Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
File: KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft (raw, json)
Hash identifier: Ut89f9Xr2b5OvRfEDY2EgWm2TtBF12YYi/dUI6Lohe8=
Subject key identifier: 4B:26:41:DB:5D:16:7C:F0:63:12:CA:72:91:CD:59:13:B4:23:7D:75
Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
Certificate issuer: /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
Manifest number: 07
Signing time: Sat 29 Mar 2025 07:29:37 +0000
Manifest this update: Sat 29 Mar 2025 07:29:36 +0000
Manifest next update: Sat 05 Apr 2025 07:29:36 +0000
Files and hashes: 1: KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl (hash: wpBbyPbhWE4leCOfw87tk0byp2ckhbeWw3XDxvGDTIM=)
2: 8CC07FC0047211F0A6541526C4F9AE02.roa (hash: PgYYJ9/o38WTea0u5fJFPWCIw+78oj+kOWm1Hogb3eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4287
Validity
Not Before: Mar 29 07:29:36 2025 GMT
Not After : Apr 5 07:29:36 2025 GMT
Subject: CN=67e7a160-6461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:6a:ff:58:e8:2c:ea:af:4e:2e:5a:1e:6c:
08:1a:a8:a0:98:4a:56:f2:24:15:7a:ff:77:99:d8:
cf:d8:dc:b4:f9:11:3c:39:dd:94:87:5e:a5:13:3e:
4d:13:0e:94:93:2b:21:1f:d1:7e:38:3d:39:8c:ee:
56:20:99:c2:9f:6e:ce:c0:39:be:2a:7d:03:e3:45:
cb:0d:a6:29:46:f9:b4:c1:ab:9d:8a:10:95:23:d2:
21:7c:e4:c8:6a:56:db:ce:0f:ab:16:85:6a:78:53:
cf:56:66:f0:d5:10:96:36:c9:16:af:7b:09:1b:20:
c9:8b:b4:95:5e:38:f9:cd:9b:20:3d:37:f6:df:30:
3a:ea:5e:b3:22:b1:ad:0e:e3:2e:93:54:5d:73:cc:
08:03:5a:f8:7a:5f:19:53:ac:be:47:8d:79:be:06:
fa:17:38:df:a2:96:2c:ba:76:74:4f:36:52:1c:fb:
66:03:31:c5:59:70:fc:07:02:e3:3f:18:cf:15:b7:
5c:77:b5:56:5b:0d:97:22:9c:a1:40:d4:a7:33:52:
fb:54:96:a0:19:74:68:08:c3:43:21:c3:5e:49:f3:
f3:aa:98:77:4c:22:db:f5:cc:ba:20:47:f2:6e:43:
86:0d:32:9c:3a:94:bd:0f:67:e9:74:51:5c:36:cf:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:41:DB:5D:16:7C:F0:63:12:CA:72:91:CD:59:13:B4:23:7D:75
X509v3 Authority Key Identifier:
keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d9:59:82:32:aa:34:e5:1b:f8:bc:df:be:73:e1:09:ef:4b:
3d:e3:f8:55:93:33:fd:bd:06:77:fb:d9:1a:39:0d:9f:c6:22:
05:44:89:4b:99:6e:9b:7b:43:b1:c6:70:a0:a8:c4:46:ec:63:
66:cc:70:b9:17:54:f9:84:4a:c0:f8:70:55:ef:ff:0a:cb:5e:
cc:b5:82:fe:e8:ef:c4:e2:cf:e1:5f:50:3c:91:bb:06:fc:a7:
08:85:30:44:37:5c:88:d8:03:2f:40:75:5d:b9:18:c2:d1:85:
b6:90:a5:4a:4d:21:a7:2b:0b:48:17:98:dc:1e:45:ed:5f:ce:
90:c2:07:6b:4d:b6:94:36:17:cf:e5:a6:25:21:04:b9:b6:13:
32:81:1e:c4:54:1e:28:da:96:9b:cf:58:e6:5d:28:79:08:5c:
26:3d:07:17:6b:3f:77:ee:9f:5a:f3:81:13:37:a2:b0:f6:9d:
c8:11:e2:c5:0f:65:99:fe:f8:c6:63:cc:a9:01:91:9b:6b:78:
86:d1:72:e7:ad:23:ef:6d:82:5d:68:e6:b7:9d:10:37:94:1e:
99:20:59:52:6d:bc:db:c4:d9:d6:bb:00:64:b2:7d:32:50:4a:
51:d2:32:30:9f:0b:cd:c7:ea:2f:33:61:a8:c5:7c:f2:69:d1:
a4:6d:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:38 2025 by rpki-client