Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier: I5+i5hGcWFxaS7Qxiu70HX1RFxjNuwdOn39LwGKplCw=
Subject key identifier: E7:5F:4C:C0:DE:91:57:13:36:81:F8:3E:B4:0D:EC:BD:74:CB:48:F3
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial: 166F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number: 165A
Signing time: Fri 31 Jan 2025 16:42:09 +0000
Manifest this update: Fri 31 Jan 2025 16:42:08 +0000
Manifest next update: Fri 07 Feb 2025 16:42:08 +0000
Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: Pc4PSO5CRZy9X0YJsKwW6eSm/PvgyY8kcG2SErDKlUs=)
2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: 9LkXl9QxDSxbtZYyZ8LFVmO6uJfg1+QNK1ML8GwAiHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5743 (0x166f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Validity
Not Before: Jan 31 16:42:08 2025 GMT
Not After : Feb 7 16:42:08 2025 GMT
Subject: CN=679cfd60-96fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:0b:25:78:c7:ff:ed:5a:21:83:54:64:9d:
65:4e:21:6f:43:38:17:7a:64:c6:5e:e1:0f:f7:9b:
6d:b4:b2:8d:23:be:03:97:71:08:d9:62:48:0d:74:
a5:23:8b:da:68:b4:75:1a:d3:93:fe:5a:4c:18:1b:
33:e3:b7:99:a3:05:5a:9e:83:40:95:78:4a:25:41:
d4:ef:98:4c:22:91:d7:3e:92:6a:63:4a:77:a9:ae:
68:b1:2d:82:bb:93:e3:34:e5:e3:09:a3:3d:d5:df:
01:99:d3:32:51:0b:20:c2:fe:08:1c:76:95:dc:d8:
81:a2:c5:b5:78:1a:3a:aa:fe:f0:9c:a3:33:7c:18:
f3:a2:39:46:ab:e8:45:4e:fc:16:34:3b:7e:ff:30:
23:15:c6:52:91:8b:4a:dc:66:b4:4a:8d:44:7e:02:
ed:05:66:0b:55:8d:27:94:11:e7:13:f4:0d:46:b3:
0e:9c:ab:11:3c:a8:cf:7b:0e:87:23:64:45:83:d5:
07:e2:af:6b:3e:b0:6e:7a:68:da:21:ed:1b:35:15:
0d:9e:a8:e0:20:9b:53:b3:06:8a:4f:dd:5d:3e:5d:
7e:78:a6:73:a0:2c:ef:20:f0:90:be:ec:c7:60:51:
c0:80:b5:d6:4c:b8:0c:5a:ad:bd:8b:d2:6e:73:36:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:4C:C0:DE:91:57:13:36:81:F8:3E:B4:0D:EC:BD:74:CB:48:F3
X509v3 Authority Key Identifier:
keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:78:43:57:7f:ba:fc:41:39:0d:25:ba:0a:1e:4c:24:d4:8b:
a0:4b:2d:77:e7:fd:0b:22:81:11:d2:64:81:50:11:61:89:ba:
88:0d:74:db:12:99:09:63:f6:25:38:1c:ce:62:aa:fb:72:94:
66:db:7f:e1:7a:c5:18:5d:4e:95:94:76:26:72:09:dd:67:e1:
fe:c1:6e:dc:5e:9c:f7:01:02:0a:3f:24:b1:c4:ad:82:ad:ce:
5d:24:ca:11:0d:c0:a5:51:47:78:a8:46:f3:54:1f:d0:8d:0d:
d5:f2:47:85:2b:cb:8d:91:71:0a:98:35:16:87:b6:1f:d3:1d:
ea:cd:f7:c6:b3:a3:67:1f:e3:33:46:de:9e:4d:b9:f1:91:15:
00:09:e6:b8:80:01:0c:c6:56:75:31:1c:4e:38:6c:22:3a:35:
ee:2f:c3:5e:09:bb:0c:eb:9a:d0:1d:75:2e:a4:c4:05:c8:de:
c9:65:48:c3:fd:77:08:eb:b1:47:6f:24:0b:7f:11:7b:9e:94:
1a:55:b4:ac:23:9e:ed:7d:25:8b:bc:06:e7:67:68:0c:80:34:
9f:d8:cd:99:64:09:09:38:6a:4b:96:85:48:28:aa:1e:c8:09:
15:72:3f:78:e0:b5:5f:0c:a9:e0:1c:6a:48:90:4c:72:d7:f2:
36:80:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:13 2025 by rpki-client