Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier: LVHws66e6ypKHB8FKOQUKVOvHV/GoIP6e+T1XZ8D8lo=
Subject key identifier: 0E:EF:DA:7E:35:0A:6D:8B:DA:BB:00:EB:12:57:FF:14:F1:A2:08:24
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number: 035D
Signing time: Fri 31 Jan 2025 01:01:18 +0000
Manifest this update: Fri 31 Jan 2025 01:01:18 +0000
Manifest next update: Fri 07 Feb 2025 01:01:18 +0000
Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: 48eNArylL+r7QTej0+Xw4NHFq+d2UBItGBB7FJRRGuI=)
2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: SgiMSTFsjgeREQPyRLpKSW3muW+9eyekiQ9Ab0wfEaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Validity
Not Before: Jan 31 01:01:18 2025 GMT
Not After : Feb 7 01:01:18 2025 GMT
Subject: CN=679c20de-a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:bd:c4:53:2a:a0:d5:52:66:da:a8:ae:81:
bb:e7:0b:0b:59:d1:f7:79:90:b1:0a:6c:5c:55:ac:
a0:92:d9:89:08:cd:96:94:78:50:7e:10:e9:9d:23:
ef:f3:9d:04:94:7f:d1:78:5d:b0:7d:69:a0:65:81:
8e:f3:85:6a:56:76:83:b2:ab:64:d4:ae:99:2e:1e:
71:9d:d9:db:42:11:b6:f4:4d:63:c3:66:24:72:d0:
f3:41:3a:3c:16:16:66:97:46:a7:b2:7e:2e:4f:17:
a6:70:57:0a:d9:68:bf:b7:a8:57:fa:ae:44:9b:d4:
55:d7:f9:59:6c:b3:25:67:b2:0f:2d:7c:a0:97:0a:
73:b2:ac:5a:c9:66:37:a8:d4:b8:73:32:df:c7:56:
dd:c6:bc:03:6f:80:4c:51:79:b5:e6:f4:90:99:03:
06:8c:e2:b2:41:e9:04:bb:e6:51:c2:55:6f:f2:8a:
00:e5:ac:a3:39:f4:9b:c8:c4:cf:68:5d:8d:80:98:
2f:25:c6:1b:e3:69:db:0b:94:7c:cc:84:a1:5d:38:
31:06:1d:8a:8c:21:25:f6:32:49:e7:0b:c1:0d:44:
45:a1:be:1b:28:fc:c1:69:fa:78:e1:54:04:ac:6e:
39:2f:0a:02:a3:d9:30:1f:ed:9a:61:97:d1:9b:32:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:DA:7E:35:0A:6D:8B:DA:BB:00:EB:12:57:FF:14:F1:A2:08:24
X509v3 Authority Key Identifier:
keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:33:6d:14:06:a2:44:8b:39:f5:d5:fd:6a:1f:0b:fb:fa:76:
e2:95:a2:5f:de:1d:60:97:2e:95:e5:57:52:67:0d:49:61:e8:
19:61:cf:3d:6d:57:68:02:9f:65:05:f8:f7:c3:00:cf:c7:1b:
0e:c4:fd:08:7e:81:29:d0:81:c3:3b:ec:1f:d2:f8:e8:95:83:
12:59:da:99:0b:e4:c4:12:b1:bf:4f:75:0b:bc:20:11:b1:e6:
f1:9c:e3:54:48:08:07:af:96:ee:1a:58:f8:e2:f1:21:08:f2:
3d:e2:38:b6:88:81:c7:00:70:8f:e3:e4:44:f4:79:1b:ca:01:
fb:b8:81:65:33:fe:d2:45:1e:82:51:f0:7a:a7:32:9d:96:c8:
cb:82:bf:09:c4:16:33:06:1f:62:7e:f9:ae:45:32:9f:16:de:
b0:d2:e4:91:2b:c2:88:59:b1:17:00:94:c5:c3:d8:81:a4:d0:
e9:cb:33:20:70:d0:f3:83:12:d1:e2:93:f0:ad:3b:66:51:58:
a7:a8:ef:a0:79:d6:ef:7c:cf:6e:86:ef:66:c6:ad:69:0a:37:
3f:b0:68:c8:70:b0:6e:29:a2:14:77:dd:49:d7:c6:57:cd:4a:
72:fe:f3:15:3f:ce:b6:79:b2:98:fb:7e:ef:f3:cb:da:67:b2:
47:63:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:11 2025 by rpki-client