Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier: 51R3A3zV66y8gkPE9lkoqgdw43b3HTSbfw0a4lSgFak=
Subject key identifier: C8:FC:B0:63:27:B9:D2:DB:7A:58:CC:7B:ED:75:C6:DD:3E:E3:12:E2
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial: 03FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number: 03F8
Signing time: Fri 31 Jan 2025 00:35:38 +0000
Manifest this update: Fri 31 Jan 2025 00:35:38 +0000
Manifest next update: Fri 07 Feb 2025 00:35:38 +0000
Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: yfiEdaWWCTgoil6ctacwuaz7Yd629IkLrhaE4G0eVPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Validity
Not Before: Jan 31 00:35:38 2025 GMT
Not After : Feb 7 00:35:38 2025 GMT
Subject: CN=679c1ada-7c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:b3:6d:a1:7a:fa:a6:cf:36:5e:35:36:90:
4d:92:44:41:ab:b1:11:e6:64:be:28:91:23:ff:14:
da:c6:b5:0b:a8:7f:ec:2d:23:12:81:e0:e5:e1:db:
dc:a6:74:3c:e5:f4:ca:c8:9e:15:55:e7:e6:df:db:
0d:83:0e:c1:3a:b7:a8:00:b7:ed:42:2c:cf:6d:23:
9d:fb:dd:d1:c2:f9:9e:5c:6d:9a:a3:c7:c9:fc:29:
7b:63:03:0d:bb:3c:b7:b4:18:b7:d9:0f:8e:2b:f2:
98:ca:b7:49:03:b2:a5:fd:42:6e:2c:44:40:4c:de:
5d:3e:67:64:84:01:33:35:96:8f:0e:85:f5:91:e0:
3e:5b:80:b6:c0:d5:ed:34:8a:2a:fa:c9:7d:a0:46:
75:1d:d9:ac:06:81:59:be:77:da:67:f2:e3:3b:f1:
dd:81:28:dd:d0:00:3a:c3:0c:31:82:eb:5d:d7:4e:
51:d4:d9:9b:17:fa:17:35:c5:49:1f:cf:b2:fd:03:
ec:93:15:3e:b2:99:db:94:69:a7:9d:f0:05:7f:e5:
bd:34:00:8e:59:c7:88:14:20:6e:ec:17:6f:35:c6:
c3:53:b4:56:c8:18:f8:96:b7:98:a4:2f:be:0f:b4:
3c:d3:22:20:fc:d9:8f:65:86:b7:09:c5:d1:9b:71:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FC:B0:63:27:B9:D2:DB:7A:58:CC:7B:ED:75:C6:DD:3E:E3:12:E2
X509v3 Authority Key Identifier:
keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:eb:40:ec:58:eb:3a:61:b3:5c:4e:7a:27:57:02:c4:4d:f0:
0d:a2:e5:57:97:45:cb:b4:dc:6a:0e:ab:6d:be:0e:aa:50:70:
2c:3b:c2:a1:b4:6e:24:88:34:a3:9e:75:7d:d8:a1:62:26:46:
d5:54:35:a3:99:93:fe:e0:28:54:cc:f0:c2:58:83:89:71:81:
ed:f4:52:48:2d:01:a1:71:dd:f1:6f:d0:5e:3f:93:84:f1:8e:
7c:e4:02:8c:c1:61:1a:4a:62:99:bd:1d:95:da:f8:0a:94:dd:
ef:86:b9:56:65:00:9a:e1:f4:a5:9f:5e:46:9b:3a:aa:5b:29:
8d:aa:27:b2:70:3b:c8:8f:5c:8e:97:f3:01:37:41:5b:85:3f:
80:23:c2:91:56:43:c3:20:40:36:1b:4b:f5:43:f1:6d:28:d1:
df:cf:91:a9:64:98:66:46:f7:2e:14:32:63:43:3d:52:9d:8c:
9b:82:0d:b3:33:c2:21:3b:aa:9a:3b:35:2c:cd:12:be:20:82:
6d:ee:90:ee:11:6c:e1:50:81:41:51:64:a5:a6:8f:c0:c4:10:
95:28:e8:0e:57:6e:ba:23:ee:16:89:96:50:28:33:54:74:29:
0a:a6:aa:5b:73:11:a9:e8:39:1b:4f:0d:da:2a:c1:67:90:6f:
53:e0:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:50 2025 by rpki-client