Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier: YgB8tEZGgePHTtFSVOYEdjrwXLoenecHbf5x2S2ebv0=
Subject key identifier: 77:96:12:E8:98:5E:23:6A:43:B8:7A:82:31:F0:09:52:A5:16:9F:F5
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number: A3
Signing time: Fri 31 Jan 2025 05:18:46 +0000
Manifest this update: Fri 31 Jan 2025 05:18:46 +0000
Manifest next update: Fri 07 Feb 2025 05:18:46 +0000
Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: qbtc5+aJb6qigqh9CEneMy3+PE/UNTcKfCF2UMMTFMQ=)
2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: pb1KwX0pLwie7CfOH9Gyxrh7Hyrg9MAEQqr69on+vGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Validity
Not Before: Jan 31 05:18:46 2025 GMT
Not After : Feb 7 05:18:46 2025 GMT
Subject: CN=679c5d36-7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:9f:a8:98:0a:4f:ba:5c:be:78:57:32:a7:
f5:b7:1a:2e:f0:71:27:7e:fd:c2:74:58:9e:82:00:
e6:f1:d8:c6:81:b8:75:c1:15:fe:fe:d7:1d:de:a9:
65:5c:02:5e:9d:4e:df:f7:13:9d:b7:66:bb:fd:d7:
8e:7f:d3:d6:17:9c:31:41:85:f6:37:3c:10:cb:fa:
db:6f:8e:58:25:f5:dc:71:cf:94:b2:2e:cf:a5:21:
8b:7a:5d:f9:d8:f1:6f:a3:d2:2e:55:33:6a:ca:23:
e2:f2:92:e7:53:cd:96:44:4c:bb:cf:c4:4e:14:73:
09:23:3f:a0:20:47:15:c5:01:30:91:e8:a5:ba:13:
53:f4:af:c0:55:56:d5:3c:44:13:38:fa:25:39:a0:
12:61:36:97:96:ea:90:7e:b2:50:22:5c:4d:56:60:
e6:2c:4c:1e:ad:f1:24:ce:98:50:c1:37:05:55:35:
a2:cf:52:ce:e8:23:50:7e:11:3e:35:75:77:e7:8f:
43:5d:3f:a1:92:3e:8f:b3:31:c9:67:87:f0:fd:20:
1f:06:b1:17:15:bb:96:04:61:e4:fc:87:2d:9a:76:
00:ee:5c:fa:8a:40:45:98:27:db:0a:d4:34:03:e0:
92:ae:65:64:c7:f0:d7:95:e9:8b:17:04:b9:db:cc:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:12:E8:98:5E:23:6A:43:B8:7A:82:31:F0:09:52:A5:16:9F:F5
X509v3 Authority Key Identifier:
keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c1:5f:56:63:48:1f:9f:aa:41:0d:c2:0f:ec:9d:58:85:b2:
c2:44:aa:09:52:42:d6:1b:b3:d3:0f:9b:2f:c1:83:9f:13:cc:
cc:7e:37:00:77:eb:05:74:65:0d:f3:46:c3:12:52:59:92:71:
34:fe:9a:7a:7b:e1:23:22:ee:ff:0d:23:25:90:3b:fa:44:1b:
ee:ed:92:fa:e9:0f:ea:42:93:cd:be:31:e0:6b:6d:d9:d7:91:
81:ba:80:c2:1c:94:41:df:5b:9c:22:9b:41:d8:a1:46:9c:59:
dc:ad:d1:61:bd:66:e9:4a:2b:fe:08:39:8f:10:93:b1:8d:54:
c2:f1:08:69:19:6a:6b:fe:8c:f0:ec:9a:58:f3:0d:d2:c1:fa:
bd:02:2f:c6:52:73:2e:3a:a6:54:1e:82:48:9a:06:cc:80:65:
63:70:68:c0:d6:90:2a:70:1b:3e:aa:a6:88:c1:7d:b3:87:05:
c9:33:b2:86:5d:40:7a:76:01:92:f7:ba:40:11:3a:92:9e:cb:
ec:a2:ca:ca:b6:70:fb:e2:43:f7:9b:72:0a:6c:ab:b0:a3:7a:
42:f4:7b:4e:12:1a:cf:3c:be:ed:e3:02:7d:d8:97:b7:6d:b9:
38:c9:8a:0e:21:b6:3b:ce:61:dd:77:0b:b6:80:87:78:6f:57:
f1:7f:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:26 2025 by rpki-client