Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier: ik5vruvdOHj0tawmph/o9ioPL/fCWxXUddjW6WlHLKc=
Subject key identifier: C6:33:A5:49:2A:C8:E1:45:87:23:68:2E:F7:70:57:50:DD:60:18:FA
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0B46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number: 0ADA
Signing time: Fri 28 Mar 2025 20:02:00 +0000
Manifest this update: Fri 28 Mar 2025 20:01:59 +0000
Manifest next update: Fri 04 Apr 2025 20:01:59 +0000
Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: hAf8iardQeK4882shrg4TRmYokBJomxmqxtYP353afw=)
2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 3y9BDXWhIindn9fV5yRhLvjaXOZjwz7wE89JCwHuZfU=)
3: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: I/yFDnonwjcIdEyDMRzyxAMhULYfijDfUDeIkoqzyfk=)
4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: DOBTNH4GGNPUe/CVItieZfmqwMcwBWdfPDr7AZPstYA=)
5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: ZoKV0eKn1yJ2Z4XOUtSzr1WXtFoIjNrfssqYSLED+D8=)
6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 2efUF6FV6lzagFO6ixmFLw5grpZeZdNkHznhn486HIY=)
7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: 1Oowb0Op5/Cu+8FSjA8UF2OrKzh23X2j+ax5PBrX1iA=)
8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: ioPHlw0sW6GeE8i+5W/iQUIzBchZcQHPRQo5hhiTaFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2886 (0xb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2
Validity
Not Before: Mar 28 20:01:59 2025 GMT
Not After : Apr 4 20:01:59 2025 GMT
Subject: CN=67e70038-51ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:4f:2e:e8:b8:19:5c:9a:6e:be:fa:7a:21:
12:3e:f0:bf:be:cc:ef:59:2f:99:8a:94:35:2e:f4:
20:a8:78:c5:e8:b7:fb:a2:63:38:a1:7c:e2:98:8f:
92:65:23:a6:a5:e3:63:74:56:b4:73:7b:2c:4b:41:
05:f1:37:16:37:77:84:f9:96:10:b6:76:34:6b:e4:
bf:b3:cb:22:89:ef:0d:f3:9f:00:5f:02:bf:6f:6c:
10:4f:4e:9b:35:69:ac:83:68:e7:7a:41:8d:88:9b:
86:90:d6:9f:41:7b:45:b5:37:46:c6:be:87:13:0d:
95:1d:60:ca:d7:19:d5:a8:05:43:1f:7c:92:db:60:
65:47:65:5c:39:39:39:eb:85:9f:ad:ae:46:8e:a5:
04:14:d7:a8:b0:20:11:e7:2f:c1:82:1a:7a:f0:07:
fb:07:51:cb:9b:a8:20:33:4a:69:6d:03:2d:be:ca:
24:cf:cb:8d:32:85:8c:79:c6:ab:4f:2e:36:1c:23:
7b:a6:1c:a5:f5:67:26:e8:62:59:02:e6:5d:7d:4b:
f9:41:50:8d:46:fb:8d:07:e7:5b:af:55:33:d4:e5:
32:20:0d:8c:e6:c6:71:b8:be:d7:42:c0:b1:f1:f1:
98:e4:ac:e9:37:97:16:37:cc:8c:78:b9:9f:ac:68:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:A5:49:2A:C8:E1:45:87:23:68:2E:F7:70:57:50:DD:60:18:FA
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:57:fb:6a:27:47:80:14:ba:fb:05:7e:cd:03:0b:5b:9d:bc:
61:c1:4b:58:7d:06:5e:05:c3:be:b6:fb:23:06:66:6a:5e:1c:
99:ad:2d:5e:df:0b:1a:28:70:5f:ed:4e:cc:31:19:98:c5:14:
24:f3:f2:e4:0d:3c:85:c2:f2:08:d3:86:da:fb:78:ff:94:e6:
1f:0f:a0:c8:c1:d1:b5:00:64:87:43:59:84:e0:ca:62:22:e1:
e1:d5:e3:0f:bf:32:6b:13:d3:82:99:d9:7b:a5:03:13:c4:f8:
65:b1:26:a4:28:f7:a5:36:12:23:4b:13:4b:a3:b5:d9:f7:ba:
1b:22:06:86:82:24:48:c6:46:33:67:3a:82:ad:b0:75:90:4a:
8d:3e:bd:a7:9c:10:9d:40:12:51:a0:ce:08:b2:1e:dc:3c:74:
b4:10:d8:04:c9:78:a6:0b:eb:32:9e:25:21:c4:72:d1:d5:16:
81:cf:44:2c:a5:8d:c1:13:42:1d:aa:78:96:a4:6f:e0:cc:22:
28:f1:b2:41:7f:1b:67:5b:50:16:f5:3f:48:97:f0:0d:49:1d:
16:c6:40:af:23:16:47:41:ff:04:9c:8a:71:02:3f:70:fc:e0:
a7:2e:85:a2:be:7c:45:e8:4c:9d:7b:ad:b6:81:9f:d8:53:97:
4b:75:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:05 2025 by rpki-client