Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier: sn9WhGiylP4zojs8cEe7hDDYuh/aqCFghOMFJFGNjfY=
Subject key identifier: 4E:94:F6:D9:6E:5F:B0:D4:F1:20:C8:AE:A8:D8:9E:90:68:FD:38:70
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number: 65
Signing time: Fri 31 Jan 2025 06:04:16 +0000
Manifest this update: Fri 31 Jan 2025 06:04:16 +0000
Manifest next update: Fri 07 Feb 2025 06:04:16 +0000
Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: j0prrmx2F8bY2zyKabz5W4tjTtPGQhwtq5Swo1l4S7g=)
2: 77BDF1A0497B11EFAE69D243C4F9AE02.roa (hash: EAkL+z2TTbEwn03dT2Ny9vtbrcbH4dnoXpbzZjpawbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Validity
Not Before: Jan 31 06:04:16 2025 GMT
Not After : Feb 7 06:04:16 2025 GMT
Subject: CN=679c67e0-f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:59:41:69:78:0e:a5:be:28:38:0e:5f:cc:
39:52:b8:f2:06:93:1c:44:98:4d:d1:fd:9d:6a:9a:
ca:64:9a:a9:b6:5b:8d:ac:35:d9:85:12:66:e7:d3:
f1:48:36:ce:ab:1d:43:d1:cd:97:21:fe:d0:b7:32:
f2:e4:dc:99:9a:31:8a:8c:ac:41:1d:d7:9d:a1:f2:
0d:ae:8a:49:3e:78:3a:de:2d:e8:cd:4b:a6:a6:ed:
d1:0b:57:f8:1a:ae:d4:65:e0:74:8b:02:11:83:4c:
4e:99:00:9f:c4:99:79:2d:6b:01:bf:a8:12:0c:56:
85:8a:a6:60:ab:fe:5e:36:9a:0a:6c:aa:a0:db:f6:
bd:fa:59:7d:bc:06:ca:4a:31:56:42:05:59:8d:0a:
39:84:58:6a:40:56:89:24:36:f2:e9:eb:18:eb:b7:
e5:ac:4f:7a:c4:9d:7a:9e:1f:cc:88:f9:43:80:90:
f1:da:ff:6d:14:18:a0:18:dc:68:b2:d6:c6:68:03:
d1:ef:8b:6e:a4:1a:16:18:ea:a9:2f:a2:74:14:c3:
8e:41:8a:14:dd:4a:a1:84:6a:46:c3:4c:ea:3a:b6:
d7:ee:82:14:32:9a:07:0b:87:ba:61:b0:56:04:a3:
21:cb:e0:e9:23:34:61:5d:2a:c5:3e:e8:78:31:94:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:F6:D9:6E:5F:B0:D4:F1:20:C8:AE:A8:D8:9E:90:68:FD:38:70
X509v3 Authority Key Identifier:
keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ec:9b:35:e8:7c:88:70:74:8d:53:89:9c:6d:ea:05:eb:f7:
5d:ca:49:f0:38:e7:ef:ec:2c:25:8a:b8:6d:64:3f:86:a0:07:
47:2d:d7:7a:89:4a:a5:74:ba:26:55:6e:e0:9b:88:e6:75:1c:
bd:2b:d6:5e:3f:00:31:f2:81:ce:aa:b7:eb:26:e8:53:2a:f6:
64:40:a8:f6:aa:22:b5:60:13:25:93:07:c1:1e:16:5c:99:0c:
d5:02:a9:65:c0:5d:f9:0a:e6:c7:2c:bc:3b:a0:28:a5:23:11:
5a:68:d2:7e:d6:34:af:2a:8c:15:d8:e6:7a:18:3f:e0:25:ee:
33:6b:d5:95:f3:59:e5:df:77:8a:23:51:3a:46:23:a5:53:63:
db:62:60:f9:8b:2d:b1:5e:84:0f:83:99:54:3a:77:70:7d:c9:
f4:d7:e9:89:2a:cd:db:f7:b4:b5:06:f4:d6:a0:3a:96:a4:9f:
7d:f6:07:e6:bd:05:16:65:0f:49:42:ea:46:87:f0:d0:54:9f:
46:be:88:3b:de:51:f5:43:42:ed:ee:93:4c:3e:fd:a6:dd:fa:
43:c5:8b:34:3b:45:33:ec:6a:22:f9:52:b1:68:6d:82:f7:b4:
0a:58:5b:1e:bb:2c:70:22:10:ca:f8:dd:d8:85:1c:05:4a:13:
8a:d8:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:00 2025 by rpki-client