Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier: w+QlBIg90GfBAnMd74oWVSrKvJV/LFCqDQtM6xFEAag=
Subject key identifier: E0:B7:1F:42:70:19:9D:58:40:BF:5A:14:01:26:80:FA:B4:65:C9:B6
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 101D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number: 1016
Signing time: Fri 31 Jan 2025 17:24:17 +0000
Manifest this update: Fri 31 Jan 2025 17:24:16 +0000
Manifest next update: Fri 07 Feb 2025 17:24:16 +0000
Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: qAcdPtOwCsvdLZZ782txh6DUJ5zDo13803zUwKJU42k=)
2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4125 (0x101d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: Jan 31 17:24:16 2025 GMT
Not After : Feb 7 17:24:16 2025 GMT
Subject: CN=679d0740-2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:03:81:aa:29:2e:2f:41:ea:bf:77:2e:5e:
70:ba:aa:b1:3a:98:ed:d8:4d:ac:95:6b:36:5d:17:
10:f1:73:4e:21:fb:11:c7:1c:5d:76:77:43:25:0c:
e3:91:15:1d:f6:20:dc:2c:cf:f6:92:17:15:f3:72:
db:44:02:c7:e3:72:d9:7c:02:0b:f0:2d:40:cb:43:
83:8e:81:5b:89:fc:f9:11:1e:87:fc:d2:48:54:bb:
41:fd:fd:9c:a1:3b:e7:75:ec:6d:1b:24:9c:86:2a:
29:3a:49:aa:54:16:e0:39:59:96:ab:8a:1b:af:9a:
a4:ba:86:57:18:7c:d4:a2:b5:74:4a:5f:c1:b5:86:
d5:05:e0:8f:84:dd:04:e8:50:27:34:3f:d3:83:00:
9a:2f:73:9e:24:d5:28:6d:57:6d:de:3b:22:5f:36:
55:00:81:44:2e:64:12:94:f4:48:50:ed:e9:70:9e:
35:6c:96:6f:c1:e9:ff:8e:8a:0b:b0:8f:fb:df:67:
73:60:c3:4f:c1:e7:1c:c6:07:0f:c7:28:1e:d3:8f:
00:c2:6f:2c:7c:ba:ac:2a:8d:16:85:4f:7f:8b:ea:
e2:44:76:98:cf:66:1c:cb:a6:d6:83:d1:17:d7:39:
4f:d1:a0:26:c1:59:89:71:e7:15:d1:12:4a:7e:d7:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:1F:42:70:19:9D:58:40:BF:5A:14:01:26:80:FA:B4:65:C9:B6
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:1b:c2:c5:2a:c2:81:5d:1f:04:00:f7:98:c7:2d:63:33:09:
63:b4:2e:f0:28:8b:fb:d6:c6:7c:36:55:8e:f1:53:6c:37:95:
58:ef:cf:ce:c1:02:aa:fa:c6:5e:53:06:b1:fa:ed:6e:10:4e:
49:21:f6:f4:22:c2:09:ae:d2:ab:5c:8d:16:8a:4c:c7:1f:c3:
f1:5e:99:9d:dd:78:26:1e:57:3c:ff:ee:20:dd:84:50:12:42:
6b:bd:29:00:20:47:4d:b1:1d:40:96:fc:86:2d:85:9b:66:c9:
ce:af:37:45:30:59:28:50:07:a6:51:d0:3d:08:e0:77:5b:5b:
a7:4d:60:26:6a:55:c2:3f:ea:c3:f4:b4:e7:a4:4f:67:c3:7a:
22:74:10:72:6f:dd:cb:27:87:9f:9d:84:a2:af:f8:79:16:dd:
08:4a:bd:69:5c:f8:0d:3e:23:c8:33:17:c3:c9:18:4f:8b:a2:
16:4d:e1:ec:f9:df:8a:26:96:70:e7:35:62:60:4a:7b:c1:ed:
8f:77:26:5b:5a:7d:be:6d:93:ad:32:a0:6f:f2:dc:fd:4a:53:
4e:a7:8d:e4:6b:fd:d8:bf:07:22:15:76:6a:f1:f3:e1:8e:66:
87:69:c0:15:4c:98:51:36:3d:19:71:4b:ac:4b:30:a3:31:cc:
bb:50:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:31 2025 by rpki-client