Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft
File: lATO33S5SXRR7zK7ehK-1x0sI-U.mft (raw, json)
Hash identifier: mGPyA570yjlLGwgR01qU8yXKLZwoNcswVbslprRBZ5E=
Subject key identifier: 31:09:E8:6F:97:A8:2F:02:4B:D0:C6:15:D8:1F:79:38:D8:94:9D:33
Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5
Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft
Manifest number: 012C
Signing time: Fri 31 Jan 2025 03:46:30 +0000
Manifest this update: Fri 31 Jan 2025 03:46:30 +0000
Manifest next update: Fri 07 Feb 2025 03:46:30 +0000
Files and hashes: 1: lATO33S5SXRR7zK7ehK-1x0sI-U.crl (hash: 50qishCU9CLWW+nAZoPUaAVk/rx03Uid7CKSKaTBcHc=)
2: AFF53F96556211EE9C34E435C4F9AE02.roa (hash: LM315PXaZ9khTUzGflBEPkGQjhCerawkLIiZZc3Qylg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5
Validity
Not Before: Jan 31 03:46:30 2025 GMT
Not After : Feb 7 03:46:30 2025 GMT
Subject: CN=679c4796-930f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:e3:d7:36:43:97:9d:b3:d1:74:43:75:6e:
e0:15:21:d5:0a:e8:e0:57:b8:07:1a:4b:03:6d:a7:
89:b9:34:d4:6c:32:ad:bd:bd:43:87:78:e9:93:fb:
ce:92:65:2c:c2:1c:fc:31:7b:33:af:a4:7d:ad:83:
64:50:43:36:ed:a2:0b:19:f5:df:41:6b:ce:16:c2:
f5:f3:96:f9:58:fc:4f:f6:b4:17:e7:0b:2c:de:e4:
0e:06:d5:ad:d7:08:63:6f:75:4b:59:19:bf:4d:2a:
90:13:cf:28:7d:4a:bb:78:21:41:86:bb:2d:59:ab:
c9:33:43:2f:75:5e:e5:af:e8:f4:a6:e7:b6:47:05:
97:33:98:9b:9a:7d:4d:99:69:30:14:85:e6:40:e5:
7d:05:0c:20:03:a4:02:46:c3:11:cf:fe:66:e8:51:
10:b7:b1:6c:42:ea:35:42:f3:cf:c4:47:cf:99:51:
5a:e5:15:e9:f5:80:bb:6b:fa:4f:ac:b1:d4:05:a8:
4b:8c:d9:1e:14:0e:85:f1:6d:22:d5:34:9b:43:50:
25:a3:09:4f:4c:96:f0:2c:8a:28:13:98:6d:74:52:
ef:36:54:4d:58:bb:0e:50:07:f0:10:e8:09:c5:18:
c6:fc:13:3a:14:21:07:06:79:af:32:44:c5:5c:31:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:E8:6F:97:A8:2F:02:4B:D0:C6:15:D8:1F:79:38:D8:94:9D:33
X509v3 Authority Key Identifier:
keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ce:4c:b1:16:09:37:8d:3e:80:9d:dc:02:9d:f1:d9:b1:73:
2b:1a:d4:d4:9e:5f:9d:57:7d:86:00:44:f9:25:d9:dd:31:17:
2a:eb:bb:d4:76:d0:1d:2e:42:33:a4:a5:18:00:cf:34:20:c1:
f8:76:44:3e:29:b4:7c:38:f7:f5:9a:ea:d4:db:f5:59:75:f7:
16:93:80:b5:99:df:5d:d1:88:1c:99:38:5b:a7:50:14:be:3f:
a9:60:83:e7:3a:43:aa:ec:49:3c:b4:63:61:52:ad:2c:27:32:
1a:35:63:09:d3:65:f2:d9:be:7a:6d:b9:29:56:46:2d:00:78:
44:7f:84:b1:ba:ae:d5:ec:9b:cb:c6:87:46:e1:c2:4b:27:1b:
22:e0:73:89:d4:fb:66:05:0f:63:f3:3e:37:8d:73:fd:aa:32:
3f:fe:05:b7:4c:33:2a:17:c8:c4:a8:94:bc:a1:57:6b:5b:b3:
20:b9:8f:24:40:46:c9:09:e6:9c:31:8a:27:c7:d8:b9:95:87:
60:9e:37:33:99:95:1a:32:7e:e2:04:52:c1:cb:65:52:da:29:
aa:ca:aa:06:d4:a3:81:bd:08:f1:97:34:15:73:f0:df:3b:8f:
e5:b4:e2:89:d7:ab:16:b9:38:f7:96:49:71:f0:71:b7:b8:49:
fa:43:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:16 2025 by rpki-client