Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
File: kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft (raw, json)
Hash identifier: V348YFcpMFxnecSQsr0fQRfM81UuMyyVfdQDH8Ig2S0=
Subject key identifier: FF:0A:33:9E:8F:04:31:7A:46:C6:7F:CC:EE:00:40:3E:65:92:A9:F6
Authority key identifier: 92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B
Certificate issuer: /CN=A91E06B4/serialNumber=923D507F9C269BA2245D5BE547EFB1BFE9B4918B
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
Manifest number: 38
Signing time: Mon 03 Mar 2025 09:18:48 +0000
Manifest this update: Mon 03 Mar 2025 09:18:47 +0000
Manifest next update: Mon 10 Mar 2025 09:18:47 +0000
Files and hashes: 1: kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl (hash: wftlY+QLuj7MDEx9toOvjAc8stAwAIUYBBly9GEuEi0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E06B4
Validity
Not Before: Mar 3 09:18:47 2025 GMT
Not After : Mar 10 09:18:47 2025 GMT
Subject: CN=67c573f7-2191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:77:e3:f4:bb:7a:e0:30:79:bb:0b:d7:cb:
e8:a4:ab:ee:7b:5f:71:d5:a0:f3:a2:5b:2d:f9:16:
77:ff:02:61:f0:ad:21:a0:c7:a0:0b:a7:15:89:55:
69:70:7f:fd:69:84:e5:34:51:6e:a3:fe:46:8b:70:
1c:26:82:6e:56:ef:b2:31:0c:b2:53:97:8e:01:35:
96:b5:e0:61:60:d1:64:88:fd:05:e9:5c:95:b0:c9:
7f:eb:5d:6a:27:5e:8c:52:a4:87:99:39:66:5b:00:
72:37:76:82:db:c3:1a:c3:13:cb:68:52:5c:a7:6a:
9d:b6:e7:03:38:9c:7c:5a:f2:16:5c:e4:81:b7:02:
c7:e3:bc:47:b3:ce:3f:c6:17:0a:3a:07:91:52:06:
01:17:25:c8:a1:e3:71:c7:4a:97:f3:38:ff:8f:a2:
28:88:67:da:e6:53:0f:7b:9c:2c:da:bf:bc:7d:c1:
2d:01:d1:29:e7:35:97:53:d6:b6:15:52:ba:44:65:
48:8a:a3:9f:40:2e:56:e4:70:cf:62:fc:41:99:1e:
fa:64:d8:76:88:1f:82:e4:b9:0e:7e:02:a0:50:f4:
8e:80:49:45:8c:aa:37:65:1c:63:ca:12:05:73:d4:
77:92:24:12:71:ed:bc:67:4b:d0:0b:03:61:ca:36:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:33:9E:8F:04:31:7A:46:C6:7F:CC:EE:00:40:3E:65:92:A9:F6
X509v3 Authority Key Identifier:
keyid:92:3D:50:7F:9C:26:9B:A2:24:5D:5B:E5:47:EF:B1:BF:E9:B4:91:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj1Qf5wmm6IkXVvlR--xv-m0kYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E06B4/5FE8DA04A71311EFA4E06431C4F9AE02/kj1Qf5wmm6IkXVvlR--xv-m0kYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:b9:3c:8e:ec:c5:dc:00:71:76:99:9e:b2:bc:b4:04:4d:7e:
27:e4:d8:cd:ab:76:3e:e8:ef:6d:c5:6c:2c:e6:5b:16:01:a3:
75:87:2f:b7:96:19:ff:28:55:4c:c3:f4:99:cf:d2:7b:c1:b9:
95:2e:71:01:95:1c:a5:a6:91:e6:04:97:39:a6:85:0f:b4:e0:
6b:8a:32:a6:aa:33:f0:96:ff:26:df:28:c2:f7:c2:9a:12:85:
54:56:0f:c7:c7:28:7b:8d:71:a4:30:f2:e6:53:35:94:7c:f7:
b8:68:3d:49:92:fd:20:6c:80:16:dc:35:29:89:43:8c:be:95:
74:60:a5:23:4c:3b:a5:55:a8:4c:f5:f3:53:8c:31:e2:2d:c9:
97:95:d2:17:54:d9:11:6d:85:cc:4e:6e:fd:bf:6a:29:ca:4c:
c3:2f:42:fc:a4:bc:1e:36:d3:2b:5a:28:b0:83:41:f7:88:02:
8c:30:c0:5c:6c:63:ed:8e:dd:95:24:63:67:16:fa:f1:3b:c4:
bd:2a:00:72:f0:59:b9:18:02:11:05:01:70:4a:50:49:69:b4:
52:b9:e2:59:f6:d1:c4:0a:4a:ad:94:37:72:e3:e0:9d:6b:1a:
b2:35:ad:21:aa:0a:e8:dc:04:d4:6b:ce:82:ca:5b:8b:b6:30:
a4:89:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:57 2025 by rpki-client