Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier: jhzZf25vOvSBO00eWcde6uvHOGRwdOA5Hfy7ZBsy558=
Subject key identifier: 19:73:D9:68:09:0E:83:F4:B8:97:0A:FF:D6:6F:6A:D4:78:75:DE:80
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial: 06AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number: 10CD
Signing time: Thu 30 Jan 2025 19:51:47 +0000
Manifest this update: Thu 30 Jan 2025 19:51:46 +0000
Manifest next update: Thu 06 Feb 2025 19:51:46 +0000
Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: BAU+EEdrGm8sT3WHwc1FnI1mflhDnaLHBvw5XE0Cm8M=)
2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: kG/awft1YnlMUcGo/TLCAbm8s2p3POH5kub747SVbDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1711 (0x6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Validity
Not Before: Jan 30 19:51:46 2025 GMT
Not After : Feb 6 19:51:46 2025 GMT
Subject: CN=679bd853-3fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:db:ea:46:56:8b:87:27:d8:8c:00:46:a7:
24:d0:57:4f:bb:ad:df:45:8e:5a:9b:ba:c4:c0:03:
9e:09:b2:e4:2b:ce:6a:8e:c3:5d:0f:7a:c1:83:ef:
a9:ee:18:62:47:81:94:45:d8:3b:71:90:35:ab:de:
60:05:ef:16:2e:c2:5b:ce:7d:78:df:e1:f9:0d:a8:
1d:f2:01:f3:5f:dd:14:25:17:19:7e:ff:e7:a6:0f:
43:0e:87:03:dd:cc:b4:8f:97:e1:b3:ef:80:f7:b2:
50:62:ae:27:80:3c:06:5c:44:04:b7:6a:30:80:1f:
7f:54:ff:8b:c2:79:99:4f:94:25:df:f1:8d:7d:3d:
7a:c6:98:11:07:a6:0b:0c:47:ba:bf:9b:1d:f6:e5:
f0:04:3b:97:3b:93:bf:d0:68:90:a4:81:6c:d1:74:
11:7b:35:f4:a1:eb:24:17:6b:2e:3d:a8:57:62:f0:
5b:b3:bc:9b:ce:d4:6d:bc:d9:b3:3e:65:d5:10:af:
6c:28:40:a9:11:c4:3b:33:92:fd:89:35:53:e9:5c:
52:94:1d:8d:66:45:dc:82:9e:62:d8:66:3c:10:3a:
b9:01:5a:ba:e5:f7:3f:21:cc:49:14:f8:ac:2a:e3:
a8:5a:44:77:24:11:0d:89:01:99:fa:e6:f3:30:96:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:D9:68:09:0E:83:F4:B8:97:0A:FF:D6:6F:6A:D4:78:75:DE:80
X509v3 Authority Key Identifier:
keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:90:e7:0e:2b:c3:fa:6a:cc:af:cb:d7:89:00:39:f9:e8:b1:
f3:4e:d8:4e:fc:d4:c0:39:f5:2d:a2:ab:ad:05:ba:ab:f5:b4:
80:0d:ff:4d:ce:20:b3:2e:da:77:fe:b9:9e:1c:e5:ed:35:90:
89:9d:07:ad:6a:d8:0e:11:bb:27:02:9c:ad:23:ec:9c:96:bc:
fc:f2:f7:a2:44:5a:50:33:55:26:26:09:c9:05:22:79:38:87:
e8:b9:fb:b0:2e:ae:90:e5:0b:e1:15:7c:6f:9d:af:31:13:05:
7c:4b:4d:cd:9f:5b:43:ae:87:a4:b7:1d:f5:3e:2b:7e:a6:8a:
b6:33:37:ce:4f:ce:56:23:38:b6:fc:21:01:55:66:80:c2:70:
4c:1c:fb:2b:53:22:c7:cc:ff:77:88:d6:f7:50:6d:85:9d:1a:
67:2d:5a:5c:a0:b8:bf:df:48:ae:1f:7a:dc:cd:7c:e4:d1:ed:
56:24:88:09:94:2f:2f:d1:0c:1f:89:15:34:8d:f8:20:d7:ee:
8d:70:1f:a5:2c:74:72:b1:be:f9:03:b2:43:37:8f:10:6b:2c:
77:81:51:bf:8e:db:b6:11:f9:81:c1:20:ff:59:b4:43:f4:fc:
b4:b1:5a:90:24:4e:53:fe:f1:d9:67:90:a7:97:0e:c5:54:7d:
7f:51:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:29 2025 by rpki-client