Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json)
Hash identifier: l59Km+pnW+oWUvDI4+OI1hJQmcE4k4tndWp0JVx9iq4=
Subject key identifier: 79:33:A5:27:5E:39:14:71:2D:C9:D2:C0:26:8B:2F:5C:0D:57:11:96
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial: 0C29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
Manifest number: 0C10
Signing time: Fri 31 Jan 2025 18:24:55 +0000
Manifest this update: Fri 31 Jan 2025 18:24:55 +0000
Manifest next update: Fri 07 Feb 2025 18:24:55 +0000
Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: fxhewuou1Pmk8PELdufX2YSE/kw+fDQ+ck3qn8gk+xs=)
2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: VdMfsAJk3V7QieqJhJSnIh1YzoUvum5VdjclyzxhM5o=)
3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: xaKObum3EFlGZQF/g5wk0khI8wDbWZb2Cu/3w9bjJUY=)
4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: +PNWRMsQpZdZrhBnxEHUPHxE2UGarRHAqMGQOz8wwvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Validity
Not Before: Jan 31 18:24:55 2025 GMT
Not After : Feb 7 18:24:55 2025 GMT
Subject: CN=679d1577-df92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:8d:46:5e:42:eb:16:2d:5f:ac:68:c9:7c:
41:c5:f4:4f:25:9c:d0:0b:08:2d:b0:14:d2:9a:b3:
9f:01:43:91:53:c6:b6:5e:2f:88:bd:79:73:52:44:
20:ca:81:df:c9:a6:e9:45:30:6a:e1:f8:aa:3c:01:
22:a1:57:62:75:b6:76:89:ad:d2:32:22:11:de:c9:
13:56:c0:d4:a6:09:72:38:e5:71:c2:d0:ab:13:f1:
fd:34:53:1b:a6:49:98:43:28:5e:0e:7d:8b:0a:fc:
2a:a2:78:a9:f0:eb:33:ef:55:12:e2:11:1e:4f:a8:
d3:3c:65:57:0d:3f:f9:12:8a:21:83:d6:c7:4c:d6:
f4:a9:d3:66:f8:6d:e8:0f:5b:65:58:45:7c:64:42:
64:55:59:37:bd:fa:2c:e1:11:23:74:e3:c8:b3:42:
a4:4f:59:15:66:5b:02:be:ce:41:b9:a8:f9:ed:ca:
2f:c7:ce:90:d4:1d:67:9c:8e:1b:72:ca:6a:eb:cd:
41:35:c1:c3:c4:44:86:8c:6d:fd:97:45:ce:f5:19:
ed:98:6c:ee:d3:e1:8b:57:69:b8:57:a1:ed:e1:5a:
b2:de:d6:78:cb:0d:4f:5d:85:de:f1:8b:b2:80:f1:
42:43:6e:55:ae:06:bf:58:27:27:41:1f:50:9b:a5:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:A5:27:5E:39:14:71:2D:C9:D2:C0:26:8B:2F:5C:0D:57:11:96
X509v3 Authority Key Identifier:
keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5b:90:f9:98:9e:ea:78:d3:b0:7d:4e:26:a3:ff:ba:f5:56:
01:a6:c1:8a:36:fe:51:a4:b0:71:66:fa:9b:01:20:1d:df:ab:
7c:15:ba:58:b3:8a:ae:d2:21:b7:45:53:c8:26:00:af:13:08:
97:e6:43:1c:7e:21:9e:12:1e:7b:ee:56:ee:e6:47:a1:8e:54:
c3:fe:a3:13:cd:9f:8f:50:8c:5a:3b:ba:54:42:4f:62:f9:42:
63:d3:80:ba:e8:08:f9:33:7d:b1:23:a6:4b:6d:39:76:dc:7d:
eb:c4:fa:5a:1d:35:94:7c:08:d7:52:c2:8f:fc:32:e3:2f:f8:
8d:38:43:94:07:99:18:9a:7b:16:e9:27:cd:88:6a:46:f3:a8:
ee:9c:a2:ac:66:ea:c3:41:f2:65:38:97:c8:9c:31:9a:31:6a:
6e:b6:54:86:be:7c:1b:34:37:57:b0:d0:95:3b:68:4a:b8:d0:
f1:ae:63:b5:77:51:11:34:d7:77:2d:94:bd:3b:af:e2:23:80:
31:ee:46:12:73:5b:1e:62:80:7e:c4:2c:c4:b1:30:38:bb:52:
38:0b:89:39:49:99:86:fe:50:2e:8b:59:75:f9:b8:d5:c5:87:
e7:dc:ac:d2:8e:13:d6:b3:5a:ec:7f:84:57:ff:43:a7:5f:e4:
a6:57:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:02 2025 by rpki-client