Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json)
Hash identifier: 5VrTz2TWp2oxuzjNhHIqS34HzdJ7U6Ws1/xy1fUeZKc=
Subject key identifier: A3:58:0A:3A:03:ED:9E:15:4F:5C:87:A3:37:57:55:A1:ED:64:AD:3A
Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Certificate serial: 089C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
Manifest number: 0896
Signing time: Thu 30 Jan 2025 20:37:50 +0000
Manifest this update: Thu 30 Jan 2025 20:37:50 +0000
Manifest next update: Thu 06 Feb 2025 20:37:50 +0000
Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: QGPhDjplKg5rOryCvuY3/5BUf2bMVsXaRfdpbrN7GPY=)
2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: TnMqG7GvmFIUZR1HrQOjvsZbuMyBif97otHOmdjZbaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057
Validity
Not Before: Jan 30 20:37:50 2025 GMT
Not After : Feb 6 20:37:50 2025 GMT
Subject: CN=679be31e-26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:72:16:f9:a6:77:8e:52:f0:cd:eb:f5:d8:
0c:5f:09:d6:7c:85:d9:b3:ef:f9:36:39:82:4d:00:
e3:da:e7:15:e7:d8:e5:99:b5:76:14:45:7b:a8:e2:
d7:e8:ad:83:15:b5:28:a5:4d:8b:1b:5d:ce:a8:34:
ea:13:bf:95:7b:d3:af:bf:4e:b3:21:1b:41:39:03:
81:57:d8:ad:75:51:77:4d:3e:33:d7:98:30:76:b5:
71:02:4c:b9:a6:17:c1:b8:62:b3:2e:4d:10:89:5d:
7f:a2:c8:e2:30:8f:3a:2b:d6:99:55:82:d3:47:9b:
e1:dd:4e:b3:cc:d4:c3:e5:6b:db:61:ce:3e:75:58:
79:8f:89:b4:f6:d4:9e:4a:1c:85:f0:df:cc:24:04:
33:73:b2:ab:e5:ac:e7:58:f4:51:88:d4:de:4a:eb:
ec:6a:73:8d:85:51:0b:aa:81:f9:ac:2a:5f:df:3d:
f1:4e:3e:2b:c2:98:f7:25:82:ad:78:a4:b4:ed:c6:
4f:37:53:1b:34:6a:b9:4d:50:9f:7e:c6:59:53:e4:
f2:46:3d:0a:a0:2e:76:7b:fd:52:3a:21:fb:83:ad:
7d:82:8f:07:7e:98:6b:d6:4d:12:9c:5c:89:a0:9a:
5f:55:47:c8:da:02:37:5b:a4:10:3b:d2:5d:bf:ba:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:0A:3A:03:ED:9E:15:4F:5C:87:A3:37:57:55:A1:ED:64:AD:3A
X509v3 Authority Key Identifier:
keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:0b:c1:2d:fe:94:55:e4:03:43:af:4f:28:45:d6:73:19:64:
8e:c5:d7:3b:55:bc:70:be:7a:09:be:b7:e3:2f:8c:7d:4a:9e:
c8:aa:b5:a6:99:45:9f:e4:8b:88:7a:c7:29:06:6f:29:d8:7a:
9f:c7:14:fc:f4:41:d2:14:fb:38:88:50:7d:9a:c0:3e:5c:77:
5c:2e:02:0d:4c:ab:c3:7b:07:fa:f4:c5:7e:cb:44:49:e3:c4:
42:d2:25:12:27:db:00:38:cd:4b:09:c2:1b:3f:d7:9a:0d:62:
d3:d4:1e:03:fa:ea:9e:8f:ea:f7:60:3c:1f:ae:0e:6c:1c:d8:
67:68:26:c1:b4:1f:ab:e1:31:96:50:91:fc:82:05:03:08:28:
b8:72:10:83:16:8c:f4:a0:66:58:a2:c5:7d:c9:ca:75:d5:b9:
db:47:b6:b5:16:d3:d9:88:f9:f7:bf:e4:f2:7a:19:4c:5a:9f:
8b:1a:d5:65:4c:fa:d0:df:5b:be:d8:b8:99:e0:0c:fe:72:b7:
f4:76:ce:1a:52:d1:77:d2:86:e8:f0:ab:10:4e:db:ea:9f:1f:
11:3d:99:4b:23:0b:34:b3:90:1a:84:5a:3f:2c:ef:a8:ff:11:
de:26:12:a3:d7:45:63:f2:1d:bc:7a:ab:2d:35:bf:f4:25:a8:
dc:10:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:10 2025 by rpki-client