Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier: NZcelEixGLyZcXgFib6zpmKfRQXopJwvpHyDUy5jHVA=
Subject key identifier: CF:7E:A2:FC:76:C3:C6:C0:D5:11:C1:4E:82:4C:54:3C:C9:22:F5:9E
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial: 0A08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number: 0A02
Signing time: Fri 28 Mar 2025 20:05:33 +0000
Manifest this update: Fri 28 Mar 2025 20:05:33 +0000
Manifest next update: Fri 04 Apr 2025 20:05:33 +0000
Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: Yd+dHLe6l/n9Sz3c0cKpvRff6zLQA3YfjzIwpsT3OP8=)
2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: 9EGc7zo1rzNKxXV6Dja051NIq2qalXgFXf2PEqhm154=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2568 (0xa08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A308F
Validity
Not Before: Mar 28 20:05:33 2025 GMT
Not After : Apr 4 20:05:33 2025 GMT
Subject: CN=67e7010d-535a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:d0:2c:8f:01:b7:a3:a7:80:5f:81:d7:15:
46:ee:e1:2e:12:72:28:a6:5f:9c:db:63:84:15:cd:
3d:86:36:b8:4b:9d:b1:1b:10:0c:99:32:55:98:e3:
a9:f4:b9:54:c7:ef:e8:aa:0e:a7:e1:28:0b:fa:b3:
b1:9e:dc:fb:cf:2b:0e:af:6e:91:58:93:34:ad:14:
f8:32:29:ea:ee:c3:53:33:5e:59:fa:d8:56:c5:4c:
c7:c9:e4:09:72:3b:b4:e3:33:9e:0f:fd:7f:6f:00:
57:12:fa:29:71:bf:b9:3b:e0:40:f6:18:b4:5c:8f:
54:4e:eb:8a:85:88:27:2c:7e:6b:7c:91:65:91:0b:
1a:17:68:53:2e:fc:05:11:df:97:a2:ee:6b:ab:34:
93:d4:e9:34:2e:a4:7e:70:6b:8d:c2:3a:ce:7f:d5:
34:58:ef:a2:ae:a7:64:77:2f:b6:2a:32:04:d2:65:
55:c7:ae:53:a6:35:08:8f:29:c2:07:f5:13:c6:b7:
a3:6f:50:dd:bc:a6:dd:23:43:f0:60:81:c0:de:11:
92:b3:52:a0:c2:2d:60:0d:a9:05:f0:90:fd:50:b0:
0a:cb:a8:b2:5c:4b:d2:07:ba:8a:e2:61:20:c5:fc:
ea:ab:03:09:f4:c0:94:b1:7c:8e:b7:45:16:a1:29:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7E:A2:FC:76:C3:C6:C0:D5:11:C1:4E:82:4C:54:3C:C9:22:F5:9E
X509v3 Authority Key Identifier:
keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6c:2c:ca:e9:b2:a8:ab:f2:6e:05:e7:ac:d4:2c:75:8f:ae:
61:ed:68:25:3c:37:51:0e:0e:d8:92:d6:d1:33:88:a7:e2:75:
a8:c5:16:c1:d6:cc:d1:57:15:fc:8e:63:4c:2d:ad:04:2a:08:
8f:d1:d6:d7:d2:f5:1a:75:75:0d:88:5d:a6:09:23:60:9f:63:
82:69:16:4d:05:44:77:bb:b4:3e:10:f7:fb:d6:64:00:2e:29:
0b:82:a9:6c:01:b5:74:ca:eb:a0:1e:24:3b:72:d1:42:1d:7e:
c6:dd:02:98:79:c7:84:ca:55:c0:cc:98:c8:c0:37:33:f3:b5:
6f:fd:6f:6e:a8:b7:e5:b2:44:a6:e7:9a:8d:c7:f2:5c:72:d0:
ec:15:d2:79:94:65:1c:61:87:0f:9f:4f:08:77:f0:3a:6e:ca:
2a:cf:94:f6:55:a0:8c:7e:ae:83:fe:29:ee:c3:a3:d6:aa:67:
54:cc:0d:da:cf:8d:af:85:f7:76:c9:f1:4d:91:24:e0:0e:00:
cb:a3:43:73:4c:9a:80:de:ed:fe:2b:3a:b6:f3:d5:cd:0c:01:
ab:e5:72:58:56:2a:35:63:eb:f4:8c:2a:43:f7:16:70:88:e6:
12:51:bd:86:20:52:32:d2:0f:95:09:d9:0c:a1:8e:a4:b5:24:
d1:e0:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:57:48 2025 by rpki-client