Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: LVLm9HIJ2PixNaOyhyQ1tjxAcIBKxyRnGHZSQAXaDkg=
Subject key identifier: 33:92:31:CC:5A:59:00:E2:1B:F7:A7:52:25:CF:72:75:2A:2E:C3:1E
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 0867
Signing time: Thu 30 Jan 2025 20:42:38 +0000
Manifest this update: Thu 30 Jan 2025 20:42:37 +0000
Manifest next update: Thu 06 Feb 2025 20:42:37 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: 33eAW8NpndN0CopCjLCq5OA6z3APWMzgEmq8yqf2X+o=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: tyyxw+5bE3FwtI8AaQTMQ/hBxm6hPpyY75mzwxt5W7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Jan 30 20:42:37 2025 GMT
Not After : Feb 6 20:42:37 2025 GMT
Subject: CN=679be43d-21b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:5d:6c:e7:7c:7f:c0:bd:b6:74:0d:2b:9d:
9f:d0:0e:58:d5:f8:ed:25:93:f2:9d:01:c9:59:49:
41:ee:55:d0:04:17:1a:cc:4a:56:7f:ac:92:05:15:
b1:4c:ce:1e:67:c6:d0:43:86:a2:7c:43:d8:b4:ec:
06:c0:cd:8f:a4:0b:91:c6:e2:db:bf:f6:37:32:22:
d1:55:1a:b0:0c:9d:e8:b6:ab:f6:56:6a:e0:22:54:
eb:d5:a7:82:19:49:51:32:ed:0b:99:b9:2d:40:be:
15:de:60:46:10:d4:e6:b7:6c:e4:d7:04:46:ac:33:
f2:0a:60:30:5a:6b:55:32:5f:b9:cb:93:87:7a:1a:
85:8f:f1:8f:88:6e:65:df:9b:c8:08:7e:0f:3d:dd:
fa:12:ab:a7:69:cf:7a:65:fd:18:ce:73:bc:92:ee:
d5:61:d5:ed:e7:e4:5c:7d:2b:05:94:bb:f8:6d:19:
05:f2:c4:fe:2e:6e:52:19:11:9f:71:0a:56:f5:b7:
30:ae:cc:74:dd:4e:4a:92:ef:c0:85:6d:12:75:c5:
ee:50:2b:c2:35:21:da:d6:2e:c4:0b:16:c3:e8:5c:
0e:58:5b:48:bd:6e:d5:9d:48:98:ce:45:8c:f6:b6:
02:bd:a7:ac:90:34:24:5e:d1:ce:6b:53:bc:4f:a7:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:31:CC:5A:59:00:E2:1B:F7:A7:52:25:CF:72:75:2A:2E:C3:1E
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c5:f3:70:2b:4f:25:31:b6:7d:78:b7:5e:b1:c5:84:2e:b2:
92:84:35:b7:fe:2f:d8:f7:3d:de:fd:87:a6:c7:c9:70:65:3f:
e6:90:fc:22:b8:7e:6d:21:3c:08:2f:37:94:23:38:2f:5c:50:
f1:b7:99:44:e7:4e:2f:ad:ed:04:64:9d:a8:0a:13:47:36:5e:
75:39:0b:a3:fa:79:ff:b0:e3:31:39:5d:9d:d7:d2:dd:61:70:
3d:bd:3d:b7:5b:c8:fa:01:84:98:27:64:0e:1f:70:8c:5b:5f:
b2:af:68:11:77:ba:8f:6f:2e:cf:21:2a:c9:fd:2a:a7:b3:c9:
4c:46:02:8d:ae:93:27:d2:79:42:8a:74:6a:c4:32:4e:ce:b6:
e5:25:a4:ab:52:5e:ca:8a:28:ff:f7:10:07:4b:98:2f:be:71:
e9:fd:85:c3:01:8c:d3:e7:2e:14:14:78:b9:fc:eb:8e:6b:e1:
1a:71:c9:be:14:ec:b4:1d:ac:7b:02:9e:5a:95:fc:b0:77:6d:
4a:64:f1:46:df:da:55:fd:ec:43:98:c0:a0:0a:e4:12:bd:cd:
c2:79:e3:af:76:10:cb:b3:ce:1d:3e:01:5d:3c:cf:16:0f:70:
54:35:22:fe:3a:a1:f7:b7:f2:20:03:7f:a1:04:cb:9d:a6:e0:
03:cd:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:32 2025 by rpki-client