Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json)
Hash identifier: aqsJtP7u5XUfwlcs5DCP/yFRa6nSoGwSAs3OTBVx39Y=
Subject key identifier: FD:D9:E6:7D:46:E9:70:24:1D:FF:E5:EE:44:E5:30:C3:77:24:05:8E
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial: 0E4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
Manifest number: 0E09
Signing time: Fri 31 Jan 2025 17:50:56 +0000
Manifest this update: Fri 31 Jan 2025 17:50:55 +0000
Manifest next update: Fri 07 Feb 2025 17:50:55 +0000
Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: /DHp5/0caMsz9xbtZ1YUFw+WClKXEBqFHSyPRQOL5iI=)
2: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: q8VjbfesBfjBXJ1O+TtlGTvZbuy2Q6Gq6lc9iUM1cKc=)
3: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: L+aUrfi/IHEm4FCCzrEf6AdJOcO/5KYjXAI+VHu0xCQ=)
4: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: mROz4ndcci/lFowjKQt8EppikBLu2fjIlvGiFhvH3EY=)
5: 427DCF0C3D8211EEA0E4DD46C4F9AE02.roa (hash: EXUVL2zA/J8QBofGrTImrqh06PPMbUwS8kq7MDyN79I=)
6: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: LliQbQ1JrB45v11EWXMUYtz6YL9U5wdtSwrWMJkpnsM=)
7: 3FE88D863D8211EEA0E4DD46C4F9AE02.roa (hash: GkH732I1xtgGbCxpuKwxGejcreu2f5sOzAx51TVl89I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3662 (0xe4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Validity
Not Before: Jan 31 17:50:55 2025 GMT
Not After : Feb 7 17:50:55 2025 GMT
Subject: CN=679d0d80-c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:fc:22:b5:58:68:7c:d7:64:a2:a6:93:2c:
d5:3a:64:85:32:8a:88:10:a2:1c:9e:34:d8:da:6e:
01:2b:fa:2e:c0:c2:3a:46:a8:ae:d1:6e:ea:19:9f:
ad:a8:07:38:a7:da:42:c2:52:d8:ed:ac:9c:c9:12:
71:3d:18:3e:4f:9e:29:86:ea:f3:07:fc:32:ac:5d:
db:4d:8d:da:c8:58:a9:94:dc:ba:fe:3c:f6:ac:dc:
d8:c6:0f:ff:2e:e7:2f:99:ec:b1:f7:49:ef:c6:1a:
39:93:50:ec:9a:81:02:7d:f2:2c:c9:e0:57:68:78:
30:67:5a:64:aa:0d:6f:64:9e:c9:0c:0e:3e:b6:01:
56:4f:05:2a:d8:ce:b7:cf:b9:f2:58:13:09:f6:27:
5c:9d:0a:b1:ee:59:07:fb:30:1c:8b:70:70:91:6c:
f0:26:97:70:eb:28:7b:b8:b5:8f:1f:71:41:56:bd:
38:00:a6:63:89:34:50:62:bf:0a:6e:ce:7d:08:4e:
b5:2a:a5:d6:54:03:10:ee:8b:f7:37:66:8c:54:d1:
bc:9d:75:73:f7:33:ab:64:fe:99:cd:06:f6:21:f8:
71:c5:2a:14:fb:ce:3e:cc:7d:1b:1d:1f:a6:19:d2:
2f:c3:02:fe:b1:ef:50:e1:cc:11:6f:2f:ba:a2:dd:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:E6:7D:46:E9:70:24:1D:FF:E5:EE:44:E5:30:C3:77:24:05:8E
X509v3 Authority Key Identifier:
keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:db:c1:5c:72:74:e6:7e:02:f7:be:52:f6:87:8e:7d:9f:9f:
13:52:2b:7a:0d:eb:9a:9a:f1:8e:7b:74:78:84:9d:45:20:66:
15:0b:26:70:94:31:40:97:a7:49:ca:f3:0f:4c:78:c2:f6:29:
4c:92:e7:5f:7c:dd:23:5b:f6:0e:b7:16:25:48:41:fc:4d:a4:
e0:15:8d:98:92:cb:3c:96:75:a6:9d:4f:36:c9:cd:a7:6e:c2:
67:30:03:d8:22:3d:72:86:17:83:6b:3c:c3:5d:8b:7c:21:c2:
a6:2c:bf:56:d7:22:2f:d9:22:9a:ba:f1:24:8c:ad:b4:59:25:
96:06:56:32:ec:ec:aa:42:65:56:30:4d:01:c9:44:35:56:77:
01:f1:16:4e:00:d4:a2:c2:da:9b:0d:07:f8:2b:85:38:ec:df:
80:6f:01:dc:3a:f8:9d:1f:51:03:22:1f:8a:ba:83:fe:94:2f:
08:79:cd:6a:aa:0d:e5:d2:39:fc:d8:ef:36:dd:c4:25:19:08:
7f:cb:9f:41:59:7a:99:24:c1:b2:dd:49:01:41:e8:8a:60:58:
08:ad:7a:4b:64:3c:fc:be:a3:6a:a0:7b:a2:63:e0:41:67:91:
ce:85:69:82:aa:1e:48:14:39:be:11:82:53:50:f0:af:9e:59:
eb:f2:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:17 2025 by rpki-client