Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier: KQGKt1UMeH3FUocp2ghAk1ylbCm0VSmzWBXOIiT4zII=
Subject key identifier: 8D:72:1D:BB:48:51:96:B5:73:F8:2D:E1:11:96:77:75:CA:18:4B:A0
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 02:06:49 +0000
Manifest this update: Fri 31 Jan 2025 02:06:48 +0000
Manifest next update: Fri 07 Feb 2025 02:06:48 +0000
Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: KBCTFCbqFMTJ+O3vewww2nCfzniImtxm9sK07DQ6sBM=)
2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=)
3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Validity
Not Before: Jan 31 02:06:48 2025 GMT
Not After : Feb 7 02:06:48 2025 GMT
Subject: CN=679c3039-995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:84:05:48:3d:3e:e1:e2:53:1a:1f:d9:3c:
83:3c:75:69:bc:5d:83:c4:ff:3a:54:93:64:5d:a1:
ec:04:25:05:58:f1:9a:60:73:07:2d:0d:40:6a:16:
39:dc:4d:bb:d4:4d:f1:ef:8a:67:be:b9:6c:14:ef:
86:5c:11:d3:66:56:97:f3:c9:c9:d2:1d:44:a2:f8:
22:43:49:9e:ba:29:bd:fd:a4:df:6a:42:db:56:af:
c6:72:8a:ea:e5:95:f6:72:cb:85:55:19:61:c4:7a:
31:6c:6f:d7:70:01:35:08:bd:76:8f:ab:55:5e:62:
65:8f:e2:f9:d8:33:40:24:ef:d0:29:18:20:f4:04:
f6:91:40:43:d0:56:13:7f:20:fb:13:a3:df:0a:4b:
ba:ed:e1:cb:cf:4e:74:d2:3d:55:30:41:b8:7b:01:
17:e1:a9:b7:7e:78:38:f4:91:d8:3c:67:22:a7:69:
73:07:2b:c6:63:a2:4d:9a:a0:ae:50:88:22:9e:68:
5d:ea:ed:73:84:39:6d:87:57:c1:ec:3a:9c:df:26:
50:a2:93:32:0c:c0:52:fa:62:e1:07:d2:f3:e4:42:
c2:83:c4:da:cf:99:74:3b:9e:ef:92:69:f1:f8:32:
37:bb:cc:00:4d:8c:84:88:71:f0:85:55:8d:bc:5e:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:1D:BB:48:51:96:B5:73:F8:2D:E1:11:96:77:75:CA:18:4B:A0
X509v3 Authority Key Identifier:
keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:02:88:30:a5:f0:8b:5d:cc:a5:23:8d:61:bf:92:fd:8a:
aa:64:b9:1c:17:74:4e:68:5c:5d:a4:81:3c:be:ae:73:13:87:
c0:3c:ce:88:6d:f1:d1:bd:90:e7:03:4f:e7:61:5d:75:9f:0f:
7a:43:17:79:fa:21:1c:fc:61:ff:fd:bd:4b:69:46:d5:a3:c1:
25:4c:26:a3:80:ef:05:b5:33:59:49:ce:58:16:98:c9:47:0d:
ee:36:4f:ef:d4:93:93:31:68:6b:1c:0d:cd:2d:0a:37:0e:2a:
5f:31:66:25:52:f7:1d:68:e4:75:74:89:1c:2f:13:b9:cc:d9:
af:65:03:00:a8:63:aa:cf:18:0d:15:0c:b9:7c:83:fd:c1:b1:
46:31:1f:50:66:c8:88:24:fd:e5:e0:35:e3:75:d9:5e:0e:16:
aa:a2:d3:4a:72:8c:a2:79:91:92:81:97:f9:f2:5c:19:9a:f3:
70:52:ec:fa:33:65:51:96:5a:1d:44:64:9a:ba:30:96:72:e9:
ce:b8:53:65:c4:1c:fe:f5:13:20:d8:f4:70:da:ae:ce:45:36:
bb:bd:c7:8b:c6:d2:e5:ef:14:4c:7d:66:4a:3e:73:61:87:34:
0f:60:71:9d:10:b5:47:54:9b:ee:bb:9b:29:25:bb:d8:46:12:
c4:77:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:37 2025 by rpki-client