Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier: /NIzJHFYOZ73fUBaGmniSrunGBLqozlUDxZHj4r9d7o=
Subject key identifier: 10:5F:A5:FB:1F:B3:A6:76:80:3F:56:CA:F8:5B:BE:C4:A5:11:4F:43
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number: 0A25
Signing time: Fri 28 Mar 2025 20:02:32 +0000
Manifest this update: Fri 28 Mar 2025 20:02:32 +0000
Manifest next update: Fri 04 Apr 2025 20:02:32 +0000
Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: GvItsgWYlCZ2Wy6mYRZBYwGvWZ8afVniCUT38oPsmZM=)
2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=)
3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233D4
Validity
Not Before: Mar 28 20:02:32 2025 GMT
Not After : Apr 4 20:02:32 2025 GMT
Subject: CN=67e70058-3be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:17:1a:75:e9:b1:3a:b5:2e:39:c1:ce:d5:
ef:d7:9b:85:6e:21:b4:3b:93:85:21:14:db:8c:e6:
f7:30:62:c2:73:76:84:22:2f:59:02:f6:ec:74:ae:
58:b0:04:cd:6f:14:d9:31:1f:a5:fd:0d:96:0c:56:
52:f3:56:d5:73:4a:b7:55:03:9b:4c:fa:88:c0:3b:
a6:42:7c:25:5f:8e:75:e0:ea:21:b3:a2:fe:41:b7:
12:2d:12:e2:dd:7d:47:a8:0f:66:09:a8:26:f6:ea:
5f:7b:fb:15:7f:bd:d0:85:0b:cf:96:05:38:e9:0f:
15:04:56:f2:87:75:d0:6e:ba:5e:06:66:46:97:b8:
c0:c5:6e:1c:1d:40:70:8d:cd:fd:75:bc:30:9c:0c:
84:c1:59:5c:0f:c6:19:0b:dd:3f:1c:05:db:20:87:
e9:fd:45:ed:c4:24:ab:e9:c8:62:fe:84:d8:3d:09:
9c:b7:9c:26:76:97:3e:78:3f:5a:d6:69:d1:b7:0a:
07:4e:3e:69:38:89:50:7e:6f:26:1c:1e:da:db:2a:
2f:ef:96:dc:a3:de:62:d2:17:d5:c6:db:b8:8e:d6:
20:ff:21:46:7f:ec:33:38:ae:0e:29:55:9a:3c:56:
c1:97:77:58:1a:46:79:95:3f:85:d3:a2:60:b6:18:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:A5:FB:1F:B3:A6:76:80:3F:56:CA:F8:5B:BE:C4:A5:11:4F:43
X509v3 Authority Key Identifier:
keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:11:d9:92:7c:2f:28:e3:02:9d:60:2d:a9:ae:84:d1:c7:88:
3c:cc:b9:1a:d5:ea:87:59:a4:26:63:58:ce:b3:21:cb:c6:51:
be:41:db:48:6d:82:eb:99:2f:0b:17:1f:ce:a1:b2:51:11:f1:
78:9e:c4:67:e3:25:a9:b9:f7:c4:0d:2d:67:3c:23:c6:bd:97:
22:2d:25:ce:ca:92:07:8e:6b:3f:aa:ec:f4:c7:57:2b:ce:e4:
a1:23:e1:e8:20:39:06:60:35:64:4c:a5:74:08:42:e6:c9:8a:
62:4e:48:4b:aa:54:b4:cd:78:7c:42:e6:cc:e8:32:54:18:6f:
76:fa:fa:99:12:cf:ff:e9:07:a4:fa:27:82:64:5c:1d:3e:0d:
2b:8f:01:e2:7a:17:89:83:ac:cf:bb:c9:b1:04:bc:5b:14:cc:
bb:e0:7c:c2:f3:4b:6e:4d:99:c3:ef:bb:65:1d:88:0c:a9:b5:
0b:25:67:be:7a:68:55:95:01:5e:ca:c9:c6:bb:f2:25:8a:e4:
ba:88:be:d4:89:07:99:cc:82:21:9b:4c:b8:a0:06:96:f7:2c:
1e:7f:68:c5:00:3e:98:7b:09:db:72:4f:f7:5a:46:ae:d8:46:
7d:b6:0c:cd:51:d0:f6:23:5a:65:1b:e6:93:f0:21:5c:e4:e7:
18:5d:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:53:54 2025 by rpki-client