Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json)
Hash identifier: NqWMQdG8MhgPfi5HGFHf+5WqOUUg3k+sXouOZRgnj0M=
Subject key identifier: 14:E7:67:36:38:F5:AA:11:88:5C:A8:4E:49:D8:FA:8A:D8:2F:30:79
Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
Manifest number: 063D
Signing time: Thu 30 Jan 2025 22:42:18 +0000
Manifest this update: Thu 30 Jan 2025 22:42:17 +0000
Manifest next update: Thu 06 Feb 2025 22:42:17 +0000
Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: vLa67veyd1dHjAIvcW8UT0+sbxYdCsHPpqXngkt58UU=)
2: 1019A190866411EF9319811DC4F9AE02.roa (hash: wtwiKt+4TVHusZZf8INhP5+WjxvjhIvi80rOozxsOjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Validity
Not Before: Jan 30 22:42:17 2025 GMT
Not After : Feb 6 22:42:17 2025 GMT
Subject: CN=679c0049-673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:eb:83:63:36:62:d4:c0:93:4b:12:17:8d:
a6:9f:8c:b4:11:ab:95:ea:27:5f:bb:35:60:4a:73:
2d:29:6e:66:b8:ce:a6:55:64:fc:6f:2c:dc:85:98:
e2:80:30:15:36:6f:4f:de:1b:50:3f:fb:c8:9e:d7:
f2:23:75:d2:8c:68:04:e1:5f:27:14:96:28:a0:fb:
5d:65:47:93:99:98:6d:e8:98:fb:20:58:67:03:00:
6e:84:48:40:27:b7:8a:7e:e5:d8:a2:9f:5a:79:56:
6a:d5:9e:27:09:db:f1:4f:80:c8:5b:d4:ff:86:3d:
07:5e:8d:d9:f7:3c:fb:86:6d:1c:ff:71:09:51:52:
05:34:e3:91:ad:e1:e0:81:de:df:8e:b3:80:c2:cd:
36:fb:05:58:c5:a6:68:f5:dd:71:7d:5f:09:6a:cf:
22:66:ad:b3:9b:e7:75:0d:b3:6c:d1:74:fb:15:48:
d5:4e:b2:48:ad:0f:cb:8f:f4:4d:49:2d:ce:c0:7d:
32:50:a4:51:16:7c:19:32:c4:42:71:a9:08:d2:4e:
3b:66:ef:98:31:71:f6:e9:92:3e:93:d2:46:97:a2:
5f:82:45:17:39:a6:4d:dc:b2:fd:00:dc:6a:8c:a9:
17:c0:6e:6c:a3:00:c1:cd:b2:3a:26:af:0d:ff:a6:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:67:36:38:F5:AA:11:88:5C:A8:4E:49:D8:FA:8A:D8:2F:30:79
X509v3 Authority Key Identifier:
keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:24:60:93:5a:b3:46:5e:d5:6d:38:67:e1:dd:f7:83:3c:64:
b4:67:d7:83:d5:c5:4a:b2:ab:5b:b7:0f:62:d7:6b:41:c5:4e:
1a:0e:12:ad:f9:ec:ad:30:e4:e8:ec:43:e8:d3:1d:4c:66:ec:
dd:f6:90:c2:f9:77:c5:5e:e8:03:f1:64:20:fe:5f:9a:72:ea:
c8:f4:08:a2:a3:2a:84:2c:81:f0:70:51:7a:59:90:ba:cc:e8:
e7:dc:f3:f2:67:80:cb:20:6e:da:1e:48:0f:22:2f:72:5c:c4:
66:5d:43:c6:7f:59:34:a9:f2:e8:91:00:bc:1d:2b:a8:2b:92:
3e:fe:c5:2b:34:aa:3c:16:2c:7f:1f:41:27:6e:c2:32:43:33:
2f:43:4c:fe:2c:fc:83:64:06:e7:5f:62:a9:f0:2b:d2:78:87:
ac:65:d0:b1:22:23:d6:b0:b7:fe:38:72:da:8e:80:dc:76:17:
e6:8b:82:6b:08:6f:fa:c3:ef:28:3e:5c:58:91:2c:9a:b9:cf:
5c:54:69:c9:a0:d0:89:82:d3:ec:f1:fa:bc:9b:56:f4:50:20:
19:2b:61:8c:4d:2a:c3:f8:d2:5e:2a:44:42:d9:af:f4:75:d1:
a2:de:24:a4:b2:74:76:ca:d3:fb:89:20:4a:38:75:b3:d8:46:
b5:b7:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:48 2025 by rpki-client