Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json)
Hash identifier: PcnRwDtxVDaY1sh9zNZ/IB5O3fFiT9Ep5/AM9XEd2SA=
Subject key identifier: E7:D9:6A:6D:4A:77:A0:4F:7D:EC:67:D5:2C:FD:A1:48:A5:87:69:5F
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial: 0580
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
Manifest number: 0579
Signing time: Thu 30 Jan 2025 23:19:02 +0000
Manifest this update: Thu 30 Jan 2025 23:19:01 +0000
Manifest next update: Thu 06 Feb 2025 23:19:01 +0000
Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: OkoSlhRGKuTq+WwCLE6yYQu8rek4hIBYF+AqNxZxrXs=)
2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Validity
Not Before: Jan 30 23:19:01 2025 GMT
Not After : Feb 6 23:19:01 2025 GMT
Subject: CN=679c08e5-02d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:99:62:81:1b:ab:d5:e7:7e:43:03:11:f3:
ab:87:58:32:4a:2c:cb:c1:e2:c2:56:67:e3:e4:73:
2c:cb:b7:6b:d8:58:33:41:bc:3a:49:89:f3:ad:a6:
7b:7f:64:40:a9:92:ff:be:d8:dd:44:b7:fd:27:14:
86:e3:07:a6:53:54:a2:53:39:d0:59:10:7b:5b:2d:
d2:21:8d:55:ff:44:1d:fb:58:b1:83:96:ea:67:e4:
ef:68:8b:19:a7:03:10:fe:ed:4d:c1:42:53:bb:91:
1d:2c:c4:fc:a1:0d:bd:a3:92:8c:b6:e2:8b:41:cc:
6c:6c:cc:38:6a:e9:07:99:95:ad:40:69:40:11:9a:
a9:3d:b7:25:81:97:a7:04:36:5d:51:b4:55:de:e6:
a6:09:d3:17:ef:30:ae:a9:b0:95:10:58:9e:59:7b:
cc:f4:3a:33:9b:84:0e:ee:df:da:6a:82:e7:4c:6e:
77:95:9e:08:e1:9f:a6:5c:ba:b7:84:a3:90:a5:a9:
cc:c7:4c:d6:2d:02:cf:dd:cc:b1:c4:92:f9:28:ae:
95:2c:42:13:64:12:cd:3b:82:e1:01:29:0b:4d:4b:
03:d8:88:14:a2:71:54:74:cd:ba:75:52:c9:68:eb:
b4:f9:c2:ed:b1:eb:13:38:af:c8:5b:6c:27:d9:6c:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:6A:6D:4A:77:A0:4F:7D:EC:67:D5:2C:FD:A1:48:A5:87:69:5F
X509v3 Authority Key Identifier:
keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:75:1e:f4:29:6b:cc:d3:75:ac:38:60:8c:0c:1e:3b:fc:dc:
fd:e1:9c:14:a0:6d:c0:de:51:57:d3:fc:29:af:51:68:d0:2c:
b2:7f:bf:7b:9d:01:83:fe:b8:de:ed:5c:6b:c3:71:ed:35:de:
3b:73:82:fb:dd:7a:77:81:10:dd:00:db:33:3f:12:6d:7a:82:
e7:e4:69:72:3a:0b:d9:18:4e:86:52:28:4f:e5:8b:66:16:06:
85:f1:f1:88:40:75:a0:b9:cd:59:f1:35:9b:3b:c4:67:0b:e8:
cb:af:17:0f:61:f9:c3:9d:60:fe:27:94:d4:56:1e:43:79:95:
a7:00:f5:61:7d:98:cc:96:d9:07:98:06:a5:4e:16:0f:bb:9f:
35:8d:1c:4a:98:14:a2:a1:8c:af:82:23:65:5e:f1:3d:4e:e2:
8b:aa:a1:5b:37:65:08:e9:22:e4:e2:8f:56:0b:4e:51:90:50:
74:ca:8a:12:44:04:2e:75:f2:78:e1:20:c7:8d:94:3f:bc:cf:
9b:e6:88:20:78:c3:a4:b8:a6:0b:14:b3:c5:1f:f6:65:77:01:
09:4c:1e:57:93:0b:66:73:f3:84:f5:d1:9d:85:35:88:b3:92:
f7:7b:ce:82:74:70:66:cc:e1:3e:94:ae:c8:c2:04:44:4c:55:
c1:61:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:15 2025 by rpki-client