ab:a9:06:
4f:0c:0f:80:58:21:12:25:94:02:38:a4:9a:63:71:51:47:2f:
2f:72:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:52 2025 by rpki-client