Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
File: KHuwzWb71-W3qIumZ4kSTAsExXg.mft (raw, json)
Hash identifier: jHrT4BuqbM9gZVhS/A1Jv2RLGIXQRu8dfTyXkRWqVzk=
Subject key identifier: 90:0E:54:C0:78:A4:18:64:67:F5:D0:1F:CC:55:20:2B:B1:39:57:B1
Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
Certificate issuer: /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Certificate serial: 0B35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
Manifest number: 0B2C
Signing time: Thu 30 Jan 2025 19:14:42 +0000
Manifest this update: Thu 30 Jan 2025 19:14:42 +0000
Manifest next update: Thu 06 Feb 2025 19:14:42 +0000
Files and hashes: 1: KHuwzWb71-W3qIumZ4kSTAsExXg.crl (hash: hcSCE7sZrdZ7J6qQXy9mpjFz1HPLZsGnTbXEQGLpg/U=)
2: 2BA212DC306D11EA81D19B38C4F9AE02.roa (hash: rkLsb+deDCPqbk0gObiXfMhdhI5eY1I1eSaPovL0Epo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Validity
Not Before: Jan 30 19:14:42 2025 GMT
Not After : Feb 6 19:14:42 2025 GMT
Subject: CN=679bcfa2-e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:e1:dc:25:69:b9:41:e1:b0:1c:3c:68:88:
68:4f:bb:8e:53:7e:fb:d7:df:92:34:2c:d8:33:12:
c8:56:66:c8:bd:b4:ea:51:b2:5b:1d:3c:30:d8:d0:
31:a6:58:94:2e:33:7d:54:0c:21:cd:e9:b0:08:32:
f4:97:e4:04:42:3d:65:dd:aa:8c:12:b6:85:87:c4:
78:4d:17:25:7f:07:d9:83:4e:c8:78:eb:d0:90:15:
92:e5:2d:08:dd:5c:f8:c9:64:6a:ff:0a:69:73:e9:
6a:b8:84:28:db:21:e9:f6:ce:65:28:d4:7c:8f:e7:
3e:26:fb:55:6b:04:de:8b:30:6f:1f:08:07:54:ac:
5f:2c:e5:28:f2:a7:a8:3c:6a:be:13:6d:17:05:5a:
bf:27:49:43:65:f0:3a:7c:8d:1a:0b:3f:8c:f6:b4:
82:70:f9:d8:b2:fc:f1:fe:52:85:1c:5a:b5:4c:1f:
8e:0a:d5:61:4b:89:0d:cd:3a:15:85:05:be:89:d0:
54:49:bf:58:35:bf:25:fd:25:2e:e3:15:26:00:8e:
fc:4d:6d:f5:d2:72:47:28:07:25:33:42:c6:49:e5:
ed:6e:dd:0f:de:d8:f7:a4:5b:ea:2f:fb:a7:89:8f:
b8:49:f9:06:6b:1a:fa:a7:1d:e1:75:95:0e:93:40:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:54:C0:78:A4:18:64:67:F5:D0:1F:CC:55:20:2B:B1:39:57:B1
X509v3 Authority Key Identifier:
keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:7b:63:87:17:13:cd:44:7f:41:db:ef:be:ee:f5:d1:93:
07:53:49:c2:8f:81:57:cd:71:96:71:d7:10:73:1c:d8:d3:05:
9d:75:39:3a:35:fe:41:2c:fd:e4:58:68:57:92:8e:c2:66:e8:
f3:f3:c9:cc:0e:5d:4e:97:d0:3a:de:7d:15:d5:81:c2:3a:8e:
17:a7:fe:8d:2f:02:af:e2:60:d4:24:b6:64:94:f4:7a:f5:65:
31:d8:44:87:e6:4a:d2:66:82:76:5b:88:46:2d:b8:04:be:e0:
ee:a2:65:87:60:c6:b5:92:bd:9e:ae:17:b9:e9:6b:34:c5:ae:
ca:95:a9:0b:6d:35:fa:3e:60:9c:4f:ce:81:f7:d7:7d:56:25:
20:ed:67:69:ab:d7:b5:da:cd:f6:12:23:9a:b6:f0:77:7d:21:
c7:c6:64:ce:d7:6a:02:0f:96:01:9c:51:e4:cf:a7:a3:00:86:
32:fd:f5:7b:5a:b8:0e:7e:cd:8e:eb:9a:67:9b:1a:ce:9b:2a:
10:5d:8f:4a:12:f9:6a:fc:7b:f4:89:40:26:fd:a4:9a:82:9c:
97:c7:cf:0f:69:52:b1:03:8e:dd:4c:67:cf:12:fb:1f:ed:7a:
63:29:b8:04:3f:de:28:ec:30:08:a8:cc:f1:6a:ae:4f:48:67:
1e:b7:51:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFMjUxMTAvBgNVBAUTKDI4N0JCMENENjZGQkQ3RTVCN0E4OEJBNjY3ODkxMjRD
MEIwNEM1NzgwHhcNMjUwMTMwMTkxNDQyWhcNMjUwMjA2MTkxNDQyWjAYMRYwFAYD
VQQDEw02NzliY2ZhMi1lOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAma7h3CVpuUHhsBw8aIhoT7uOU37719+SNCzYMxLIVmbIvbTqUbJbHTww2NAx
pliULjN9VAwhzemwCDL0l+QEQj1l3aqMEraFh8R4TRclfwfZg07IeOvQkBWS5S0I
3Vz4yWRq/wppc+lquIQo2yHp9s5lKNR8j+c+JvtVawTeizBvHwgHVKxfLOUo8qeo
PGq+E20XBVq/J0lDZfA6fI0aCz+M9rSCcPnYsvzx/lKFHFq1TB+OCtVhS4kNzToV
hQW+idBUSb9YNb8l/SUu4xUmAI78TW310nJHKAclM0LGSeXtbt0P3tj3pFvqL/un
iY+4SfkGaxr6px3hdZUOk0DDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAOVMB4
pBhkZ/XQH8xVICuxOVexMB8GA1UdIwQYMBaAFCh7sM1m+9flt6iLpmeJEkwLBMV4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUyNS82OEU1N0FFRTMw
NjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEtVzNxSXVtWjRrU1RBc0V4
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tIdXd6V2I3MS1XM3FJdW1aNGtTVEFzRXhYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUUyNS82OEU1N0FFRTMwNjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEt
VzNxSXVtWjRrU1RBc0V4WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbA3tjhxcTzUR/Qdvvvu710ZMHU0nCj4FXzXGWcdcQcxzY0wWddTk6
Nf5BLP3kWGhXko7CZujz88nMDl1Ol9A63n0V1YHCOo4Xp/6NLwKv4mDUJLZklPR6
9WUx2ESH5krSZoJ2W4hGLbgEvuDuomWHYMa1kr2erhe56Ws0xa7KlakLbTX6PmCc
T86B99d9ViUg7Wdpq9e12s32EiOatvB3fSHHxmTO12oCD5YBnFHkz6ejAIYy/fV7
WrgOfs2O65pnmxrOmyoQXY9KEvlq/Hv0iUAm/aSagpyXx88PaVKxA47dTGfPEvsf
7XpjKbgEP94o7DAIqMzxaq5PSGcet1Hz
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:57 2025 by rpki-client