Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json)
Hash identifier: AFYY/bX82PFsNb45oNS/vccXI4Zr9YpCbhFMj8gzlos=
Subject key identifier: 18:BA:7C:8D:E4:E0:5A:DE:B3:C0:F2:69:CF:22:DD:5F:6F:9F:50:90
Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Certificate serial: 07F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
Manifest number: 0BC5
Signing time: Thu 30 Jan 2025 20:56:00 +0000
Manifest this update: Thu 30 Jan 2025 20:55:59 +0000
Manifest next update: Thu 06 Feb 2025 20:55:59 +0000
Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: NCTpwFPwIwIjL24DvgCI11Ps5EO8tn2ba2UE2FDA89o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Validity
Not Before: Jan 30 20:55:59 2025 GMT
Not After : Feb 6 20:55:59 2025 GMT
Subject: CN=679be760-3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:87:2b:90:7a:4a:88:b3:8d:f5:fe:07:ea:
12:85:59:d2:85:1a:f0:a5:35:78:cb:8f:10:ca:59:
28:42:b9:84:5d:f6:c0:fe:84:88:27:cd:bf:17:bd:
ec:41:06:ba:b7:03:0a:18:85:7e:86:97:df:59:59:
d3:fe:85:45:6a:2f:3d:d2:7f:c1:56:55:53:69:39:
e9:16:cd:37:8a:86:ab:6c:18:e8:3b:46:4e:09:44:
32:af:67:2b:1f:c2:a8:d4:88:ec:03:a5:51:30:53:
2e:32:30:41:3d:53:e9:49:83:14:bc:0c:05:a5:a5:
34:26:e1:14:22:5f:f2:83:f7:cc:70:fd:ba:45:db:
de:83:6a:f6:24:6f:b2:49:b7:31:06:60:91:17:13:
3e:6d:eb:95:99:5e:36:94:6f:51:e9:d9:f0:40:a5:
f2:d3:bc:0d:2c:4e:26:59:29:af:6c:de:ea:e8:4a:
56:fa:4e:b6:ad:5f:cf:37:fb:26:f2:4f:75:2d:57:
02:66:50:c2:09:b6:1f:4d:1e:b3:56:68:9a:66:b1:
77:d0:9b:c1:07:9d:d8:a6:e1:5c:7f:b5:a4:ab:7c:
ce:a2:74:f0:4e:af:f1:05:c3:a1:59:73:45:a3:70:
4e:f3:25:90:98:2a:90:ff:a0:1e:13:3c:dc:16:66:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:7C:8D:E4:E0:5A:DE:B3:C0:F2:69:CF:22:DD:5F:6F:9F:50:90
X509v3 Authority Key Identifier:
keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:b9:f9:91:f6:5e:80:d1:ec:ab:88:52:5d:c4:1a:40:84:
0f:7c:c7:6d:4c:16:7a:be:cc:00:f2:8a:95:24:b6:3a:72:9d:
4c:94:a7:fe:6e:eb:7f:05:eb:be:cd:74:09:41:93:a3:ae:86:
2b:65:29:12:cb:5d:1d:3c:4c:c8:ec:bc:7f:8e:9b:6b:c7:a6:
1f:23:a2:be:c7:35:03:93:4f:47:a1:4b:43:6e:51:94:b5:93:
18:62:09:4d:a9:01:f7:c1:a2:40:ad:c7:26:8b:f1:06:70:54:
c8:b4:b5:4c:ab:99:0e:5d:be:ae:be:a0:12:7e:19:60:4c:23:
d7:e4:6a:f0:a2:50:97:62:00:de:83:7e:c7:fd:09:b3:fe:8c:
7a:e0:2b:4c:30:14:66:8e:48:9a:a1:97:ed:c0:24:0c:c3:d1:
e3:78:85:85:9e:5e:be:85:19:d4:ca:a2:b2:9e:a3:9e:0e:d9:
79:84:35:81:2b:e6:76:3e:4d:03:68:5a:6a:ec:f6:a4:b4:2a:
a5:4c:32:a5:63:61:c8:93:a2:18:15:3d:19:a9:97:0a:46:d6:
ba:26:ce:8e:b3:35:eb:03:a4:73:0f:e0:36:a6:ae:47:03:04:
25:48:ca:c8:40:10:85:8a:b0:db:51:e4:7d:2c:d1:c2:4f:27:
78:15:54:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2
MEY2MDdGMTgwHhcNMjUwMTMwMjA1NTU5WhcNMjUwMjA2MjA1NTU5WjAYMRYwFAYD
VQQDEw02NzliZTc2MC0zMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6SuHK5B6SoizjfX+B+oShVnShRrwpTV4y48QylkoQrmEXfbA/oSIJ82/F73s
QQa6twMKGIV+hpffWVnT/oVFai890n/BVlVTaTnpFs03ioarbBjoO0ZOCUQyr2cr
H8Ko1IjsA6VRMFMuMjBBPVPpSYMUvAwFpaU0JuEUIl/yg/fMcP26Rdveg2r2JG+y
SbcxBmCRFxM+beuVmV42lG9R6dnwQKXy07wNLE4mWSmvbN7q6EpW+k62rV/PN/sm
8k91LVcCZlDCCbYfTR6zVmiaZrF30JvBB53YpuFcf7Wkq3zOonTwTq/xBcOhWXNF
o3BO8yWQmCqQ/6AeEzzcFmanowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi6fI3k
4Fres8Dyac8i3V9vn1CQMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG
NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO
ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfM7n5kfZegNHsq4hSXcQaQIQPfMdtTBZ6vswA8oqVJLY6cp1MlKf+
but/Beu+zXQJQZOjroYrZSkSy10dPEzI7Lx/jptrx6YfI6K+xzUDk09HoUtDblGU
tZMYYglNqQH3waJArccmi/EGcFTItLVMq5kOXb6uvqASfhlgTCPX5GrwolCXYgDe
g37H/Qmz/ox64CtMMBRmjkiaoZftwCQMw9HjeIWFnl6+hRnUyqKynqOeDtl5hDWB
K+Z2Pk0DaFpq7PaktCqlTDKlY2HIk6IYFT0ZqZcKRta6Js6OszXrA6RzD+A2pq5H
AwQlSMrIQBCFirDbUeR9LNHCTyd4FVTm
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:05 2025 by rpki-client