Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: HfxiB/npflwZh/KW7myu2b7SkRn2ABFXn9HZsHuDM3s=
Subject key identifier: 80:52:6F:BD:07:23:B4:1D:4A:80:F7:78:63:74:34:C5:38:3D:A4:F4
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: 1C
Signing time: Fri 31 Jan 2025 07:01:30 +0000
Manifest this update: Fri 31 Jan 2025 07:01:29 +0000
Manifest next update: Fri 07 Feb 2025 07:01:29 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: 1SyOP8rDEvyYYUsbk5UdQP14OP6vAlsvUA+KLy1Yt6w=)
2: E51A0F1CBC7211EF870FDD21C4F9AE02.roa (hash: T9bVFC+7xpXVsPqPdgoCB8jD3lh7ibXEAScTNhvEn5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Jan 31 07:01:29 2025 GMT
Not After : Feb 7 07:01:29 2025 GMT
Subject: CN=679c754a-2960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:80:28:19:d5:67:1d:77:4d:fe:05:ef:56:
7a:a3:92:69:cc:ff:6c:dd:39:0c:c6:f2:aa:64:22:
b5:d2:54:83:92:e7:94:82:6f:6a:5e:25:c6:be:02:
3f:c4:3f:ec:e7:e9:7d:8b:f8:9b:c6:80:3e:b7:65:
15:b3:a1:41:a3:37:ad:65:15:cc:1a:9a:a1:98:2e:
49:6c:4a:79:67:27:29:09:9f:00:98:49:e9:2c:ff:
60:f6:6b:73:be:6b:f2:db:3f:13:b3:fe:5e:63:88:
f7:81:02:87:9d:d1:89:64:1f:cc:ca:e4:5a:e7:30:
73:2c:a4:dc:82:c9:86:06:8c:8e:83:cc:7a:69:2b:
b5:62:7d:3f:73:14:ef:44:24:4f:b4:eb:48:8b:4a:
d0:c8:54:4f:0c:ec:14:ea:41:f7:41:14:c3:67:18:
be:f4:3f:7e:86:4c:da:7c:aa:ac:f1:e3:ce:69:83:
14:fc:a0:43:f1:c3:36:81:0c:5f:36:ad:ba:90:90:
15:11:42:cb:3b:cc:f1:ea:81:1b:5b:bb:e6:bf:06:
aa:b2:71:d5:3d:ee:8c:ed:ad:d7:33:cb:66:6c:72:
4f:44:68:4d:3b:96:13:a4:8b:ee:94:7b:1b:9e:c9:
7a:65:d5:69:3b:10:72:0c:a1:21:36:e9:1f:3f:bd:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:6F:BD:07:23:B4:1D:4A:80:F7:78:63:74:34:C5:38:3D:A4:F4
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:23:e9:c8:18:b4:72:5d:a8:29:78:f9:48:51:bc:9b:f2:b9:
06:49:8b:7f:a3:6e:08:ce:b0:fc:b6:59:a5:73:2f:54:42:42:
4a:15:13:03:c0:d1:7c:23:c0:d9:04:c2:ba:b3:39:06:53:64:
8c:c5:89:9d:75:72:0e:b7:79:43:6b:fa:5c:72:92:91:61:36:
56:6f:33:95:b9:08:1b:72:7a:5a:be:a8:cf:9a:dd:f2:b3:b5:
70:8d:63:64:a8:fa:01:35:a6:86:cd:ab:67:21:f6:d6:ac:40:
02:7d:dd:66:22:c2:38:46:87:94:65:d9:80:6c:e7:61:05:e4:
75:6e:6c:32:86:ac:04:3e:52:a8:7e:03:cc:cc:25:11:26:2d:
23:7e:72:36:e0:0d:a9:a0:02:11:75:5c:cc:d8:20:9a:f0:32:
18:20:24:b2:7e:db:36:0b:82:51:4b:23:54:53:5d:b5:7f:df:
60:68:8f:fc:56:4e:28:60:4c:ff:e9:08:23:d3:a4:14:0d:8c:
7c:cf:3a:dc:19:6f:d2:92:ba:a3:7a:2c:f7:4d:08:87:de:48:
d2:de:a2:79:21:d5:47:01:08:5c:62:38:f5:d2:1e:98:86:c3:
bc:3f:4d:02:27:18:83:2c:55:11:a8:a8:a4:60:63:8c:a0:01:
97:fa:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:50:44 2025 by rpki-client