Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier: 3JyzL4eS0eyR86M2ZI0qilzaDHVBuIwydjQ4NpMfu9g=
Subject key identifier: 2C:C2:F4:E3:25:7F:89:E6:E2:E5:14:2F:55:71:4B:CF:81:B4:29:50
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial: 069D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number: 0697
Signing time: Thu 30 Jan 2025 22:42:13 +0000
Manifest this update: Thu 30 Jan 2025 22:42:13 +0000
Manifest next update: Thu 06 Feb 2025 22:42:13 +0000
Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: TsIXb/9zXjr0lDObF0rX4Nb3ZOjdSJhMgAMs2+BEwIw=)
2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Validity
Not Before: Jan 30 22:42:13 2025 GMT
Not After : Feb 6 22:42:13 2025 GMT
Subject: CN=679c0045-028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:84:b6:6e:41:55:75:2a:b2:3a:9b:62:ca:
7b:63:c9:c4:d0:b8:55:b8:95:ea:50:bf:33:b2:50:
0e:8b:d4:04:73:37:98:cc:af:ea:6e:17:bb:bb:3b:
b4:ba:bd:b8:4e:a2:41:81:85:04:9d:94:0c:89:93:
25:3c:92:f5:ba:d9:33:ba:d9:be:53:3a:40:46:0f:
a4:e8:c8:9a:3e:3d:42:f6:85:97:55:77:e2:0e:b2:
79:c6:1e:a8:1e:36:f8:3c:41:d3:85:7d:4b:e9:6e:
f1:d8:db:e6:d1:46:e4:5a:88:e4:8e:80:26:25:ca:
05:96:7e:cf:17:e5:95:6e:09:5b:ae:5c:c0:0b:15:
5c:20:0a:f2:1f:c3:06:f1:b0:4c:23:72:f9:43:34:
c9:0b:35:40:94:ba:04:01:a2:e2:85:ba:11:31:27:
1f:71:6f:26:ca:fb:04:4e:61:b8:76:e8:af:36:08:
fd:05:03:1b:79:df:b2:b5:4a:2d:b2:b6:f8:e5:b1:
b3:6c:93:46:26:f8:6d:27:77:83:23:e8:96:7d:bc:
09:4b:48:1e:24:5c:15:24:a4:a7:8f:27:ce:12:48:
15:cc:5d:45:f8:9f:d6:7b:0c:48:99:84:31:80:7b:
c6:85:ff:8d:a1:9a:a9:59:2b:1e:1e:27:cc:3a:91:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:F4:E3:25:7F:89:E6:E2:E5:14:2F:55:71:4B:CF:81:B4:29:50
X509v3 Authority Key Identifier:
keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:dc:64:e2:35:ef:3c:d3:a8:68:80:f6:9c:a1:f7:e9:32:
05:78:74:1a:9b:7b:26:07:7c:b7:50:e7:b8:5b:a2:08:2d:6b:
12:c7:85:d8:82:5a:a0:c0:62:3f:85:9f:dc:05:aa:67:84:f3:
6e:46:f1:82:49:a9:41:cd:d7:c6:cb:8c:86:fd:44:e6:78:d0:
9b:63:d1:5f:6a:eb:85:2a:33:d0:e5:7f:b3:a3:bb:b0:a2:6c:
08:a0:14:4d:fb:d1:0e:6c:05:02:a4:dc:ce:19:e8:2e:c5:97:
78:c6:32:94:06:1e:40:cd:4b:ad:0c:6f:92:b7:32:58:70:94:
38:56:b0:e0:48:bf:62:4b:9d:b7:04:4b:ff:e4:4a:7b:e3:ea:
08:f4:62:fb:38:7d:ab:0d:3e:8a:f8:99:e7:02:6a:84:22:b0:
4b:c3:d2:27:50:c7:23:91:75:96:3b:0e:03:14:5a:89:1d:f2:
53:b5:36:9f:17:65:4e:f7:b7:6a:e7:59:29:26:15:1d:fb:7a:
ad:c6:a3:aa:2f:81:bf:8a:6b:93:77:b4:ca:8d:e7:43:fb:4d:
a9:e2:6c:a2:69:9a:a0:48:00:f7:65:27:a5:02:ef:14:0a:a3:
f6:f5:7a:79:31:47:5c:bf:12:e2:e1:67:7e:c9:0f:59:78:2a:
07:53:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:07 2025 by rpki-client