Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File: kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier: dJ0Y68tTadetMdDxMA0wcVD4gHdA64qdMHvFMg4Acms=
Subject key identifier: FC:59:9E:70:FB:0F:22:2B:CD:84:0A:12:92:0C:AC:30:D9:05:8B:29
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer: /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number: 03F9
Signing time: Fri 31 Jan 2025 00:38:12 +0000
Manifest this update: Fri 31 Jan 2025 00:38:11 +0000
Manifest next update: Fri 07 Feb 2025 00:38:11 +0000
Files and hashes: 1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: EF84P43F3bYjnoNhmXqJaZ8XOWjxnemcDx5FmVZPmjo=)
2: E7DBA61CA1FA11EF9696DF59C4F9AE02.roa (hash: 346r3b4w4VthONfD4bZWfxOP9wmeXPFHqji5dvclr0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Validity
Not Before: Jan 31 00:38:11 2025 GMT
Not After : Feb 7 00:38:11 2025 GMT
Subject: CN=679c1b74-e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:75:73:a4:12:fd:f5:46:cd:fa:45:9f:f1:
36:17:d4:43:01:7e:9a:b6:05:ff:e5:8b:ab:93:e2:
39:c4:11:8a:34:8e:9f:d3:0f:1e:06:04:f9:50:cb:
30:eb:4f:a7:11:f1:bd:1b:3a:8b:17:6d:5a:a1:10:
62:f1:c2:9f:4d:41:1b:db:34:52:69:91:11:6e:21:
ce:17:f8:fe:aa:76:a1:16:78:bb:55:5a:8e:0c:a4:
e8:61:36:b1:d9:1b:fc:77:ab:b7:cd:32:7c:78:95:
42:0e:c1:0d:38:75:e8:8e:72:31:47:81:40:a4:13:
a5:3d:44:73:ad:c5:80:9b:2b:d0:4f:6d:8b:b7:90:
a5:4e:93:dd:27:0c:32:25:06:da:c8:3c:cf:54:cf:
50:43:8c:80:30:f6:fc:83:cf:34:94:7d:17:a6:86:
4c:29:1e:55:40:d0:2b:9e:ca:e6:f5:76:c1:55:8e:
aa:3c:74:93:2d:68:e5:b5:95:79:93:af:73:01:15:
c7:f7:c9:88:ff:83:87:7e:fd:0f:eb:63:59:66:ef:
ba:f6:89:fd:1d:5d:a2:62:f3:61:04:f4:e7:ba:04:
5e:16:f9:e3:4b:e0:2a:fe:06:dd:7a:f6:8a:39:02:
05:1f:fc:6f:51:1d:ed:4d:42:5c:a1:72:ef:8d:1f:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:9E:70:FB:0F:22:2B:CD:84:0A:12:92:0C:AC:30:D9:05:8B:29
X509v3 Authority Key Identifier:
keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:7e:e9:98:23:26:00:36:a4:8c:8a:ac:31:a6:33:8c:8d:0e:
db:9a:c5:f3:98:24:58:a5:61:ed:9e:39:b4:44:7a:ad:56:92:
5f:7d:24:af:ff:45:bb:b5:51:34:cf:9e:f0:9b:32:0a:1a:06:
ea:82:ec:4d:29:71:45:9a:28:91:03:d7:48:ae:82:7d:93:3e:
f0:5e:5d:d2:db:fd:c0:2c:d8:a2:a7:52:fe:44:4b:55:60:2f:
23:d7:ef:7f:3e:5d:e5:5e:30:ef:63:b3:e9:55:2b:cd:37:0b:
da:85:78:27:6c:3b:5a:ee:d1:c8:6b:35:ca:56:5c:22:af:da:
cb:ea:e7:61:11:ba:30:50:08:96:38:40:ed:dd:89:eb:87:71:
08:28:94:12:e0:11:a5:8c:da:0d:c4:ec:95:2e:6d:b6:da:d5:
03:81:2c:b6:16:90:42:1d:46:41:06:9d:90:7c:bf:18:10:c4:
d4:45:0c:1d:02:7a:11:60:02:05:df:31:ec:a0:80:46:f9:08:
7c:84:4b:7d:85:e8:17:73:7f:02:11:85:da:1e:87:dc:8a:64:
c2:bc:99:99:ef:a0:81:df:96:e8:c4:de:38:ed:d8:9a:67:c7:
3a:29:f6:64:97:5b:07:ff:aa:68:9e:f9:0f:a3:f4:1c:79:96:
b1:54:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:32 2025 by rpki-client