Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File: KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier: WZXXAYZnJO3jeBGLDXDjtnMIOfyv86EAZBotkgqWupM=
Subject key identifier: 72:B2:55:44:20:85:F3:F1:92:93:9B:20:BC:7B:25:0F:3A:01:E6:3D
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer: /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial: 069C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number: 0693
Signing time: Fri 28 Mar 2025 22:31:28 +0000
Manifest this update: Fri 28 Mar 2025 22:31:27 +0000
Manifest next update: Fri 04 Apr 2025 22:31:27 +0000
Files and hashes: 1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: Uwl9jimqTXEfpEvgVwhXDVm2QE+JJcO0xIAzUIcZNO0=)
2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=)
3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190960
Validity
Not Before: Mar 28 22:31:27 2025 GMT
Not After : Apr 4 22:31:27 2025 GMT
Subject: CN=67e72340-d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:01:94:53:23:85:99:29:af:94:bf:2b:9b:
8f:c4:cf:33:8b:b8:9a:da:62:d0:67:9f:66:a7:79:
c9:5d:5a:5c:20:99:ef:20:7f:98:a5:e2:d5:f5:ba:
85:9b:96:82:f7:bf:3d:3b:a4:7b:b2:1a:7e:02:13:
3c:a6:bb:c6:62:e9:b1:96:0e:bb:be:bb:c9:c2:f8:
c8:b1:4a:a1:69:2c:77:dd:b3:41:f8:92:fd:65:2e:
0a:ce:f9:56:4a:46:db:cc:55:5f:82:06:77:a4:d3:
f6:7b:a0:f4:02:fc:35:06:a0:45:e0:3a:6b:45:c0:
0e:09:02:2a:59:83:75:b6:85:5b:78:22:ca:03:37:
82:93:41:53:05:a6:80:d8:ba:bf:a1:f8:0d:52:f2:
87:3d:75:38:f4:b3:4b:eb:1c:17:20:59:6f:63:09:
83:31:0b:e5:82:01:20:10:9b:ff:9e:c9:c1:c0:3c:
8d:71:66:6c:af:e7:6e:0f:22:54:9b:8a:0c:09:cb:
a3:82:30:3f:f8:47:f9:75:a7:29:5f:19:85:ae:61:
ea:e2:9c:6e:e0:a5:80:69:25:74:e2:9b:fd:bc:2c:
a0:5c:9a:2a:45:36:21:32:7b:72:ae:6a:12:69:41:
53:b5:35:96:37:eb:e4:50:6a:e2:fe:61:18:9c:4c:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:55:44:20:85:F3:F1:92:93:9B:20:BC:7B:25:0F:3A:01:E6:3D
X509v3 Authority Key Identifier:
keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:d4:23:d6:22:d0:77:eb:a4:48:c9:f4:fb:a8:3f:fa:d6:
51:7a:34:9f:2b:7b:fa:0d:c5:b7:84:06:fe:c2:f8:58:68:07:
9a:06:f3:95:61:af:98:e0:bc:22:7e:d1:b8:b9:6b:db:a0:51:
94:ac:b7:3e:86:84:61:07:2f:8e:62:28:50:d4:fc:e6:8a:6d:
12:81:e1:e5:6d:02:c8:82:01:4b:8a:f3:f9:4e:7e:78:22:a0:
68:ea:b8:7e:10:66:7e:f1:11:37:d4:fb:0d:c5:a5:65:a4:9d:
cd:72:06:6c:f7:dc:d3:19:ad:a2:e2:da:7c:5d:5b:e4:72:f1:
1f:20:25:12:da:14:38:5f:6d:a0:7f:09:4e:b2:3d:70:b3:68:
dc:96:64:91:1f:23:7d:dd:0e:22:39:43:d1:80:0b:5c:54:81:
72:15:f2:e9:75:ef:c6:25:43:5b:3a:28:75:20:20:80:77:eb:
dc:b9:68:a1:d5:cc:5c:a8:dd:fd:e7:a7:95:7c:a9:fe:98:6b:
48:23:41:00:89:28:d7:4e:55:21:8c:a8:35:07:19:dc:ea:50:
3b:be:3b:69:c7:4e:77:f2:99:a8:f4:f3:47:a3:b0:c8:c6:2c:
a8:f9:ec:ea:13:38:59:5c:6b:9c:3e:60:9f:e8:0c:53:2e:65:
8c:cc:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:18:59 2025 by rpki-client