Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier: lMcrAlfyBkYfqU6laXlALWqW01/avrosuzmHCdS/CMc=
Subject key identifier: F1:6D:96:BA:73:C4:AA:78:D2:0F:3C:A0:78:05:A6:63:48:D5:80:C3
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number: 021D
Signing time: Sat 29 Mar 2025 02:13:18 +0000
Manifest this update: Sat 29 Mar 2025 02:13:18 +0000
Manifest next update: Sat 05 Apr 2025 02:13:18 +0000
Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: PbAUjvzTsVIDxxfaeT2UwD/1irV9AEN3r8Y9/8B3K0w=)
2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: 6xgX7RCx1jR+s1bDY/KUKo4N6DkkwUVmskiN+xXDBfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112A7D
Validity
Not Before: Mar 29 02:13:18 2025 GMT
Not After : Apr 5 02:13:18 2025 GMT
Subject: CN=67e7573e-9989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:e1:4f:de:63:11:38:56:3f:5e:61:b1:ad:
f7:a8:d5:fd:08:3c:cf:a3:33:60:3d:8a:53:f1:a7:
16:2a:ee:53:dd:bc:b3:a7:dd:87:0b:db:1a:96:02:
2b:7c:9f:4b:e0:66:14:95:5d:1b:50:dc:81:cb:42:
ab:fd:6e:f1:94:81:5c:3c:84:cc:79:cb:68:67:d8:
b2:97:89:56:40:5a:3b:54:ed:cc:fe:a0:5e:ff:13:
ec:a0:92:d6:fd:12:0b:87:c5:81:3d:f6:67:06:cc:
28:ea:7e:65:11:c4:bb:fb:5f:ce:9e:01:bc:31:23:
7f:91:f3:96:f7:ab:11:8a:5c:91:e7:f7:3d:1c:c3:
49:01:ce:3f:b7:11:ee:78:10:8d:49:d0:26:dc:96:
3c:33:5d:4e:fb:b8:1e:d9:9a:c4:4a:e1:74:de:3e:
fc:98:9b:c7:ab:03:22:8b:07:ae:48:5a:0a:2b:09:
03:80:dd:cf:4a:c8:6a:59:aa:7c:34:f2:02:e9:a9:
63:71:0b:17:f7:0b:cb:fb:cb:44:f2:d3:aa:84:59:
0a:8a:b5:55:a9:ee:66:54:fc:e2:d9:d4:74:26:6d:
41:bc:b9:c3:c4:c0:a2:1b:ac:bb:5b:aa:48:94:00:
dd:46:47:85:00:5b:09:5e:f8:32:b1:3a:b5:34:2e:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6D:96:BA:73:C4:AA:78:D2:0F:3C:A0:78:05:A6:63:48:D5:80:C3
X509v3 Authority Key Identifier:
keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:55:6f:76:d7:04:00:53:30:cb:e4:ab:ae:b8:cf:c4:3b:
f8:1e:96:6b:bc:b4:33:b4:ec:30:89:d4:36:dc:51:35:df:f8:
08:f0:b2:50:57:98:48:90:e6:02:45:96:48:8b:e2:6d:9a:b4:
e3:b1:82:b1:22:6d:8f:34:70:32:96:f1:74:9e:e3:11:cd:56:
92:9a:30:21:4a:77:20:2e:2c:25:0a:bd:61:5d:c1:06:95:62:
9e:c5:7f:25:b3:03:8f:89:e9:db:17:aa:f7:62:08:d1:36:be:
a0:4f:a2:84:ef:36:7a:e4:92:f8:7e:93:be:fc:98:22:3f:f1:
48:69:7b:6e:2d:d5:05:ff:5c:bb:91:eb:47:ab:f9:69:d6:24:
cf:a7:bd:8d:df:60:d1:3e:01:bc:93:1f:6a:fb:53:d3:4b:75:
ab:67:27:77:65:3d:8f:f4:30:88:7a:3a:8f:83:ed:59:ab:e9:
19:d3:b3:bb:22:aa:83:d6:73:e7:fc:35:1e:0e:31:3b:fd:c0:
3d:28:25:4d:a4:d1:18:6e:c1:a0:c2:ea:3a:ab:9c:f2:68:c7:
4e:26:86:0b:d4:e0:7f:47:99:0e:75:45:ad:04:1c:24:04:e9:
f3:42:e3:78:bf:9a:da:00:46:44:09:79:80:30:33:3d:35:cf:
c4:c6:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:56:23 2025 by rpki-client