Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier: IMrbplKf7pf0xht6wHhNvxCrBycT+ivSz0+v/6rHNis=
Subject key identifier: 6C:4D:D1:7C:BA:1E:07:31:29:75:5E:CE:85:8B:41:D9:0C:DE:1D:EE
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial: 0FCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number: 0FCA
Signing time: Fri 28 Mar 2025 17:35:23 +0000
Manifest this update: Fri 28 Mar 2025 17:35:22 +0000
Manifest next update: Fri 04 Apr 2025 17:35:22 +0000
Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: KEl2M2LROqJnP1ynru5UEGqvvZdulwDVCI67HPURxPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4042 (0xfca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A161
Validity
Not Before: Mar 28 17:35:22 2025 GMT
Not After : Apr 4 17:35:22 2025 GMT
Subject: CN=67e6dddb-6e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:84:ec:99:46:1d:df:3b:77:63:41:be:da:
28:85:cc:7a:79:fc:f2:c8:be:cb:07:90:b7:10:98:
86:94:69:33:aa:d8:47:c2:f1:0a:22:45:af:4d:a1:
7b:0b:75:cc:2c:bd:28:6b:ef:37:78:8e:e6:95:9c:
d1:3d:f1:07:6c:a5:4c:81:ec:ae:8e:dc:4f:a1:1b:
44:d8:a0:4e:49:61:33:ae:67:ce:43:54:2b:76:fd:
33:f4:65:09:5a:9b:f5:61:ab:14:47:09:4f:7b:84:
e4:a7:16:25:1a:f4:bc:ed:1d:b9:5a:1a:94:d6:f4:
45:54:74:6c:b3:20:74:9a:c3:a6:8e:f3:c7:92:9e:
c2:47:30:87:5b:5e:e1:8d:52:72:35:b7:cc:f3:b7:
59:e0:07:44:79:f1:43:b4:b9:17:e8:7a:00:03:7d:
6b:72:2f:46:8b:ea:cc:d4:44:05:41:9c:0d:9f:1e:
f2:89:1b:78:af:b9:e4:10:f8:64:b4:e0:77:92:2f:
1c:3b:7c:3d:6b:2f:5c:8f:c2:f1:b4:c5:ea:82:c3:
fa:a9:15:64:2b:a8:6f:ce:50:21:30:bb:4e:ae:a6:
8e:ef:e3:35:44:7a:82:9f:25:27:62:76:0f:0c:0f:
97:57:c4:40:fa:37:59:0f:db:35:c6:f0:36:cc:b1:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:D1:7C:BA:1E:07:31:29:75:5E:CE:85:8B:41:D9:0C:DE:1D:EE
X509v3 Authority Key Identifier:
keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:d9:a5:05:0a:73:65:cb:cc:2a:6c:6e:d4:41:f7:c1:f9:
b0:e3:57:16:d8:78:d0:15:3e:03:05:c7:54:b8:14:26:09:6d:
39:25:48:49:87:8f:bd:c9:a9:c9:b1:4b:a6:a8:bf:8b:6f:e0:
12:5f:63:cc:5b:44:12:69:15:cf:dc:0f:16:88:e5:3d:b1:df:
d5:c1:8e:4d:59:39:88:0b:a1:a7:e7:17:27:47:7f:ec:67:3a:
6b:91:3c:ed:0a:71:36:6e:93:76:b0:7e:1f:cd:07:02:9a:fc:
06:ce:d9:f7:28:f5:a9:f2:71:52:bf:b9:77:97:db:00:73:65:
f3:54:1e:d4:ed:0d:6e:80:a1:6f:16:b2:0a:be:77:46:68:86:
63:80:e3:dc:0b:5f:3d:56:d7:60:0a:c4:69:e4:dc:28:63:1d:
6a:dc:ed:95:44:b5:1a:88:42:6b:63:3c:96:65:6b:57:ad:23:
b0:b7:88:cf:93:71:ed:53:35:c7:12:73:39:c2:b5:86:2a:46:
49:af:2f:3a:02:16:71:12:e2:36:d3:47:50:8b:75:6a:f2:cd:
6d:af:e0:a8:5e:71:bd:22:af:4f:15:fe:24:1a:25:2c:2a:20:
39:ed:76:9f:9c:c8:0d:07:37:04:60:d1:9e:41:6d:a3:2d:a2:
a1:68:64:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw
QTBDRDJEQkEwHhcNMjUwMzI4MTczNTIyWhcNMjUwNDA0MTczNTIyWjAYMRYwFAYD
VQQDEw02N2U2ZGRkYi02ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmbGE7JlGHd87d2NBvtoohcx6efzyyL7LB5C3EJiGlGkzqthHwvEKIkWvTaF7
C3XMLL0oa+83eI7mlZzRPfEHbKVMgeyujtxPoRtE2KBOSWEzrmfOQ1Qrdv0z9GUJ
Wpv1YasURwlPe4TkpxYlGvS87R25WhqU1vRFVHRssyB0msOmjvPHkp7CRzCHW17h
jVJyNbfM87dZ4AdEefFDtLkX6HoAA31rci9Gi+rM1EQFQZwNnx7yiRt4r7nkEPhk
tOB3ki8cO3w9ay9cj8LxtMXqgsP6qRVkK6hvzlAhMLtOrqaO7+M1RHqCnyUnYnYP
DA+XV8RA+jdZD9s1xvA2zLE6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxN0Xy6
HgcxKXVezoWLQdkM3h3uMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC
MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK
cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAC8tmlBQpzZcvMKmxu1EH3wfmw41cW2HjQFT4DBcdUuBQmCW05JUhJ
h4+9yanJsUumqL+Lb+ASX2PMW0QSaRXP3A8WiOU9sd/VwY5NWTmIC6Gn5xcnR3/s
ZzprkTztCnE2bpN2sH4fzQcCmvwGztn3KPWp8nFSv7l3l9sAc2XzVB7U7Q1ugKFv
FrIKvndGaIZjgOPcC189VtdgCsRp5NwoYx1q3O2VRLUaiEJrYzyWZWtXrSOwt4jP
k3HtUzXHEnM5wrWGKkZJry86AhZxEuI200dQi3Vq8s1tr+CoXnG9Iq9PFf4kGiUs
KiA57XafnMgNBzcEYNGeQW2jLaKhaGTf
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:38:03 2025 by rpki-client