Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier: OENxOptQGL+OlVRLJI2uIbdN7ZKP79y+VuVOG5irKww=
Subject key identifier: CF:2F:2C:0B:DE:3B:A5:91:67:E4:42:A6:4B:84:56:B6:8F:FC:C8:60
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number: 09
Signing time: Fri 31 Jan 2025 07:13:15 +0000
Manifest this update: Fri 31 Jan 2025 07:13:15 +0000
Manifest next update: Fri 07 Feb 2025 07:13:15 +0000
Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: Ia9NZ2Une+ZIqIiOxBXBycWS6x6PfDVVJcBSvH12IWI=)
2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Validity
Not Before: Jan 31 07:13:15 2025 GMT
Not After : Feb 7 07:13:15 2025 GMT
Subject: CN=679c780b-3848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:3b:f6:9c:d8:e1:e8:eb:fb:60:e8:97:f4:
64:2a:e4:e5:46:03:6d:70:ae:c2:0a:87:40:b2:68:
11:ac:f2:92:71:dd:90:0b:f5:c8:71:5f:d8:23:af:
23:d2:0d:18:15:6c:eb:ef:ce:08:a8:f8:69:24:a3:
c6:30:07:40:3a:f3:78:fe:e9:99:61:a0:15:75:d9:
74:a2:33:3d:b8:c3:38:4f:51:86:3b:78:3c:6c:a8:
4c:a7:24:31:ba:02:c3:c7:85:53:3d:e0:56:0a:ef:
e0:85:ac:fe:ca:ef:c5:48:8e:ea:79:6b:ec:00:9a:
29:01:77:32:60:2d:0f:d6:dd:30:ec:e7:37:a2:2f:
4a:be:59:44:81:f9:80:9a:1d:cd:56:aa:6e:5f:8d:
18:02:73:6f:ad:6e:18:01:34:6a:65:0b:1d:c0:32:
eb:fc:91:8b:ee:7f:55:3e:29:05:dd:26:6b:15:ab:
3a:a3:04:08:6d:78:c0:88:39:04:86:00:37:34:dc:
ab:9c:03:af:3c:cd:e4:04:0c:7f:0a:c5:35:12:dd:
69:72:75:04:9e:17:e9:08:32:02:99:d5:be:55:6a:
87:f1:a7:e0:81:8e:22:bb:fa:a2:2d:26:de:8d:9b:
0f:d9:3f:91:33:b7:36:d0:f9:ed:70:d5:7b:de:a2:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:2C:0B:DE:3B:A5:91:67:E4:42:A6:4B:84:56:B6:8F:FC:C8:60
X509v3 Authority Key Identifier:
keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:ff:4e:82:eb:88:07:ab:b8:4d:19:9a:76:ae:6b:1a:b8:
86:c1:c0:44:da:d1:b5:13:dd:97:02:e7:d6:61:14:3f:d4:e7:
8b:f4:7f:af:16:73:40:32:00:f6:ea:6a:ca:84:c9:48:65:15:
7c:45:04:36:a3:ee:97:58:b3:53:e9:ea:ab:44:cc:04:43:cb:
a5:31:98:15:a9:4d:86:c0:93:3c:75:3d:2e:3e:65:41:0f:26:
cc:4c:60:76:07:27:f1:b6:8f:9e:d6:e0:21:bd:bd:7a:3d:f3:
29:42:8a:a4:da:c0:4a:fe:b1:4c:53:c1:46:d5:a8:e5:3f:99:
a1:c0:bd:50:d6:94:85:f0:60:f2:8b:45:2c:80:6f:fd:5c:75:
2f:f6:b8:9d:ab:bd:d9:bc:32:0f:f6:e1:7e:14:04:50:49:45:
a8:2c:67:e9:e3:10:5a:74:af:31:f4:fe:20:db:32:f3:86:d2:
4a:05:65:63:dc:43:b8:35:8e:19:30:fb:ae:db:1d:20:97:48:
72:9e:dd:db:38:a5:ef:b0:7b:6c:b0:4a:0f:b7:18:7a:9f:0e:
a6:1a:fc:f5:fd:23:85:aa:93:a1:af:cb:ee:9c:ad:b3:b9:86:
82:0b:c2:de:70:4d:e3:05:bc:be:14:37:18:43:6d:54:9e:da:
fe:eb:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:06:07 2025 by rpki-client