Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft
File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json)
Hash identifier: PHGP80YByAd2NmBfgcKXEn6PxRa72OnJdl/KyKrHx5c=
Subject key identifier: C4:1E:7D:30:01:A6:AE:9B:DE:C1:C2:6E:06:01:F9:22:FA:DF:23:82
Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F
Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F
Certificate serial: 0173
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft
Manifest number: 0170
Signing time: Fri 31 Jan 2025 03:04:55 +0000
Manifest this update: Fri 31 Jan 2025 03:04:54 +0000
Manifest next update: Fri 07 Feb 2025 03:04:54 +0000
Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: 6N9a9ETS+up5VTlYZxx1F9DqNkEMd3h2nOs6fQIcDSw=)
2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: R2fgHMU976+Qe8LJMOcQoSeVupcwkHm/BpOIqV/u37U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F
Validity
Not Before: Jan 31 03:04:54 2025 GMT
Not After : Feb 7 03:04:54 2025 GMT
Subject: CN=679c3dd6-db03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:a2:8b:d6:f9:67:cd:08:ee:8e:aa:12:14:
e1:36:ff:38:ee:02:a6:50:b8:e5:a1:a5:f0:5c:91:
b9:8e:26:67:f3:cb:00:49:c2:9d:77:24:6a:d3:98:
1d:e2:50:1b:c5:25:ec:f8:75:66:8c:81:7f:03:9b:
93:e1:f1:df:ab:ad:78:a6:be:c4:92:04:5c:c2:27:
dc:17:46:3b:ca:39:ba:0d:51:b3:b3:16:d2:ed:a0:
ff:fa:5b:85:3f:5f:e1:e4:cf:31:bb:db:48:06:bb:
8b:7b:6c:d9:be:9b:39:02:85:0d:54:97:06:19:48:
b7:4c:8f:23:27:11:19:35:08:94:db:3d:0c:53:f6:
a7:92:f1:73:16:3f:77:93:aa:94:72:b6:ae:e7:7f:
13:9c:21:c6:75:6a:c2:76:80:6d:83:1d:82:97:0f:
2d:32:2d:39:7d:ce:fe:e7:54:d2:5d:bf:b5:ed:c4:
b1:c4:96:c6:7d:29:16:8f:88:f7:5b:f5:33:4d:7c:
e7:68:c3:77:57:0e:88:43:66:5d:8b:2f:14:25:0b:
d2:8c:64:ef:c5:d4:96:ee:23:3a:36:e6:3c:5e:8e:
c0:bd:9e:7e:58:85:01:9e:c2:1f:1d:a6:40:55:76:
31:c9:56:5f:4a:51:2b:6f:68:3b:59:04:e9:86:90:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:7D:30:01:A6:AE:9B:DE:C1:C2:6E:06:01:F9:22:FA:DF:23:82
X509v3 Authority Key Identifier:
keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:9a:ee:03:ac:2f:1e:30:90:5e:69:a0:8e:fb:0e:6c:8d:8d:
14:91:2a:c2:34:52:db:b5:ff:46:4a:77:4a:da:9b:2d:49:9c:
81:71:fa:a7:c2:ee:11:f0:4b:ff:96:71:93:c2:6b:73:ba:47:
bc:e3:69:e5:0a:e6:53:d9:b7:de:0b:5b:ca:89:f3:35:1a:be:
c8:48:4c:fb:7b:87:53:29:4f:07:e2:66:1b:13:da:2e:2f:f9:
af:c7:23:c7:5d:9a:51:28:fa:dc:90:9a:9d:7d:12:83:27:0f:
27:c2:4b:8e:0b:26:4e:4a:25:cd:08:6d:8f:15:10:b3:ca:4f:
cf:a2:f1:f9:07:38:e1:7d:4b:ee:d9:67:ba:e6:bf:12:8a:66:
de:e6:9a:20:6a:c2:99:8d:1b:d2:79:25:0c:d9:6e:63:6d:42:
49:cb:56:56:17:ed:16:e7:4e:11:e1:e4:1d:3c:fb:21:a6:5c:
fb:1b:5e:0b:38:0f:58:07:cd:0d:a6:1e:49:7f:31:b1:de:83:
9a:3e:dc:ee:92:b1:be:fa:a5:fe:01:ee:5a:a1:99:bf:0c:4f:
51:fe:ed:6a:d5:32:0c:11:12:72:27:b0:b0:3b:41:a9:c3:81:
ab:aa:76:f7:3c:1b:00:3e:48:e5:d2:50:53:f7:d2:46:e0:3f:
6c:bd:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:26:56 2025 by rpki-client