Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier: lQ5W3UW5jDCQvg1Vf577VbczEV9t68b6lbpBmKanYQs=
Subject key identifier: 72:86:70:0A:94:60:CC:4F:1B:C1:AF:9A:DA:E7:33:99:B4:71:F6:F8
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number: 0126
Signing time: Fri 31 Jan 2025 03:47:16 +0000
Manifest this update: Fri 31 Jan 2025 03:47:15 +0000
Manifest next update: Fri 07 Feb 2025 03:47:15 +0000
Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: NASeEQKnOwIdq2jFSMywrIlSW9gSPTo/dE4LSeRQ8tI=)
2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: Hhj/FVhC3GRjMe6osKTGMjiICT7QgTpi9xb1SC1yTh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Validity
Not Before: Jan 31 03:47:15 2025 GMT
Not After : Feb 7 03:47:15 2025 GMT
Subject: CN=679c47c3-c74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:a4:97:b2:f7:a3:9f:74:44:23:bf:fe:20:
51:d4:e3:fb:da:bb:3e:e2:0c:d6:8f:33:0a:7b:54:
05:66:e5:6e:b9:26:6e:3e:2b:bb:14:4a:57:58:9e:
b6:9a:0f:b3:70:ae:7b:ac:32:75:15:8d:03:5b:86:
b1:56:d8:05:98:df:62:42:c6:5e:df:b0:cb:42:d0:
c4:32:34:ca:a4:c2:a9:95:58:70:ca:0e:1d:d0:1a:
46:e7:c5:d5:b8:24:23:da:27:5c:8a:37:67:c7:87:
21:63:48:9d:fb:99:4a:ac:63:fd:6e:f3:75:6d:96:
dc:3f:cd:41:c6:d5:e8:3c:ca:6c:f4:27:05:26:08:
9f:c0:4b:18:8f:92:0e:67:f3:08:22:13:ea:da:37:
70:7c:ef:9e:50:d1:90:37:36:e1:8f:12:ff:37:2b:
4e:6c:3d:0b:da:83:b3:11:fc:7b:46:36:63:7a:20:
2a:1d:58:ab:6d:4b:90:c3:c8:67:d6:31:79:3b:09:
71:ac:54:7c:e0:7e:86:dc:cd:1a:2c:f4:89:3f:65:
09:97:6f:83:f2:07:c6:60:ea:5e:08:e3:8f:1f:6e:
cb:d9:5e:13:5c:9d:74:f6:64:1b:e9:93:cc:cd:fb:
e2:20:b3:3a:5d:5a:3a:e7:8f:9b:a8:57:3b:13:20:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:70:0A:94:60:CC:4F:1B:C1:AF:9A:DA:E7:33:99:B4:71:F6:F8
X509v3 Authority Key Identifier:
keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:aa:ad:5e:1a:2f:99:a0:ea:6f:e9:22:73:fb:52:e2:ad:
d0:5c:7c:1a:56:0d:bf:7d:cc:cc:bf:1d:86:99:46:a4:88:59:
14:2a:cb:c7:19:4d:da:ac:d6:9e:f2:33:ac:0c:a7:2b:9d:b8:
f7:b9:94:e8:00:d6:b8:cc:4a:ac:85:39:91:72:f3:28:6c:26:
6c:92:ec:94:3d:60:95:bc:4e:99:6b:7f:f0:ed:c6:e3:ed:c1:
65:70:35:e0:d7:bd:16:9e:d9:ac:bb:2b:6b:b2:d7:27:1e:e1:
0f:b9:7b:03:b1:ce:ea:58:81:34:48:a8:7a:24:09:ac:7b:14:
e0:bd:3d:22:29:99:26:0e:91:74:16:bf:e2:1b:62:d3:ef:48:
b6:e5:ae:14:f7:b8:6c:90:5f:0c:2d:8e:30:2c:0c:41:f6:b7:
ea:13:03:c9:d7:17:d6:7e:97:ad:79:d9:5d:4d:e7:d0:c1:12:
6c:ab:e0:dd:ae:66:c8:3c:27:3e:ef:eb:3d:1a:e7:07:1a:e3:
71:d4:4d:b0:44:4b:9c:8f:b0:69:b8:c1:7e:a0:9e:c6:e1:c6:
c5:11:ff:92:e1:ec:d3:33:bf:9a:5c:5a:45:2a:f9:5e:dc:dc:
98:7e:66:f8:f1:8a:26:b3:bd:ca:86:00:7f:f1:39:6b:f2:f1:
1f:f3:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:10 2025 by rpki-client