Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json)
Hash identifier: fxkCSzSsUKEHmRzSIw577t3YtusNEUb1ZxCGUicvEOU=
Subject key identifier: D1:15:A3:C7:C5:CC:65:0A:3B:2D:5C:3C:90:E6:48:FC:79:D4:C6:BA
Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
Manifest number: 031D
Signing time: Fri 31 Jan 2025 01:14:05 +0000
Manifest this update: Fri 31 Jan 2025 01:14:04 +0000
Manifest next update: Fri 07 Feb 2025 01:14:04 +0000
Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: D5cIaC7wKPSg3Iqa3dL/gf2ko9eLAaQmgdMjHDLbzX0=)
2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: KdODWWy5DaOqxG/rlhfUZW4he8HC+tvuYe4LwAo61T4=)
3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: I5MvmpsL8y59IDd7Mhzk7RlviZnPSJZXIgkWIwxVqvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Validity
Not Before: Jan 31 01:14:04 2025 GMT
Not After : Feb 7 01:14:04 2025 GMT
Subject: CN=679c23dd-29d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:db:b6:11:88:3d:03:df:02:03:63:a0:47:
97:f9:3f:d6:fb:29:cc:03:4a:df:36:0b:68:77:4c:
4d:0d:d6:0d:0b:97:82:07:fd:e4:1c:3f:12:28:fd:
f3:f0:92:4d:e3:3d:fb:9f:87:f6:15:4c:39:c6:e8:
00:1e:96:8d:15:a4:bd:33:c4:dd:3a:1c:6d:a2:63:
e0:3b:38:d4:fc:8d:65:5a:8b:68:e9:c2:b6:1e:53:
ad:2f:79:a9:e6:a0:9e:f1:71:da:e3:e7:26:04:dd:
21:6a:c8:ce:e1:0a:5b:c8:30:29:c9:49:43:53:e3:
1d:e4:1b:6c:34:3e:24:93:27:26:dc:e5:69:dd:58:
1c:d0:1f:6c:a2:67:98:9c:6c:59:0c:db:f4:bf:f1:
9b:a9:fd:7f:25:87:51:19:7d:8d:da:81:70:2a:1b:
6f:d3:66:6a:73:4c:92:42:eb:95:d0:04:51:9e:67:
06:f0:62:d2:d3:55:fe:87:1a:d2:f9:9c:c4:8d:e5:
c8:7e:e6:1c:bf:9d:19:dc:35:b5:ee:58:9a:f6:00:
55:7f:07:84:81:00:a9:8f:87:29:90:c1:75:08:b0:
eb:c1:ce:4c:f2:02:94:98:e5:fb:c6:62:33:15:69:
64:70:0a:61:78:61:06:fc:22:91:66:40:ea:d1:c1:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:A3:C7:C5:CC:65:0A:3B:2D:5C:3C:90:E6:48:FC:79:D4:C6:BA
X509v3 Authority Key Identifier:
keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7f:83:1c:cb:fb:1a:6d:b9:4c:6f:e7:ee:b8:8b:bc:05:0d:
c5:9f:f0:d1:10:77:11:56:9a:79:5a:09:53:53:53:77:2d:0b:
13:dd:79:f9:c9:07:ec:f5:95:5b:76:c0:b9:6c:db:20:9c:9f:
12:8b:7c:b7:e2:20:04:b0:6a:8b:52:11:a4:0d:ba:03:a0:3b:
90:24:dd:69:d9:8d:6c:2b:69:57:8c:90:0d:74:3d:84:07:43:
84:4d:de:e9:49:30:c5:57:6a:d5:9f:2d:ea:d9:3c:a4:dd:ca:
6a:8d:13:7c:65:19:03:df:fd:87:05:ea:c1:36:a1:4f:ad:64:
88:aa:80:a9:4e:1e:78:e3:e8:ca:b3:50:29:07:96:31:3f:23:
46:e5:85:12:7c:d0:97:a4:2a:3d:83:f1:ac:9c:a2:5f:d8:49:
2f:85:48:87:c1:c4:b4:08:58:22:40:6f:f6:15:a1:e9:15:58:
c9:07:aa:d1:9a:00:e9:e5:e8:5d:dd:4a:22:3e:a5:5b:37:59:
23:1d:00:0b:8e:b0:7b:78:c1:90:1e:47:8e:37:ce:69:24:67:
0b:31:b6:0c:19:03:f7:7c:f3:7a:ea:6b:e4:06:36:5b:10:0a:
4b:70:10:d4:28:08:5d:dc:a6:1b:eb:1a:f1:63:64:0c:7f:5b:
99:62:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:12:02 2025 by rpki-client