Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier: augGRsGmz9QPWK2MyGJMlfrQFq9QnsfWPquXLS6TVf0=
Subject key identifier: C1:89:BE:1E:85:78:A4:43:3B:68:E8:B1:2C:9D:FD:B1:D6:1D:84:98
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 04:09:32 +0000
Manifest this update: Fri 31 Jan 2025 04:09:32 +0000
Manifest next update: Fri 07 Feb 2025 04:09:32 +0000
Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: kNsfL7RY0Gou7HV2xf8Ti5XDXhge1mPfjR3uGEZ4IBc=)
2: 3AB9E692C0D211EEB7BBBE4FC4F9AE02.roa (hash: A0mC9X2UnmVuFudZOyuXLKDdp8UzNcimAQJMyA4hcow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Validity
Not Before: Jan 31 04:09:32 2025 GMT
Not After : Feb 7 04:09:32 2025 GMT
Subject: CN=679c4cfc-e051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:97:df:aa:4d:f8:3c:2e:1c:66:e9:de:de:
ff:6a:41:2b:1a:2c:f2:a7:58:a9:31:8f:e7:db:44:
f4:1e:ba:70:83:58:b2:78:df:d8:c8:ee:fa:80:19:
dc:02:fc:89:06:7c:ab:27:27:ef:63:de:bb:76:53:
6b:16:0b:c7:d5:fe:1f:53:8d:2d:c0:8e:48:8c:1d:
75:fd:11:87:42:ed:a8:58:e7:db:97:b4:32:2b:9b:
52:89:a0:6a:f8:cd:0e:d9:a0:e1:89:0c:17:55:1a:
a4:b5:01:99:76:28:6d:f2:bc:3b:9a:6d:d5:e4:f8:
5e:44:b2:86:2e:39:02:76:26:9f:40:da:e5:22:b3:
aa:b2:f5:87:e1:a1:66:3f:24:10:29:b4:81:8e:57:
44:de:60:15:02:b7:fc:cf:94:39:20:df:f7:c9:e6:
2f:06:cf:bf:f6:04:b3:bc:f4:53:ea:0b:a4:a1:b6:
bb:9f:aa:75:a9:ce:00:ba:17:da:65:75:19:03:e9:
4f:15:12:a2:33:dd:38:98:4f:87:02:e0:6d:61:f3:
f0:db:78:37:b3:9f:5a:7a:b6:5f:48:46:4e:ae:e3:
3b:85:70:5f:4f:d3:be:59:f7:b9:c0:7a:62:0b:5c:
81:0d:aa:cf:ca:29:ce:5b:4a:b9:da:02:51:a6:32:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:BE:1E:85:78:A4:43:3B:68:E8:B1:2C:9D:FD:B1:D6:1D:84:98
X509v3 Authority Key Identifier:
keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:31:eb:3c:26:d4:a8:15:df:4d:bc:e5:2d:b4:dc:fc:28:e0:
12:58:b0:d0:d9:69:0d:b4:e0:96:14:ec:8d:d2:97:27:85:c7:
f9:f8:f6:0a:67:7a:60:8b:83:9b:6b:6b:b5:63:94:36:f7:b6:
36:a3:57:1d:cf:c7:d5:91:7d:e9:12:aa:23:8a:9c:d9:89:0a:
71:97:d1:93:fd:70:73:be:32:8c:21:ea:fa:f9:3d:2f:5d:58:
0f:e8:f5:f5:42:2e:03:6c:d3:42:aa:84:65:36:2f:bf:e2:df:
69:79:a0:0a:48:3f:44:5a:59:fd:7f:79:cc:2d:4d:e4:d7:9c:
4e:99:59:4c:a0:2e:01:46:56:5e:4e:bb:3c:cf:02:6f:33:c7:
85:a0:46:d3:29:e0:e0:67:a7:bb:ab:ca:c1:34:21:d6:15:a7:
a4:33:dd:19:91:48:bc:d8:42:ab:e3:38:d7:ae:bf:b2:e0:93:
c2:8c:8e:e4:87:fb:b1:1d:1d:2f:b8:8b:76:b4:44:92:e6:94:
b7:b8:e3:bf:bc:ca:c8:59:fb:3a:a4:7f:7d:53:54:c1:dc:8d:
e2:ed:c3:05:33:f7:13:9c:70:6d:bf:98:83:97:f6:ef:ec:89:
58:4a:33:cf:dc:fd:9a:f0:77:96:66:64:7a:24:ac:7b:7f:6a:
e3:b7:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:12 2025 by rpki-client