Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json)
Hash identifier: bwuEi1UUJWu+Rsmpi5YntvmZpS1xJSpxOsieTgBIlI0=
Subject key identifier: 8E:C7:C1:4E:68:6A:FD:21:A9:8C:2E:AE:D5:14:65:71:1F:BF:9B:9B
Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Certificate serial: 1155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
Manifest number: 1148
Signing time: Fri 31 Jan 2025 17:15:31 +0000
Manifest this update: Fri 31 Jan 2025 17:15:30 +0000
Manifest next update: Fri 07 Feb 2025 17:15:30 +0000
Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: MP7ODT6LhjVVBIexjyV04Y1QGv7v1EcEA0qYCuBb2WE=)
2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: 33z1F9RZ3yx55dZ5+rGpqQ7gwX1OExcujk8Oepxi/pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4437 (0x1155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B
Validity
Not Before: Jan 31 17:15:30 2025 GMT
Not After : Feb 7 17:15:30 2025 GMT
Subject: CN=679d0533-3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:d3:f4:ae:e0:7a:f0:99:d5:a8:07:d8:2a:
d1:70:b7:be:68:e7:8f:2f:c2:80:98:71:0e:ee:ba:
ea:bd:c8:31:94:20:36:6c:e7:63:b5:9a:e3:55:ed:
f4:29:67:5a:01:1c:f1:ef:38:74:96:c8:9f:a1:c2:
3c:60:01:c0:8c:ea:4c:4e:46:29:b3:fe:90:61:2a:
8d:41:28:e5:49:c4:e4:b9:17:56:f2:11:06:c0:2b:
4f:72:01:b4:20:13:60:84:94:98:3f:25:e4:67:8c:
4b:db:50:9e:90:e0:07:b6:d5:ab:c8:c0:36:72:6e:
a7:b4:1a:bf:9f:65:81:d1:01:73:e4:22:14:eb:7c:
b2:aa:03:58:d9:99:01:06:74:89:4d:e9:49:56:78:
84:89:64:d5:37:90:3f:3d:0c:44:59:fa:d7:3b:61:
05:28:33:24:2e:93:17:c6:ce:51:d3:a1:ac:99:11:
e3:e1:96:75:f2:ac:7d:8a:95:19:16:96:d5:6e:05:
c1:ca:84:9e:a4:1e:83:14:fc:8a:cc:48:f1:8b:18:
11:20:29:8d:b5:d8:28:2f:ce:a2:8e:14:a0:8d:e0:
e0:d9:92:7b:47:97:63:0c:78:76:e3:96:d0:52:26:
7c:3d:4f:45:bd:51:2d:3d:8c:03:98:b3:a5:b6:11:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C7:C1:4E:68:6A:FD:21:A9:8C:2E:AE:D5:14:65:71:1F:BF:9B:9B
X509v3 Authority Key Identifier:
keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:49:76:16:b5:d2:76:09:ed:8f:dc:b6:e5:c8:91:9f:c3:1c:
38:6a:d4:2d:7e:82:76:ed:0a:21:0d:13:2d:93:08:dc:d6:5d:
bc:15:b0:c2:aa:a7:63:4d:89:4b:68:74:23:d0:44:03:3c:c9:
47:39:08:1d:b2:95:a3:17:12:72:8d:40:19:5d:e4:76:7c:ca:
d3:fb:f1:6b:bf:13:a2:a3:2d:01:97:72:1b:7a:82:4c:71:cf:
76:f4:0d:d7:51:e5:8e:52:bb:fe:6d:f7:6e:b3:4b:3b:d3:5a:
f1:74:f5:84:a3:42:e3:f9:ec:0f:0f:61:b6:85:a6:a4:6e:75:
e8:90:af:02:28:7d:0b:ea:cd:ad:54:b6:ce:a6:74:28:b3:25:
bf:e8:04:65:b7:c0:82:89:ea:25:39:a9:f8:df:10:ff:26:47:
89:4c:8b:f7:bb:fe:84:3f:88:00:15:ab:36:79:26:16:78:85:
de:dc:fc:54:b9:73:bd:9e:d5:c7:21:db:63:4d:de:71:e7:b2:
2e:44:9f:8c:49:86:2b:c2:be:1f:e5:25:70:d5:83:3b:25:38:
b5:87:29:63:14:e8:52:75:79:7d:03:31:ca:99:1c:1e:7a:61:
11:2b:9c:35:0b:f6:eb:61:97:d9:c9:f5:35:a9:62:9c:70:e7:
c7:06:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:44 2025 by rpki-client