Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
File: Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json)
Hash identifier: sMdQJn3oUWkczhXaKHDn15V2eYKddUTACk+APP96lPU=
Subject key identifier: A1:B0:00:C1:4D:D9:62:85:6E:54:5A:4A:6F:C8:C4:0B:02:55:DF:29
Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
Manifest number: 5E
Signing time: Sat 29 Mar 2025 06:25:44 +0000
Manifest this update: Sat 29 Mar 2025 06:25:44 +0000
Manifest next update: Sat 05 Apr 2025 06:25:44 +0000
Files and hashes: 1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: Zziola2W9HYq/5xIZGlc3ZU7Jy/T4u9Es4YKwl6JQY0=)
2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: yCZMfZ6NfluzN2Ky52xSRjoZCp2FkkrWLhsmfBj/nsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F525
Validity
Not Before: Mar 29 06:25:44 2025 GMT
Not After : Apr 5 06:25:44 2025 GMT
Subject: CN=67e79268-6ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:ce:e1:7f:b7:4c:bb:7b:69:dd:c4:de:89:
fc:5e:fc:e2:66:b4:10:c0:82:18:57:22:95:53:d5:
c7:09:7f:86:cf:18:83:7a:5e:45:76:96:c7:48:73:
74:b1:e2:26:2b:6a:51:d2:e5:ac:dc:42:46:22:87:
d4:3b:97:75:a0:8d:b3:d9:ac:12:a5:e3:60:ad:94:
21:58:61:61:eb:3d:9f:83:23:5c:0f:97:16:be:41:
fd:6c:6e:1e:a3:e5:16:00:33:bc:86:bd:82:b8:fc:
72:ac:1c:64:22:e1:4d:98:11:68:f7:bd:15:a0:0e:
c3:15:69:ff:35:d3:55:09:79:65:47:fa:07:8d:4e:
4c:01:45:b2:a1:e2:a1:b3:7c:8c:bc:ee:ff:4e:77:
dc:1c:5e:ba:83:d1:c9:17:84:28:c4:f1:e6:11:a0:
44:63:85:10:13:30:9c:b6:c0:0a:90:83:aa:98:38:
a1:83:71:ba:f7:10:20:24:84:14:53:4b:00:85:07:
e3:ba:cc:e2:72:93:f3:ee:57:ba:43:d3:8b:2d:23:
3d:c4:eb:d4:7c:f9:0f:66:e8:f0:85:75:14:bd:38:
d5:2d:09:d1:a9:eb:1d:93:5b:16:0b:c7:b0:0d:b9:
4c:c9:e2:85:af:da:45:33:e3:63:94:c6:e4:d9:a4:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:00:C1:4D:D9:62:85:6E:54:5A:4A:6F:C8:C4:0B:02:55:DF:29
X509v3 Authority Key Identifier:
keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:4c:f5:16:15:cd:28:2c:80:51:2e:7f:4c:17:2b:ab:64:e6:
89:77:bb:38:3e:5d:4c:b3:97:1d:9e:f0:96:0a:31:5d:af:dc:
66:2f:51:69:54:da:6e:04:b1:84:f6:ed:64:9e:76:19:a4:a6:
77:cc:3a:26:c5:9f:12:64:e3:60:12:c4:a6:40:89:cb:cf:ae:
44:81:0a:e4:a8:9c:65:4f:27:18:29:e7:6c:fd:7c:c5:93:f6:
9d:70:95:d6:81:69:72:2c:b5:27:6b:9e:c0:92:a1:11:6b:a8:
59:4c:0a:e8:cd:78:b2:82:d1:1d:50:58:57:b9:23:09:1e:3b:
01:f0:11:01:58:cd:9b:39:55:c2:7b:7b:85:09:26:55:91:9f:
7d:a2:95:65:c2:73:37:fe:06:a1:fd:60:63:94:ec:85:5f:c0:
ab:8a:8f:92:6e:a2:b8:5c:d5:04:d7:af:c6:be:2a:4d:3d:e1:
45:5a:2f:db:96:bc:f5:a7:3e:2b:da:b5:09:e8:2e:55:f4:07:
b7:52:82:c8:f3:e5:7d:b6:7b:97:4e:0c:4d:c3:1a:4a:fc:fc:
82:58:b9:84:a7:bb:a0:74:6b:0e:90:a5:77:23:f0:88:91:57:
48:74:89:55:3c:9e:4f:d4:38:26:2e:b6:b5:12:27:22:1c:3d:
22:36:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:37 2025 by rpki-client