Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
File: kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json)
Hash identifier: 9JX4iEWSpRvfoNVCY3/aC/KtXQeRIgfaAhxxDahPWxU=
Subject key identifier: CF:1E:8C:D9:A5:EB:A1:EE:6C:37:EB:1C:5B:C5:36:5B:AF:EE:0A:4C
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
Manifest number: 0BCC
Signing time: Fri 31 Jan 2025 18:43:25 +0000
Manifest this update: Fri 31 Jan 2025 18:43:24 +0000
Manifest next update: Fri 07 Feb 2025 18:43:24 +0000
Files and hashes: 1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: fQVZvKiohjpfVUHbd3oIS45ClE+IDXwLtX0RJqVqTw8=)
2: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: KB7PskjjZpvlmJB1Ro3HLdROD0xauXaxZy0otkkd9Bs=)
3: A1A3D7886B9911EF898D4645C4F9AE02.roa (hash: RFkMnKmypwqhoKuW5rUexAXXk8MOX8lKq4I17M92bNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Validity
Not Before: Jan 31 18:43:24 2025 GMT
Not After : Feb 7 18:43:24 2025 GMT
Subject: CN=679d19cc-0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:ba:c2:a6:bc:7f:b0:32:83:5e:ee:36:05:
ae:b0:75:95:a3:d6:93:f6:be:c0:11:7a:75:aa:13:
41:da:0e:02:e7:f6:e6:b2:40:74:fc:7b:68:4f:89:
eb:e2:47:c0:ab:d4:de:cb:55:64:29:b2:aa:f6:b4:
d5:2a:ea:c6:02:1b:7f:ab:be:d8:81:3b:f2:5f:5d:
de:7f:9c:c9:5d:36:80:db:c2:bd:02:c1:ea:9b:70:
0b:10:9a:15:45:63:63:48:25:0d:18:84:fb:2b:43:
a2:e7:df:94:1d:21:e8:7f:0e:9f:f9:5f:8e:52:30:
c7:ed:7d:bf:52:e1:dd:82:0d:08:f8:3b:9a:c4:ba:
52:d3:6b:45:d7:93:c0:15:5a:ae:03:42:92:83:6d:
c3:6f:ec:43:c3:69:51:9e:ce:ac:ea:2b:e4:10:c4:
60:c8:42:57:ff:ec:0f:91:83:5d:92:5d:15:05:44:
c2:15:58:59:b7:09:14:ef:a9:97:9d:33:4d:f5:0a:
0c:6b:88:8e:1d:2c:9e:ed:fc:c3:7c:5e:fe:cb:92:
24:11:b1:c6:00:8f:80:12:ef:26:1c:12:4b:2d:95:
89:bc:a1:ba:f9:9b:c7:46:20:cb:6e:83:29:b6:b5:
d3:84:a1:35:c5:35:63:5b:26:6c:4e:c7:ae:9b:60:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:8C:D9:A5:EB:A1:EE:6C:37:EB:1C:5B:C5:36:5B:AF:EE:0A:4C
X509v3 Authority Key Identifier:
keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:af:fe:76:fb:69:93:b7:3c:1c:2e:64:2a:b8:c2:4e:6f:19:
8e:f0:09:c0:20:8c:ce:cf:ac:7e:a9:ff:6f:c1:ac:dc:30:3d:
19:ad:c0:43:c7:28:89:dd:a2:9d:fe:4f:ba:8c:50:42:e4:2b:
57:bd:5c:33:c3:7e:80:88:e8:6c:c3:ba:83:b9:78:d8:ce:2d:
51:2a:a9:22:00:e6:9d:c6:ea:9c:c2:e7:b3:74:2b:98:69:96:
c0:f7:79:80:3f:97:25:f6:82:cf:f5:ca:e8:df:4e:04:e5:4d:
c7:fc:9c:c2:29:97:3d:4a:42:0b:74:63:8b:2a:e1:af:87:a6:
d3:b3:3f:d7:35:36:99:2b:8e:e6:1c:1b:7f:1e:25:16:50:44:
9a:92:5e:83:0c:89:13:f8:71:b7:8f:a6:a4:87:85:b8:71:7c:
c0:08:b4:f6:20:20:67:47:9e:09:fd:60:f0:f3:27:b4:65:2f:
67:53:48:83:1d:bc:32:dd:9f:38:e2:f1:bf:24:46:cc:46:f4:
0e:6a:95:f8:97:75:db:ad:5c:84:8b:b7:0a:98:69:75:17:58:
53:5e:18:31:f3:38:5f:b1:2d:ee:cc:af:17:9b:77:9a:d4:99:
6d:9e:90:03:39:64:41:39:c7:05:d4:ec:0a:e2:14:0a:70:b3:
7e:db:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:24 2025 by rpki-client