Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File: KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier: ltK+DeTkuLmt8+2IkiMaztBouyhrjMySzV8NndWrOQg=
Subject key identifier: 42:84:1F:FC:72:B2:12:51:B0:24:85:14:CA:73:04:33:79:B7:31:94
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer: /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number: 2410
Signing time: Fri 28 Mar 2025 16:27:53 +0000
Manifest this update: Fri 28 Mar 2025 16:27:53 +0000
Manifest next update: Fri 04 Apr 2025 16:27:53 +0000
Files and hashes: 1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: AS/v31qdM1ejYcgE/JIIMQCZQJ3ovtZoLXg6+48LqQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02
Validity
Not Before: Mar 28 16:27:53 2025 GMT
Not After : Apr 4 16:27:53 2025 GMT
Subject: CN=67e6ce09-0cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:e2:ca:fb:54:5a:75:69:4c:a3:31:d1:2f:
a5:a0:3f:3a:72:89:f7:52:ee:40:d9:9b:02:2f:13:
70:05:01:cf:41:94:46:1d:4a:11:6b:8a:78:d7:2d:
4d:e3:2d:5d:35:05:15:8b:4b:29:51:f7:ea:1a:9a:
d2:fc:a1:1a:d1:36:29:e7:98:91:f2:4a:d9:64:4b:
76:a0:d2:25:4b:97:e3:56:79:3d:5d:dc:af:52:ea:
c8:74:e2:19:f6:71:19:63:c7:0f:66:01:9b:3d:6d:
e9:37:d6:c8:6f:9d:41:83:31:2d:14:26:90:7d:72:
2f:da:24:1a:96:1f:8b:2a:1b:e5:07:95:9e:b1:74:
4d:bb:dd:67:28:3f:be:cc:14:62:3b:64:c5:a3:f9:
3e:c6:2f:61:78:69:7c:e8:26:76:d9:0b:2c:20:b4:
37:3e:d5:b6:99:86:c7:aa:33:b1:ba:20:bb:27:9e:
24:3a:3c:88:9c:d1:46:dd:d4:4b:44:4f:7c:fd:aa:
82:b5:c3:49:92:ae:16:1a:ca:71:fc:dc:09:77:a9:
79:84:c3:33:1f:55:84:17:08:a0:49:50:7d:f6:76:
76:cb:2c:56:35:8d:c1:74:b7:e9:33:46:22:21:fe:
28:46:97:bc:26:77:0a:6a:1d:1c:f5:bc:32:58:54:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:1F:FC:72:B2:12:51:B0:24:85:14:CA:73:04:33:79:B7:31:94
X509v3 Authority Key Identifier:
keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:b6:0e:57:9f:58:5c:3d:c9:1e:c1:01:14:dc:d2:7a:0e:f3:
60:42:98:b7:b5:4a:84:53:e2:0a:8f:81:a0:4d:5f:6e:c6:cc:
80:e0:f1:c8:39:f0:b1:48:af:19:a3:26:2e:c9:23:38:f1:f3:
c3:5f:56:46:04:ca:4b:5f:4a:94:c4:f7:d5:5b:fe:76:0d:86:
59:3c:15:df:8d:c5:7d:76:dd:39:77:4b:dc:3f:8e:7a:65:a4:
05:4d:d8:a2:74:52:d1:43:27:76:b3:8c:50:9f:93:16:8e:0e:
63:66:d8:0f:ea:bb:01:b7:b5:9a:f9:95:51:08:04:e5:ec:f4:
21:34:5e:26:9d:18:c4:5d:57:5d:cb:3a:1d:89:bb:f2:20:e5:
55:df:89:cf:6c:f4:97:59:13:d9:fd:75:e9:d6:44:7d:3a:4f:
e0:87:95:29:fe:b4:f8:ba:6c:ea:89:8b:76:22:db:68:b6:22:
74:a0:91:98:b3:6e:2a:50:74:8d:2c:5b:a7:24:64:21:38:75:
25:50:1e:1c:e9:79:03:02:9b:ea:53:53:4c:b4:fe:19:3d:e1:
3f:88:eb:36:65:37:b1:ff:4e:33:75:0f:aa:a3:4a:22:15:d8:
a2:6b:2e:db:89:f1:2c:a2:e3:2f:42:1e:da:11:00:2f:55:c2:
55:b3:02:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKDI4QzU2NzcxRUU0OTY0M0ZERkM0NEY4RTMwODlBNkJE
Nzk1RkZDODQwHhcNMjUwMzI4MTYyNzUzWhcNMjUwNDA0MTYyNzUzWjAYMRYwFAYD
VQQDEw02N2U2Y2UwOS0wY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqU/iyvtUWnVpTKMx0S+loD86con3Uu5A2ZsCLxNwBQHPQZRGHUoRa4p41y1N
4y1dNQUVi0spUffqGprS/KEa0TYp55iR8krZZEt2oNIlS5fjVnk9XdyvUurIdOIZ
9nEZY8cPZgGbPW3pN9bIb51BgzEtFCaQfXIv2iQalh+LKhvlB5WesXRNu91nKD++
zBRiO2TFo/k+xi9heGl86CZ22QssILQ3PtW2mYbHqjOxuiC7J54kOjyInNFG3dRL
RE98/aqCtcNJkq4WGspx/NwJd6l5hMMzH1WEFwigSVB99nZ2yyxWNY3BdLfpM0Yi
If4oRpe8JncKah0c9bwyWFTDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKEH/xy
shJRsCSFFMpzBDN5tzGUMB8GA1UdIwQYMBaAFCjFZ3HuSWQ/38RPjjCJpr15X/yE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpEX2Z4RS1PTUltbXZYbGZf
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNVm5jZTVKWkRfZnhFLU9NSW1tdlhsZl9JUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9LTVZuY2U1SlpE
X2Z4RS1PTUltbXZYbGZfSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDtg5Xn1hcPckewQEU3NJ6DvNgQpi3tUqEU+IKj4GgTV9uxsyA4PHI
OfCxSK8ZoyYuySM48fPDX1ZGBMpLX0qUxPfVW/52DYZZPBXfjcV9dt05d0vcP456
ZaQFTdiidFLRQyd2s4xQn5MWjg5jZtgP6rsBt7Wa+ZVRCATl7PQhNF4mnRjEXVdd
yzodibvyIOVV34nPbPSXWRPZ/XXp1kR9Ok/gh5Up/rT4umzqiYt2IttotiJ0oJGY
s24qUHSNLFunJGQhOHUlUB4c6XkDApvqU1NMtP4ZPeE/iOs2ZTex/04zdQ+qo0oi
Fdiiay7bifEsouMvQh7aEQAvVcJVswJx
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:07 2025 by rpki-client