Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier: scGdwMDIQlEUTeC6d1urIreDz82TwpzVfnNBhJ4vIWY=
Subject key identifier: F8:62:71:79:ED:D0:69:9E:39:3C:7D:8D:2D:88:BC:1F:4A:F2:13:46
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial: 0A8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number: 0A82
Signing time: Fri 28 Mar 2025 20:02:04 +0000
Manifest this update: Fri 28 Mar 2025 20:02:03 +0000
Manifest next update: Fri 04 Apr 2025 20:02:03 +0000
Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: 55TCwP37z29WndGQ4YjTeR/MR7wY8ksJOgspnWC05Go=)
2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2698 (0xa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2
Validity
Not Before: Mar 28 20:02:03 2025 GMT
Not After : Apr 4 20:02:03 2025 GMT
Subject: CN=67e7003b-f2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:75:68:d8:e9:66:b5:0b:47:50:77:c2:31:
c9:9b:87:a2:ee:26:cc:96:4c:ff:1e:9c:5b:9c:a6:
67:76:53:79:d9:29:fb:ca:91:6b:77:92:2a:39:9e:
23:5a:66:dd:d9:b5:b0:41:97:fc:74:16:dc:ee:d9:
72:0a:c2:72:3a:e9:c8:96:46:c0:8a:49:06:4d:0c:
ab:b2:ea:b1:b5:f5:57:c1:5d:53:61:85:ae:d2:0b:
12:39:08:80:a6:d0:2b:99:a0:7b:3a:b4:9e:9d:a5:
89:93:3b:37:40:ab:ae:80:96:8b:1a:94:f0:e4:cf:
37:7d:5c:99:df:54:b6:6c:b6:65:32:c0:0f:8f:4f:
e4:6f:89:02:7b:55:48:67:3b:6a:0e:ed:0d:1f:dd:
84:8a:bd:89:9a:fb:92:65:ff:48:85:1a:24:6f:1b:
8d:1a:64:60:92:2f:db:b3:7e:72:7e:41:e3:78:86:
88:b0:aa:e6:0f:b4:56:73:01:f0:61:5f:64:3b:29:
94:16:6f:87:31:f4:8a:4d:c5:6b:48:aa:9c:7e:39:
4f:50:23:0d:15:54:f9:14:f2:e3:ab:2c:a3:87:91:
1d:47:d7:1b:fc:03:6b:e7:c1:b4:4b:0c:f7:20:f3:
ef:82:16:5f:6e:b5:1d:d9:d7:de:7d:2d:3c:a0:15:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:71:79:ED:D0:69:9E:39:3C:7D:8D:2D:88:BC:1F:4A:F2:13:46
X509v3 Authority Key Identifier:
keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:3b:c2:92:90:43:bc:f6:d3:33:b9:64:20:24:43:af:70:
a3:32:ec:15:6e:82:92:17:be:09:e9:86:f0:32:d4:3b:8b:89:
49:8b:15:0c:c4:27:17:4e:90:05:1d:94:4d:bf:00:86:f6:e0:
29:ed:9b:e9:20:ae:21:c1:3b:f6:09:f5:44:83:a0:96:77:54:
13:70:82:de:92:af:65:98:39:08:d6:f4:f6:32:2f:f7:38:95:
39:b9:e4:e0:62:bf:c2:31:b4:19:33:bc:66:b4:e2:5d:b6:ec:
ea:ea:ae:61:c2:90:90:39:5f:3d:02:26:44:8d:5f:6d:e2:19:
b6:da:4b:df:97:ae:2c:ed:15:8f:69:9b:5b:02:4f:f9:11:6d:
0a:20:48:2d:1c:f4:df:3f:cc:02:46:b2:ba:4a:12:4c:6e:a9:
1e:84:e1:12:30:22:28:eb:7b:48:66:d7:da:77:7c:39:1d:da:
16:08:c7:52:43:e1:4a:9b:ed:28:a1:33:cc:7b:31:38:39:6d:
60:fe:16:81:03:3d:da:d3:eb:93:9c:60:95:4c:b3:b5:6d:8a:
c6:3e:27:2d:92:f7:08:20:e0:e5:f0:db:5e:13:77:bf:c2:9a:
e9:2b:ed:7e:10:20:38:75:fc:67:85:9d:56:e8:a6:44:56:1a:
1f:bf:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:53 2025 by rpki-client