Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json)
Hash identifier: /g+3FYufaUDNBFJ5HQFUuGXuMBe1ulkQbkOLdHZWkzE=
Subject key identifier: D0:3A:E4:89:1E:99:DA:39:DA:6B:5E:7D:6D:7D:93:DE:05:E4:78:D8
Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
Manifest number: 43
Signing time: Fri 31 Jan 2025 06:34:52 +0000
Manifest this update: Fri 31 Jan 2025 06:34:52 +0000
Manifest next update: Fri 07 Feb 2025 06:34:52 +0000
Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: NTB90UwdjC5Rb9Xbn7RwBX9FxPT17l+xhfLDzrV3SzM=)
2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF
Validity
Not Before: Jan 31 06:34:52 2025 GMT
Not After : Feb 7 06:34:52 2025 GMT
Subject: CN=679c6f0c-fbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:f8:07:66:3c:ae:82:b2:34:d5:30:8a:09:
39:37:1d:8b:95:29:e1:db:1c:c5:aa:43:07:bf:f5:
84:79:19:9e:b1:6f:e5:e1:37:28:59:dc:ad:cc:d6:
68:f2:02:32:92:33:12:d0:e1:92:8e:77:fe:43:bc:
7b:f8:87:d9:cb:27:66:6b:21:34:81:c1:1d:cb:42:
4d:5f:97:2c:3d:04:1f:05:09:19:2f:e5:b5:fc:15:
1a:23:91:2b:11:a7:67:45:24:1a:b5:ad:7f:62:29:
6d:33:3a:e4:1a:3c:c6:19:eb:89:23:72:c0:e7:b4:
f4:2d:56:33:81:ed:13:97:ca:66:1f:1e:48:a2:bd:
b6:45:fd:aa:77:e1:5c:af:e9:72:6e:44:67:9c:f5:
8a:e5:b1:61:d9:ea:5a:8d:2a:ea:f3:7b:ee:47:86:
1d:49:8c:82:89:62:df:b5:5a:1b:82:9c:e7:a0:a8:
18:79:ae:c2:5a:d0:6e:54:55:a8:29:4c:fd:9c:b5:
f1:2d:f7:06:7d:82:e7:7b:e5:ea:62:e1:7b:1b:3f:
6e:e7:4a:2a:91:78:cf:d5:f2:18:a3:12:c8:9d:da:
1b:fb:5a:56:7f:42:f8:de:69:aa:5f:dd:08:44:cd:
57:e0:e1:eb:d8:42:aa:a1:b9:9c:77:2c:bf:4f:39:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:E4:89:1E:99:DA:39:DA:6B:5E:7D:6D:7D:93:DE:05:E4:78:D8
X509v3 Authority Key Identifier:
keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:cb:74:5e:57:10:a5:e7:6d:7f:f6:9d:70:c2:2d:19:2e:9a:
7d:5e:9d:b8:f2:27:c1:bb:d0:2e:e0:92:1c:46:f5:cf:6e:ca:
3f:e9:ca:ba:1b:d6:24:01:65:7c:9a:6f:df:09:a6:88:31:90:
f9:ef:dc:01:7a:b8:e0:45:ec:c8:dd:b9:e2:ec:b1:83:d9:a1:
90:b2:e6:0c:f6:64:ed:03:31:5e:dd:34:7c:de:10:68:e6:53:
19:27:ca:cb:d6:34:2b:45:7f:3b:ab:ae:53:8d:fb:25:8f:5f:
c7:af:66:e6:29:f6:3d:30:70:43:cb:cf:5b:e6:af:ea:16:8e:
c3:84:7f:a0:c0:dd:5e:5e:3f:5e:e8:1c:4e:74:01:ca:ae:77:
ff:86:db:ff:85:0a:ac:5f:69:11:de:d5:24:f0:fe:02:14:41:
52:b1:77:2a:80:77:27:89:41:38:4c:54:03:7f:3f:e4:9a:0b:
80:2c:03:47:58:d4:99:29:b8:a7:09:b5:a9:64:80:4c:94:1b:
3d:47:52:ff:bd:16:de:a9:61:46:61:2a:26:c1:df:76:cd:fb:
2a:0d:0b:8d:c7:06:cd:38:3d:78:13:da:69:f0:77:0f:f7:96:
de:cf:a4:3b:bb:f5:80:d5:a5:22:53:b7:cd:a9:6a:7d:59:7b:
02:0c:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:01 2025 by rpki-client