Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json)
Hash identifier: uCJrMPr3SMTHPxFvsm4SRr+6Lryt+OWHA9eLqq8jnvU=
Subject key identifier: E9:69:BC:B7:EE:4D:16:5C:5D:F3:41:99:9C:0A:17:F3:6A:7F:96:A2
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
Manifest number: AA
Signing time: Fri 31 Jan 2025 05:28:51 +0000
Manifest this update: Fri 31 Jan 2025 05:28:50 +0000
Manifest next update: Fri 07 Feb 2025 05:28:50 +0000
Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: h6j54yGkf09des/vPSdS43nyJXDHbV73YTdcOpDSLZY=)
2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: fhHN+wika6qw4BQ5YkJmWVk33R5FKnY5aL2UuUzBHhw=)
3: AE01B980BE8E11EF8D54D314C4F9AE02.roa (hash: jySKdxVLv5VdAbGmxyhSsg6Ei5JER4C+wCyjmoyWcJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: Jan 31 05:28:50 2025 GMT
Not After : Feb 7 05:28:50 2025 GMT
Subject: CN=679c5f93-e90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:a4:01:0c:fd:9e:fe:56:71:37:c5:43:98:
2a:7b:1b:74:79:4e:7b:36:96:11:88:5b:15:c7:2a:
07:09:03:6a:fa:c3:75:38:98:0a:3e:63:75:44:01:
e1:18:2f:fa:83:9b:a9:c9:60:2e:bd:d7:88:31:f1:
7b:f6:fd:ab:cd:8f:16:f4:ef:71:5d:25:6e:5b:ad:
5d:2b:e5:73:ce:41:bf:52:e2:f1:1f:b8:4e:91:ca:
06:6d:a6:00:ba:0f:f2:e2:6e:7d:03:a4:c1:f2:dc:
0c:ab:c8:81:c8:72:34:91:17:ff:46:af:71:ae:06:
0d:c0:70:f8:33:3b:01:71:5c:01:98:3e:66:36:37:
c5:8e:d0:b9:20:7f:be:ea:5c:6e:7a:3b:68:e2:85:
e5:1f:fd:c7:9b:a3:e9:ae:c2:5d:c5:23:44:7f:ea:
2d:b3:0c:a3:ad:38:63:c0:48:eb:0e:29:a4:53:fd:
e8:5d:e4:40:99:dd:bf:75:35:dc:8d:bd:81:60:06:
09:77:f6:33:d3:12:39:ef:01:8c:c0:e9:a8:42:f1:
80:a7:4c:a4:63:33:22:0d:c6:e2:09:a6:95:18:8a:
d3:c0:1c:e8:42:ae:a0:6a:c8:14:f7:8a:d7:92:0d:
10:cb:51:ac:89:9a:e8:c9:5c:85:1d:ff:5f:7d:bb:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:BC:B7:EE:4D:16:5C:5D:F3:41:99:9C:0A:17:F3:6A:7F:96:A2
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:4c:ca:64:41:13:00:1a:60:55:05:fb:84:f1:a8:a4:9f:
07:a0:ef:14:5d:31:bb:eb:18:6b:46:ae:66:bf:0f:55:f0:d0:
7a:75:b9:59:0f:bf:df:13:01:87:f8:38:6b:08:26:ce:c9:7f:
87:01:20:2d:76:b6:6a:73:d6:e7:a8:09:4a:2e:d6:27:e3:98:
1d:63:08:5a:f2:7f:70:c7:92:57:d1:9e:c4:28:c1:b7:b5:f3:
57:bb:69:c7:a0:e5:d9:bb:37:e2:32:a0:20:b6:a6:72:a3:10:
e0:cf:b8:e8:61:04:ec:73:66:e0:d4:c4:94:58:b6:76:2c:f6:
c2:12:0b:93:c5:08:fe:fb:5a:9f:42:8a:2e:4f:7b:75:01:ca:
43:98:8e:fe:0e:ef:13:88:89:04:2a:5a:13:6a:20:11:4e:a8:
0e:df:49:6f:b5:95:80:64:ed:20:f6:a5:5e:8a:4f:78:e8:56:
69:4b:b8:8d:45:53:30:9a:ab:7f:33:f2:74:1b:9d:53:65:9a:
65:37:bf:1d:14:2c:8b:9b:64:22:94:68:2d:41:30:eb:16:36:
00:e2:32:76:10:fe:59:df:04:f2:1a:7d:ad:eb:d8:d8:04:a4:
af:79:4d:b7:71:98:a0:b9:32:d2:77:9f:68:4c:a0:fb:b6:4b:
87:49:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:05 2025 by rpki-client