Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json)
Hash identifier: JLjr6KyLfRBJl2ZP45XZ4RWq3go9wX0dzXf9ZuGLuB0=
Subject key identifier: 10:A4:EC:89:82:F6:B0:23:19:39:13:B6:39:39:89:65:A1:81:D6:A2
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
Manifest number: 0195
Signing time: Fri 31 Jan 2025 02:48:43 +0000
Manifest this update: Fri 31 Jan 2025 02:48:43 +0000
Manifest next update: Fri 07 Feb 2025 02:48:43 +0000
Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: by6Wj2QOpvxYPuCxpo5ssubQ025pBKp6aAQLGL4/RmU=)
2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=)
3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=)
4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=)
5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=)
6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=)
7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=)
8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Jan 31 02:48:43 2025 GMT
Not After : Feb 7 02:48:43 2025 GMT
Subject: CN=679c3a0b-6089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:2e:4e:7a:6f:0f:41:0a:b9:03:ab:3c:94:
07:79:f6:f2:ca:19:40:88:6a:67:f6:5f:26:26:10:
0b:c4:d8:d8:f6:1f:33:7b:f3:e8:9c:01:b7:1b:b1:
b2:bd:35:e8:be:52:1e:10:2a:e6:bd:58:43:a2:3d:
18:42:81:fb:12:33:f1:6d:ac:49:78:76:8b:d4:eb:
b8:5b:cd:34:80:9d:65:07:d1:b1:21:ef:5c:3b:6e:
09:53:a6:40:49:ec:da:13:4e:55:06:ef:9a:e7:fb:
74:9d:06:d5:d4:89:b5:01:64:ef:c2:45:d3:df:49:
3a:83:87:7b:3c:b5:0c:c3:00:01:f8:5e:5a:f4:e8:
f0:bb:72:ff:31:70:9f:8f:f3:21:3a:57:fb:c5:4c:
6d:c5:d2:56:ba:73:be:eb:1d:6f:6d:fd:14:b8:0c:
58:d5:7c:1a:00:a4:83:b9:af:59:9c:57:8e:10:99:
37:51:43:f7:35:d1:d6:ce:70:c2:ff:30:a8:50:f4:
9c:90:33:19:35:0b:36:27:3f:06:0d:7d:7a:d2:b3:
e6:6f:fc:38:53:ad:c8:61:7d:3b:ef:df:78:85:64:
9d:d7:26:df:2a:5d:2d:80:96:a3:c7:a7:3a:49:d1:
19:d3:dd:9f:ff:4e:8f:25:d4:cc:95:ae:41:16:e4:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:EC:89:82:F6:B0:23:19:39:13:B6:39:39:89:65:A1:81:D6:A2
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:16:8b:8c:87:25:47:89:c7:7c:70:e7:22:d2:bf:f2:13:e8:
f2:a4:81:b6:d5:47:b3:0e:b6:05:e2:89:98:d9:74:f4:5e:70:
f2:3b:db:41:15:18:57:b1:3d:2b:68:f7:74:2c:2b:11:8d:a5:
54:f8:ea:21:0e:9c:6a:8c:0c:82:05:46:40:08:1d:b8:89:cb:
8d:0d:0f:23:d5:e6:6b:eb:5f:88:0a:e3:9e:e3:34:c3:d2:60:
23:2f:bf:9c:4c:94:21:8f:98:ed:3f:37:48:d3:fe:18:bc:0f:
c7:de:29:b4:02:ec:c7:46:f3:5f:b7:e8:e9:c6:19:5c:5d:24:
38:39:d1:0d:43:14:b0:05:3d:e3:c9:d5:f0:f3:73:4d:e2:7b:
a5:f6:30:9c:87:91:eb:22:4e:31:07:41:27:f7:a8:c7:95:6a:
90:81:3d:ad:fa:c8:17:32:f6:f9:75:d1:b8:43:9d:3a:ec:07:
d5:f3:e9:b5:ec:66:99:e6:18:be:9b:df:3e:d1:c5:9a:57:e7:
58:32:27:80:94:24:49:c8:3d:d5:0a:18:c9:0a:81:12:ae:55:
6c:d5:44:5d:74:84:37:7c:bf:78:f5:cc:64:ac:71:22:4d:7d:
a2:46:8a:5e:d5:dd:59:86:99:ad:30:dd:b3:0c:0b:d8:fd:a7:
a9:3c:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:34 2025 by rpki-client