Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json)
Hash identifier: NiuIhLLA3Fy7izn8929+fgf4ZRDGHTNOB/7sJK8SOCM=
Subject key identifier: D4:CF:35:22:50:CD:89:F8:37:3A:F1:27:D4:0E:D6:48:48:C4:3B:A7
Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
Manifest number: 0106
Signing time: Fri 31 Jan 2025 04:08:42 +0000
Manifest this update: Fri 31 Jan 2025 04:08:41 +0000
Manifest next update: Fri 07 Feb 2025 04:08:41 +0000
Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: OW1JAteb0v+QshzWc1SvpB/4nGqEnVrFAhvuopWD81g=)
2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: 5LGDu0CCi6DfJNCRARsLcv5edhJaqrMRVu8YSoKbd1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Validity
Not Before: Jan 31 04:08:41 2025 GMT
Not After : Feb 7 04:08:41 2025 GMT
Subject: CN=679c4cc9-d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:68:f4:6f:09:32:4a:04:cf:3a:77:f9:96:
a3:93:70:ff:40:bf:8d:82:e7:1e:07:9b:79:0b:51:
1c:40:6f:70:ca:67:38:08:5e:6e:02:07:98:f1:d3:
c1:dc:26:0e:73:4d:27:c8:dc:94:d1:af:76:f6:1d:
55:35:67:57:c6:95:f9:d5:d6:9d:90:f5:f9:4e:1f:
49:12:84:97:4a:89:e1:ac:6c:24:a2:00:8d:44:45:
e6:02:d5:b8:12:97:07:a5:d3:1b:92:f1:51:21:af:
a8:a0:f2:b6:2d:e3:f3:80:60:b2:15:34:49:6d:4a:
77:14:60:dd:43:6d:91:88:b6:af:be:a3:70:52:43:
e1:73:44:a1:b3:63:7b:fc:c3:f4:7a:27:fe:ff:b6:
0d:28:d0:5d:4b:5e:40:d4:24:a4:45:ac:c5:23:92:
ad:a8:b5:e7:56:59:90:78:50:a3:31:f9:ae:e6:69:
ec:0b:e6:8d:56:81:d8:55:14:54:7e:d2:76:9c:87:
41:5f:67:04:08:e9:f9:55:7c:91:48:e4:c4:d9:9d:
5e:23:bf:48:2b:dd:d3:0b:61:1f:ed:66:cd:1a:a7:
fc:68:b8:7a:e2:48:df:cb:6a:4f:f5:a1:dc:62:ff:
24:91:07:bb:8d:33:66:81:e7:5d:71:88:80:20:b4:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:35:22:50:CD:89:F8:37:3A:F1:27:D4:0E:D6:48:48:C4:3B:A7
X509v3 Authority Key Identifier:
keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a5:c8:17:6e:0a:8c:8d:e2:2d:58:1c:03:f1:ea:ba:86:98:
ef:c4:45:a6:e1:c7:cf:6e:26:42:55:a8:cf:a4:dc:12:2d:e3:
54:7a:aa:dd:07:0d:e0:4f:ba:68:1c:f6:07:98:aa:99:1e:31:
9b:36:e6:49:e3:be:d0:06:07:fe:be:4e:80:e3:1b:14:74:7f:
24:ef:02:df:8a:41:85:a3:26:2a:64:6a:96:46:4a:69:65:f1:
05:00:f2:3b:ea:b9:b0:bc:b2:d1:94:23:27:20:0b:94:78:0e:
40:93:40:2b:47:74:11:9a:82:cc:30:4a:94:1b:23:29:be:e6:
59:2c:c7:8f:e8:97:60:a6:5c:09:39:e6:68:04:6d:4f:7f:91:
3c:4e:c8:9a:c6:9f:59:8a:ac:40:d4:04:4a:fc:f5:c7:7a:5c:
6f:b7:9b:83:6a:4d:be:98:6a:7f:9e:d9:ae:b9:99:3e:f5:9a:
d3:0d:da:06:2e:e7:09:4c:56:8f:91:b9:26:8c:91:4a:cc:bf:
83:9a:eb:ff:b1:32:a1:25:05:d0:a2:14:ef:74:83:19:86:4e:
d3:75:59:cb:93:1c:b6:f1:30:9a:52:e8:cf:cf:dc:79:e8:42:
5a:8c:f0:6b:db:0c:05:a7:c1:04:8f:93:eb:51:c6:04:09:e7:
b0:08:54:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG
QzY1MjRFQ0EwHhcNMjUwMTMxMDQwODQxWhcNMjUwMjA3MDQwODQxWjAYMRYwFAYD
VQQDEw02NzljNGNjOS1kNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6Zo9G8JMkoEzzp3+Zajk3D/QL+NguceB5t5C1EcQG9wymc4CF5uAgeY8dPB
3CYOc00nyNyU0a929h1VNWdXxpX51dadkPX5Th9JEoSXSonhrGwkogCNREXmAtW4
EpcHpdMbkvFRIa+ooPK2LePzgGCyFTRJbUp3FGDdQ22RiLavvqNwUkPhc0Shs2N7
/MP0eif+/7YNKNBdS15A1CSkRazFI5KtqLXnVlmQeFCjMfmu5mnsC+aNVoHYVRRU
ftJ2nIdBX2cECOn5VXyRSOTE2Z1eI79IK93TC2Ef7WbNGqf8aLh64kjfy2pP9aHc
Yv8kkQe7jTNmgeddcYiAILQUzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTPNSJQ
zYn4NzrxJ9QO1khIxDunMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx
MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj
Ujh0VENRdzZPRkg4WlNUc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOpcgXbgqMjeItWBwD8eq6hpjvxEWm4cfPbiZCVajPpNwSLeNUeqrd
Bw3gT7poHPYHmKqZHjGbNuZJ477QBgf+vk6A4xsUdH8k7wLfikGFoyYqZGqWRkpp
ZfEFAPI76rmwvLLRlCMnIAuUeA5Ak0ArR3QRmoLMMEqUGyMpvuZZLMeP6JdgplwJ
OeZoBG1Pf5E8Tsiaxp9ZiqxA1ARK/PXHelxvt5uDak2+mGp/ntmuuZk+9ZrTDdoG
LucJTFaPkbkmjJFKzL+Dmuv/sTKhJQXQohTvdIMZhk7TdVnLkxy28TCaUujPz9x5
6EJajPBr2wwFp8EEj5PrUcYECeewCFQw
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:28 2025 by rpki-client