Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json)
Hash identifier: +pkrxDnnw4f/KTVwZilqMXAaR4BYckyrSDW3kaiQwoA=
Subject key identifier: 23:88:10:AE:CC:62:29:9D:6A:EC:BF:E0:69:D1:34:FF:85:3E:7E:34
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 0381
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
Manifest number: 0379
Signing time: Sat 29 Mar 2025 01:10:30 +0000
Manifest this update: Sat 29 Mar 2025 01:10:29 +0000
Manifest next update: Sat 05 Apr 2025 01:10:29 +0000
Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: ITDGHhhnGT3BjHre8NF1NEFL9rVLLKRkqdM/82CRLIg=)
2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5
Validity
Not Before: Mar 29 01:10:29 2025 GMT
Not After : Apr 5 01:10:29 2025 GMT
Subject: CN=67e74885-5494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:d8:54:84:bb:56:24:61:1a:4c:ec:db:c5:
dd:45:0c:5a:3d:7e:47:08:29:38:a8:46:38:d3:47:
24:15:fb:6b:33:e3:ac:a5:78:a0:3c:79:14:5a:ee:
90:90:41:0f:17:ed:65:88:89:cf:5f:a0:5a:01:59:
db:6a:e1:bf:fd:6c:36:4b:86:cd:bd:0c:8d:87:cb:
dd:95:38:54:a6:45:9e:76:26:bd:fc:2e:5b:1f:63:
b4:d9:b5:90:18:b2:8b:15:24:09:c9:d5:4b:5d:e2:
83:a2:63:9d:06:12:cd:83:3c:93:d7:de:e9:01:8e:
45:49:c3:42:a2:44:65:3c:3f:e4:ec:91:a5:13:97:
1d:e5:d2:62:88:06:e9:dc:29:60:92:a4:6d:9e:df:
2f:06:01:29:5f:03:96:96:25:2e:e7:d5:e7:69:e3:
a6:51:65:53:73:6d:4f:a5:d3:8e:b3:23:9d:c1:0a:
5b:d5:fd:0b:f4:ea:81:32:00:52:b8:4c:b5:83:8c:
92:70:67:f7:63:88:fb:f1:09:28:96:e5:1a:64:7c:
83:3b:d5:63:ce:dd:0b:ed:b5:40:d1:cb:b4:ad:ac:
cd:63:3c:4e:82:9a:0d:7a:6a:cb:1e:96:c0:88:1c:
f3:87:a8:70:30:ed:22:57:36:1f:f4:ca:fc:a9:ac:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:10:AE:CC:62:29:9D:6A:EC:BF:E0:69:D1:34:FF:85:3E:7E:34
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:84:8b:65:26:ed:73:65:0e:af:89:03:d3:8d:8c:50:e7:
77:d2:ba:af:23:e7:48:b5:d2:33:40:25:b3:cb:28:2b:71:b1:
22:27:b5:81:98:09:8f:52:27:1a:cd:1c:57:3a:cc:3a:ec:f1:
86:a5:09:49:9f:1b:fd:50:1a:92:0b:43:ef:f8:5e:06:62:cb:
ac:2b:48:ae:b4:81:39:f3:2b:a1:44:98:13:0c:c0:f0:d7:39:
f1:0d:7d:be:64:cb:68:2c:82:b5:3e:73:e9:ed:b8:8e:bf:c8:
40:c3:cc:8b:42:30:6a:89:25:3b:95:74:dc:ab:35:b3:53:55:
18:b6:2a:8c:f7:75:93:c2:44:6a:34:f4:91:3c:7f:66:46:46:
5f:1c:f7:d7:4f:c7:d2:6a:15:3c:ba:2c:3b:cd:f4:4c:c4:32:
45:fc:5c:94:4e:24:d4:62:c0:48:e8:ff:03:9e:79:57:f6:56:
bb:47:83:84:c1:26:77:b2:af:0f:30:18:4c:c3:5d:e3:8a:eb:
49:b3:5b:86:ca:9d:70:f8:11:43:f1:2a:2e:4d:54:70:10:40:
09:03:e1:23:ad:48:40:b6:4a:a1:7b:15:05:71:15:97:5b:a2:
87:48:5e:03:8b:fe:0a:eb:ad:4d:3d:1b:58:cf:2c:5f:ad:8d:
0a:59:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:29:52 2025 by rpki-client