Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier: mWMigKk8hyYkSTh1h+xp919YmaWags6e/zxUobW466E=
Subject key identifier: 1E:CD:0A:6C:C7:95:74:67:E3:BB:B3:BB:DA:92:8C:94:28:06:55:02
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial: 1F40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number: 1F33
Signing time: Fri 31 Jan 2025 16:01:05 +0000
Manifest this update: Fri 31 Jan 2025 16:01:05 +0000
Manifest next update: Fri 07 Feb 2025 16:01:05 +0000
Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: mbBbXdvlNNT4Ke4KMNP5Lah8sqcig4/vuT9z3SMLmeo=)
2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: C6sGcNivAhM8b7+hs2R4TWPNfdN5sOXAahaAosnvUZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8000 (0x1f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Validity
Not Before: Jan 31 16:01:05 2025 GMT
Not After : Feb 7 16:01:05 2025 GMT
Subject: CN=679cf3c1-e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:35:2d:55:ca:56:dc:05:68:01:dc:8f:c4:
9c:cf:65:66:a3:0b:92:ae:45:02:b0:23:52:98:95:
36:1b:18:7c:fe:8b:d8:40:d4:3e:23:cd:cd:e4:7c:
14:04:05:21:e4:b0:da:e4:e3:6d:5a:c9:31:e4:5a:
42:b8:83:3b:f1:91:4c:7d:c1:d4:99:33:58:1c:0a:
2a:5b:11:ed:36:7d:d0:4d:d7:02:2c:f9:73:90:18:
dc:58:ac:6e:83:dc:a3:a3:05:5d:4d:46:d6:87:8d:
80:10:82:d2:be:10:c7:72:79:0d:4f:76:23:71:8e:
b3:99:04:86:bb:5b:14:e5:be:9a:86:18:74:15:4e:
80:dd:46:c9:7e:2a:cd:1f:f0:60:4d:b2:6f:7f:d1:
46:53:4a:a6:04:c5:e2:fd:65:ef:4e:f9:7b:66:16:
21:71:df:fb:d0:8e:55:ae:cd:3b:76:54:f9:d9:42:
5c:88:8f:de:d5:dd:79:d7:33:bd:b7:fc:8d:7b:09:
38:fb:b6:ff:a2:85:c6:25:2f:1d:21:07:36:35:34:
66:86:2d:da:d5:bb:7f:d8:64:78:d8:ae:58:bc:fb:
e7:3e:33:b5:fb:42:80:86:ab:c8:ab:37:6f:83:cc:
76:2a:ec:f9:17:25:89:cf:75:33:24:f4:34:bb:0c:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:0A:6C:C7:95:74:67:E3:BB:B3:BB:DA:92:8C:94:28:06:55:02
X509v3 Authority Key Identifier:
keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:70:15:9b:a5:20:37:d2:8c:27:00:19:85:ce:a1:35:54:88:
b7:a2:0d:51:c6:d4:22:ed:65:ef:ed:78:9e:ed:3e:36:2d:4f:
f2:dc:c4:c6:33:5f:14:d8:33:51:1f:3c:84:c2:23:cb:88:a5:
4f:ef:72:3b:d8:de:59:f1:07:92:dd:5a:73:ec:a7:1b:aa:a0:
37:35:e4:b4:b8:62:2f:9b:52:63:a9:92:13:77:5c:ec:87:cc:
91:66:c4:70:a6:52:c8:cc:25:9c:db:fa:3f:cd:6f:f2:e2:ed:
91:bc:cc:d3:07:a5:ae:30:af:d5:51:f8:38:37:f2:77:1a:9b:
90:6c:8c:ba:61:f1:02:d3:7a:fb:88:98:18:1f:22:0a:db:4f:
bf:01:df:f8:ab:a8:ff:3d:56:8e:2a:4b:de:e1:de:5a:53:3c:
1b:73:9f:d9:69:32:60:82:74:a0:49:c2:d8:67:07:37:c6:c3:
15:b0:4c:4f:40:29:fc:b5:ed:84:17:d7:b9:af:4d:d9:a7:17:
21:15:30:82:76:e2:1a:43:71:4c:5a:92:9d:fc:f9:48:76:5b:
4e:31:ce:34:99:2d:5e:25:f2:dc:c3:52:9b:1f:e1:68:23:1f:
e1:bd:85:ef:69:f7:92:fc:5b:00:46:d1:1c:6c:7a:2e:ac:2d:
90:0f:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:29:52 2025 by rpki-client