Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json)
Hash identifier: dC+RLYHDo7POYfFoqtFkFOKD88R49PjwDRKVK8hAxD4=
Subject key identifier: 42:60:04:6A:75:A2:6A:6F:9E:03:05:B1:B4:04:1F:E7:9C:83:DF:9B
Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
Manifest number: 59
Signing time: Sat 29 Mar 2025 06:26:55 +0000
Manifest this update: Sat 29 Mar 2025 06:26:54 +0000
Manifest next update: Sat 05 Apr 2025 06:26:54 +0000
Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: vBQCULFpijhHFwEIe2hm06SxCGgeHjAIFFXWoo/rlvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF
Validity
Not Before: Mar 29 06:26:54 2025 GMT
Not After : Apr 5 06:26:54 2025 GMT
Subject: CN=67e792af-ad89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:e1:7c:64:32:2a:bc:f8:f8:f1:34:3e:e4:
a4:59:9d:be:0a:76:cd:9d:36:8e:03:aa:8d:d9:c6:
d8:12:0e:3d:49:a0:ca:11:e0:9d:dd:1e:a0:5e:4e:
3e:9b:42:07:74:71:12:ee:f6:0d:8f:6a:e2:e5:6c:
86:ae:c1:ca:34:85:d9:eb:d1:c7:da:98:57:4a:82:
a6:18:20:b5:b9:3e:13:06:a9:a1:e9:f6:81:5b:b0:
03:68:91:63:61:c9:db:bb:f0:e8:86:08:df:28:ae:
de:89:55:5c:87:83:32:e9:08:d8:bd:15:44:af:e7:
0e:14:80:e4:0a:ea:b3:c9:37:e8:52:fc:e6:e7:df:
c3:53:f9:9d:e2:e6:b1:46:17:fb:04:11:41:77:71:
e8:cd:87:a1:6e:3f:3f:42:ec:1d:70:7c:6f:e7:b7:
2f:75:99:ac:76:fa:ed:7d:87:e3:9c:c8:8a:10:cd:
6a:57:f4:5a:c7:18:38:d5:13:20:10:28:20:6f:17:
cc:af:87:a0:83:86:5b:9a:6d:21:51:36:5c:20:c9:
90:93:18:7c:9c:53:be:1d:da:bc:de:11:7f:60:bf:
cf:48:31:eb:79:90:47:33:46:db:89:aa:3d:e0:7c:
40:61:fc:aa:b4:54:e3:54:b2:b1:67:03:f5:2b:96:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:04:6A:75:A2:6A:6F:9E:03:05:B1:B4:04:1F:E7:9C:83:DF:9B
X509v3 Authority Key Identifier:
keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e1:4e:c9:88:88:32:61:c8:dd:b3:a4:d0:41:6b:2a:ea:28:
e5:30:a6:98:75:ed:28:0f:cb:51:e7:64:28:eb:34:9f:72:e3:
fb:f6:ea:0e:b5:86:a6:2a:9f:de:5c:93:97:ce:6f:20:60:1e:
66:e5:c9:d9:46:58:81:db:4e:da:14:f7:7b:8a:5f:1e:97:be:
1f:03:54:3d:90:d5:99:07:6b:56:f4:9b:36:2d:03:ab:58:0b:
ab:38:74:dc:d4:3e:67:28:b1:b4:6e:7d:98:36:0a:62:08:ff:
e8:05:5f:2b:25:d3:fe:4e:26:4c:91:eb:c4:fd:ee:d0:13:32:
ba:b5:a2:56:e6:f1:91:bf:a8:fa:3e:c8:fb:eb:4e:6a:78:f5:
bd:76:aa:66:fd:39:81:f1:96:44:81:7a:6f:3f:e6:9f:d9:35:
af:a6:49:35:77:cf:b5:bd:ba:86:be:27:77:5a:a4:1c:25:01:
3f:b8:a6:de:2e:1f:73:5f:6d:c0:d2:d9:64:3f:bd:25:a9:84:
ee:ff:c7:f2:0f:5e:37:9f:4c:95:c8:1b:bc:c3:89:ca:ad:b6:
cc:c6:35:c0:9c:25:5d:00:87:9a:ec:a8:e8:e7:0f:ac:c1:04:
13:e8:f4:98:8c:9e:44:f0:cc:9d:0a:29:8c:cc:04:eb:84:92:
5e:f0:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:02:23 2025 by rpki-client