Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier: y6Jg7JvlmTiwNWShsdiVXqEof4j7ioILMAt3DLXQjSw=
Subject key identifier: A1:29:CD:B0:C3:55:E0:39:12:17:EA:90:D6:F1:94:F5:B2:C4:F8:D5
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number: 021C
Signing time: Fri 31 Jan 2025 02:09:00 +0000
Manifest this update: Fri 31 Jan 2025 02:08:59 +0000
Manifest next update: Fri 07 Feb 2025 02:08:59 +0000
Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: CohKG6ErGf6LUMzrQ5dauDYsgxDfSQdqJ+DfTOZyCSg=)
2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: bzrwDCcFjUbW1ddYfzBH2lmiEyj4Sa0r3rrfjXsh0+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Jan 31 02:08:59 2025 GMT
Not After : Feb 7 02:08:59 2025 GMT
Subject: CN=679c30bb-e57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:41:ef:18:1f:1f:59:c5:6c:a8:3c:90:52:a7:
99:f3:b3:4d:5c:60:df:55:d9:ed:75:ee:26:b4:52:
ba:f3:35:ab:9d:a2:06:f8:bc:bf:0b:f5:ce:e4:a8:
d5:0e:09:5f:ae:28:6e:d1:2a:41:c7:c5:e5:95:8b:
42:5d:a1:ab:de:53:ca:3a:2e:8e:25:60:b4:03:9c:
3f:00:01:3e:18:4c:46:91:d4:33:87:01:36:f8:c4:
dc:3b:a8:f6:c2:2b:04:ce:1f:4f:51:40:fd:8f:b0:
17:ef:de:2b:22:2b:77:20:05:d8:5f:c5:d3:28:74:
a3:a9:39:8c:ff:9c:94:49:a6:47:cb:51:70:6b:4c:
ba:ec:02:90:c0:41:9c:90:fd:c6:f1:6e:9a:73:28:
62:74:ba:a6:bb:68:b8:40:69:45:8e:4e:cf:40:49:
5a:27:e5:17:5c:5d:9b:9c:a4:73:93:a3:86:fa:29:
b3:16:39:28:f6:fb:ac:e5:ec:5f:e4:74:f0:8f:c9:
e6:6d:58:00:b6:b4:10:ee:3f:a7:ff:62:14:f3:b0:
25:60:26:96:41:6c:2e:44:bb:2b:7d:b8:70:87:7c:
8e:1e:1a:39:2b:ed:54:a5:89:30:aa:3a:db:d7:2d:
3e:39:4f:c0:1b:21:ba:8f:6d:86:b9:50:f8:ed:12:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:CD:B0:C3:55:E0:39:12:17:EA:90:D6:F1:94:F5:B2:C4:F8:D5
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4e:aa:c8:00:3b:11:3d:48:ee:ca:48:35:43:0f:c3:99:2e:
ec:86:38:1b:17:76:37:7d:f4:24:b8:78:a0:44:b2:2f:4c:1f:
88:52:30:8c:f4:4f:5a:11:70:88:cb:5b:5b:17:4c:85:fe:97:
0b:ec:5f:4c:24:a9:aa:3e:1e:b7:ba:3d:c2:cd:2c:84:16:e3:
bf:99:76:8d:8e:de:20:80:ad:58:2e:ef:90:09:7a:ee:ca:25:
34:ca:69:f5:f1:b4:42:eb:c2:97:8d:1e:a3:f1:c0:1b:85:04:
1a:c3:92:00:cf:15:5e:76:18:14:a7:1a:7d:53:30:cf:c0:37:
c3:b6:ad:54:af:5d:5d:52:07:61:47:e0:cc:dc:c0:be:82:fb:
93:c0:dd:11:41:e4:30:5f:7d:75:90:46:51:b8:5a:a1:d9:54:
77:01:fc:4c:0c:bf:a7:26:99:5f:6a:78:79:8d:54:dd:43:1d:
71:3c:4d:80:3c:4b:87:2d:75:8b:b1:ff:12:ca:fb:f8:ec:8c:
dc:34:c5:8b:a7:2b:ce:dc:81:7c:23:41:14:4e:19:a5:41:cd:
42:5f:9d:51:b8:d4:6c:1f:ec:d5:e3:07:6a:37:2d:53:c0:d8:
5e:c3:7f:e8:c3:1c:d8:5d:eb:6d:fc:b5:4d:e7:02:62:e7:bc:
84:33:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:42 2025 by rpki-client