Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
File: Icv-KamU2PngPkxNRObPW2SLeOw.mft (raw, json)
Hash identifier: Je9pEJlMVd8g9zKZlUQ3g1kIFTgjHSqefLXc9ZgrLVg=
Subject key identifier: 96:5D:36:9A:F4:28:8F:28:B6:22:6E:7B:F6:B8:B9:09:34:B2:72:36
Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC
Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC
Certificate serial: 12A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
Manifest number: 1293
Signing time: Fri 28 Mar 2025 17:12:30 +0000
Manifest this update: Fri 28 Mar 2025 17:12:29 +0000
Manifest next update: Fri 04 Apr 2025 17:12:29 +0000
Files and hashes: 1: Icv-KamU2PngPkxNRObPW2SLeOw.crl (hash: AXLqerQRSMVscwIgmxNpMyL//OBtVDcvdqAsGXBQAE4=)
2: AA5A77C88DB811EBA0613421C4F9AE02.roa (hash: fNoRTJRcUq+MisSf8jbpZwfIe00iU+V6oUD6yiNy/5Y=)
3: A5393FF2E70911E8B4D19B84C4F9AE02.roa (hash: 9kzHJ+mrOXjrh7/imCy9YTTgW8CKx7edCdpIZZ1nyQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4773 (0x12a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91272F9
Validity
Not Before: Mar 28 17:12:29 2025 GMT
Not After : Apr 4 17:12:29 2025 GMT
Subject: CN=67e6d87d-f7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:07:d0:cf:9d:e9:87:77:f1:a4:f0:dc:4d:97:
8c:5b:8f:f2:14:fd:6c:61:c5:45:77:57:dc:40:0c:
ee:b1:a0:d7:86:95:e4:e8:a5:4e:01:49:b6:eb:8b:
2e:47:e5:9b:22:fb:01:4d:57:27:e0:36:97:58:5e:
38:f9:51:af:3b:b3:ef:c9:4b:60:f2:be:c6:46:65:
3b:49:3a:00:5c:ee:68:b6:ea:68:8b:2f:be:33:5f:
05:30:d9:ea:20:8b:8a:e1:2f:17:c3:c3:5d:71:30:
6b:8b:c6:c6:11:3b:e7:92:23:84:c2:4a:32:60:2d:
7d:2a:e0:7f:1f:51:31:db:b7:e0:c7:2e:17:7b:31:
17:c0:52:ef:f4:f7:aa:8c:86:1d:e6:c7:b6:40:a8:
04:bb:13:b9:4b:63:65:10:ad:d0:6c:17:80:e8:94:
04:59:04:97:f7:ad:3b:67:42:d6:8c:65:ef:7b:87:
0a:00:e1:ff:c6:92:89:ca:c2:e4:17:65:27:f2:38:
cf:4e:de:de:27:a1:26:34:c6:c4:c3:af:70:bd:c8:
8c:fd:ea:bb:a0:1a:c6:b4:cb:99:b0:d3:af:1c:b0:
b0:03:05:3c:b0:a2:8a:e7:7c:45:b6:36:87:eb:bc:
89:ed:5d:18:3d:51:2c:fe:69:1d:76:1c:e8:3b:28:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:36:9A:F4:28:8F:28:B6:22:6E:7B:F6:B8:B9:09:34:B2:72:36
X509v3 Authority Key Identifier:
keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:72:57:5b:e7:12:00:72:43:8b:57:33:12:86:8d:42:4b:24:
42:b9:e9:37:8f:8f:2a:17:91:99:83:ea:05:6f:fa:fb:a6:71:
80:84:79:7e:20:ad:51:3a:84:4e:0c:4e:b3:4d:b2:ee:3c:af:
c9:e9:79:06:30:7f:18:21:fc:4f:cf:fd:0f:a5:3a:a5:83:d3:
ef:b8:a3:1a:63:fb:7e:68:f9:9d:85:10:b6:58:f6:5b:d0:bd:
bf:91:67:08:99:aa:f7:0d:32:c3:e0:eb:c3:4b:8f:6c:7e:06:
87:66:64:4e:69:84:eb:0a:76:0c:9b:75:65:45:fe:ca:0e:7c:
46:a0:28:5e:d9:0a:3a:27:3f:e1:51:86:33:2e:29:79:f3:22:
3b:0d:36:98:5f:39:64:c7:f1:29:a3:88:75:b1:5e:5e:c0:32:
05:af:b4:33:7b:d9:cd:2a:41:fa:cd:80:74:f1:d5:17:d2:cf:
35:25:05:ba:76:e6:0a:dd:a4:d9:2a:66:53:bd:18:25:b2:0c:
b4:b3:3c:8f:04:f0:20:8d:c5:b9:3e:4c:94:47:ba:6b:8f:2d:
5e:a6:99:4c:2d:07:5f:bb:91:5c:fe:df:04:a0:84:85:c9:5d:
43:ec:b7:a0:3c:fa:3c:04:d0:b7:34:c4:00:a2:21:72:03:27:
c1:02:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:41:53 2025 by rpki-client