Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier: moWiUiySrFIe1/IBRjY0vpmNVJxaiYk9hUL6IMLrMtk=
Subject key identifier: 97:D8:AA:33:6D:CE:9B:9A:E3:EE:56:FB:53:C2:9A:EA:4E:29:AF:E3
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number: 0AEB
Signing time: Thu 30 Jan 2025 19:21:50 +0000
Manifest this update: Thu 30 Jan 2025 19:21:50 +0000
Manifest next update: Thu 06 Feb 2025 19:21:50 +0000
Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: VifIuzoryKqQKbiUXrAS+tHgss2cWM8bO3UEpDkwYbg=)
2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: YBDDFTyuQNBpFqBokEWPqRZhpMARMTl/5hq7JGaNUzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Validity
Not Before: Jan 30 19:21:50 2025 GMT
Not After : Feb 6 19:21:50 2025 GMT
Subject: CN=679bd14e-3018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:22:04:21:27:b7:dc:c8:b6:e2:78:44:ae:
0d:2a:38:76:45:60:3b:cb:cc:59:f1:45:29:4c:4e:
22:37:ba:2a:c8:11:af:13:9c:b2:b4:17:4f:23:f0:
b6:05:51:06:d3:c3:1b:e5:0a:59:c3:50:80:ab:df:
92:4c:47:56:66:1f:02:e4:6f:85:bf:9a:c7:5d:a4:
d3:32:6c:88:a9:00:85:29:aa:d4:ca:63:86:63:61:
f4:0f:27:a6:52:4c:eb:81:78:29:4e:8e:75:02:72:
11:47:78:68:8c:69:7a:88:1f:b6:4f:11:7a:e9:3d:
cf:39:81:ce:32:d7:16:a7:ec:44:5b:b1:0e:bb:ba:
2e:67:b1:ee:32:a0:f6:47:9a:b0:e2:40:22:6f:75:
3b:cd:7c:94:89:b4:07:33:3a:18:d3:08:87:b3:11:
39:01:6d:e9:85:5e:4d:88:aa:88:f9:bf:10:e4:39:
cb:46:4e:59:fe:ab:14:db:a2:6f:4a:c1:b9:aa:e9:
95:90:a9:d5:85:09:8f:4f:7a:fe:85:87:e0:79:ea:
ca:1a:b3:8c:d6:dd:77:ba:4d:f9:44:b2:44:fc:dd:
29:34:98:0d:b3:50:99:6f:a8:7e:7b:c6:44:ef:b1:
7c:2e:64:a3:3d:cc:4f:32:56:76:ea:33:dc:f6:74:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:AA:33:6D:CE:9B:9A:E3:EE:56:FB:53:C2:9A:EA:4E:29:AF:E3
X509v3 Authority Key Identifier:
keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:ac:e6:ed:c1:b7:24:ad:69:0b:6d:92:9d:f3:9d:38:24:
1a:d6:60:47:8f:43:5a:7f:48:6b:f9:e3:a2:40:d5:4a:c1:8c:
cf:1c:52:29:1d:15:09:6c:cd:29:34:92:9b:bd:68:a6:ff:98:
df:06:81:37:7c:d6:94:af:95:87:cd:df:27:58:29:bd:85:86:
f8:1d:69:07:dd:08:a5:6a:18:e5:62:16:11:c8:f7:f8:03:96:
62:97:72:a7:66:14:9d:16:67:68:90:80:e2:ac:85:78:27:f6:
65:8b:ce:bf:0e:fe:b2:0b:59:25:db:3f:eb:1f:25:27:82:25:
f5:75:06:04:15:b1:2c:9f:a8:5b:ec:46:88:5f:f9:7a:53:92:
90:79:4b:5d:31:6a:21:de:64:a3:73:35:20:87:69:ee:c3:a8:
e9:e8:50:49:36:4c:77:7e:a2:ae:eb:43:58:00:b4:50:a8:82:
4b:40:89:92:91:b4:cc:a4:7c:ec:2d:20:06:5a:63:55:da:73:
52:d0:4d:10:7c:01:ab:63:aa:47:41:00:38:e1:3c:ed:4d:76:
8d:a4:f1:9b:c0:40:e3:07:1f:fe:a6:7c:e5:31:ee:3d:dc:dd:
ad:de:36:a5:d4:ef:9d:b3:bb:7b:c8:42:41:16:dd:ba:42:51:
05:82:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:29 2025 by rpki-client