Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier: TR7309UeN6cFdmeocwiQdPabRdTegq4868+k0W5qfwQ=
Subject key identifier: 84:BE:76:A7:BA:1E:1F:06:49:0A:2D:59:6F:7C:77:D7:3F:1B:7E:80
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial: 03FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number: 03F6
Signing time: Sat 29 Mar 2025 00:46:19 +0000
Manifest this update: Sat 29 Mar 2025 00:46:19 +0000
Manifest next update: Sat 05 Apr 2025 00:46:19 +0000
Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: E0Y6wOfUxIb/MuIuuKRx9lTwLsIrl4gww+5r96IdEMg=)
2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C28
Validity
Not Before: Mar 29 00:46:19 2025 GMT
Not After : Apr 5 00:46:19 2025 GMT
Subject: CN=67e742db-09ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:f4:f9:d2:7d:3b:e3:20:d7:a1:e8:1a:f6:
8f:9a:64:cd:d3:1c:05:61:d4:9c:09:e6:5b:8f:d8:
9f:09:1c:55:53:cd:c3:87:9b:52:a6:27:03:ef:fe:
61:17:7f:72:19:c8:c9:34:2c:87:df:40:33:ce:82:
2b:92:79:9c:63:13:80:57:a3:57:12:fc:f9:5a:84:
0e:9a:08:46:e4:35:00:14:b5:23:9e:1d:16:62:86:
cf:1b:e8:2a:61:53:f1:66:43:ce:74:24:9e:42:0a:
14:5c:a6:7c:13:9e:3b:63:fb:ba:0c:d2:96:04:2a:
16:b4:92:29:de:52:f7:51:33:6d:a7:9c:f0:91:fc:
0b:55:42:90:32:ec:43:b3:3c:15:0c:eb:b3:41:48:
93:0d:6b:26:66:f3:6f:e5:00:2c:4f:4b:7a:42:57:
e3:51:0b:ac:70:6a:00:62:64:19:ca:54:74:e2:f0:
ac:ee:17:9d:8a:9f:3a:ce:25:56:9d:69:2e:19:3f:
00:b0:8d:51:8b:7e:04:31:d2:c3:32:28:57:d6:95:
7b:3c:13:75:f1:50:c1:5a:c9:af:9d:d5:e0:64:fb:
6a:fc:78:b7:12:6d:36:10:9e:16:77:c5:74:0d:8c:
b6:3b:ef:63:93:69:6a:a5:8b:e2:63:01:e8:8d:c8:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:76:A7:BA:1E:1F:06:49:0A:2D:59:6F:7C:77:D7:3F:1B:7E:80
X509v3 Authority Key Identifier:
keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7a:fd:c3:82:c3:9b:1b:99:78:81:b5:ae:c6:fd:26:a9:35:
28:89:64:24:6d:60:00:5d:21:da:a3:7f:bc:d6:c3:3d:78:63:
42:00:09:e5:8e:f8:c2:6a:f4:8a:18:ab:12:77:9a:06:e8:8d:
ef:16:bd:c0:38:4e:50:3a:d6:6c:c8:ff:d1:da:62:22:82:3b:
03:f9:cc:11:b1:9c:49:7e:1b:b1:d5:14:72:5c:e6:21:3c:60:
6b:2c:b8:0d:bb:1e:c3:3c:9b:24:0f:ce:96:cb:e7:ef:65:7b:
84:ad:de:f5:d4:29:98:61:c4:c1:47:07:60:96:b0:9e:62:a2:
f6:91:42:bf:97:1e:df:8c:77:17:64:eb:f4:6e:61:dc:83:ce:
e8:41:07:7e:66:e9:ee:3b:e5:d8:ef:c3:77:05:2f:5e:d5:ee:
57:f5:7f:89:cd:39:9a:45:62:32:44:96:4f:6f:b1:5f:25:92:
63:ac:58:4e:34:24:79:d6:2f:ab:16:90:cf:cc:de:a5:25:f2:
91:24:1e:df:d6:3f:c8:27:8e:cf:cb:55:02:f3:d9:5b:c7:0e:
e3:52:d6:87:ce:5e:7d:26:25:4c:90:a3:fc:57:5d:e8:90:28:
80:b5:c3:3f:3d:3c:f5:d4:fc:a9:31:f7:0e:fe:99:07:73:37:
2b:32:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:51 2025 by rpki-client