Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json)
Hash identifier: TNYkLhe2L4DHYYk4M94W+esls1QcgX1Nzf4I2MYZUxU=
Subject key identifier: 11:97:FC:B8:A5:A2:92:5A:84:CC:45:A5:DD:C3:8F:10:10:F9:7A:41
Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61
Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961
Certificate serial: 07DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
Manifest number: 07D1
Signing time: Thu 30 Jan 2025 21:00:43 +0000
Manifest this update: Thu 30 Jan 2025 21:00:42 +0000
Manifest next update: Thu 06 Feb 2025 21:00:42 +0000
Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: 4bOeGdctLcv+7/5teQM9OyDpsqg8Ofc0EIbSO0ASv4Q=)
2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: tgiKpA5/VOirxpzZclo5SCNNUmu09Z28SHd+MFyd0UE=)
3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: n8qFcHxdOC/HNtBruhuEeiEtGy0dZxWyfWu4yIA24vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961
Validity
Not Before: Jan 30 21:00:42 2025 GMT
Not After : Feb 6 21:00:42 2025 GMT
Subject: CN=679be87b-c312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:bf:f5:9c:d9:fc:dd:a5:56:b2:89:b9:69:
d9:ab:ff:67:fc:0b:06:54:42:5b:46:0f:27:d6:86:
a8:36:d1:5a:b8:28:1e:9d:57:a7:4f:c1:43:4d:e0:
44:f2:db:39:c4:06:8b:81:2e:b8:60:ce:82:03:ba:
d5:ed:5b:2b:fb:01:c7:58:d6:35:dc:fc:7b:85:5b:
70:c2:83:25:e5:0b:45:fd:ea:b5:31:23:38:5b:7e:
0e:d3:19:93:06:18:c7:89:5d:83:5e:41:0c:eb:03:
e4:be:38:6d:07:b0:d8:c4:f6:c4:8b:56:50:93:4b:
d5:b4:8d:7b:0f:d5:dc:e3:d4:8b:8a:d0:86:f9:52:
ac:9c:53:2c:a9:35:6e:b8:ef:09:4d:24:58:25:a4:
ef:15:98:7c:2c:fa:2d:b0:0a:53:4d:ec:2d:fe:f4:
cb:43:d9:4a:01:49:a8:c4:0c:ea:7f:8c:20:c1:19:
93:0d:97:7a:b4:e6:76:f7:4a:9f:4f:15:0c:2d:07:
e0:5e:9a:81:b5:d0:05:e6:d9:a5:b7:4c:b0:3e:8e:
8d:b7:dc:9f:fd:68:6d:e1:33:af:ba:84:49:e2:3b:
1b:08:4d:6e:a4:a3:6e:3e:ea:52:2c:52:92:2f:aa:
39:51:c6:be:80:23:39:bf:7d:32:b2:aa:57:a9:9f:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:FC:B8:A5:A2:92:5A:84:CC:45:A5:DD:C3:8F:10:10:F9:7A:41
X509v3 Authority Key Identifier:
keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:f9:c5:89:99:83:98:45:c1:8f:44:8f:ed:36:49:ed:44:6a:
14:85:cb:e9:e3:12:9d:e9:37:e3:6c:ad:33:05:73:7e:10:21:
0f:fd:db:ee:c6:e4:a1:c9:73:83:ed:da:1e:90:0d:c8:fa:b4:
36:89:a4:18:0b:7d:9d:ad:2f:0a:5f:89:9b:ae:1e:84:e4:9f:
64:0a:e5:12:38:a3:eb:29:87:30:9e:8b:92:f9:e7:a4:8c:25:
16:0e:03:6d:c4:a1:63:d6:74:01:02:56:9d:55:97:29:99:50:
6c:2c:88:92:0a:bc:64:6c:d1:6c:88:83:81:27:b2:56:17:c1:
bf:6e:b6:f6:fc:14:47:84:c0:e8:8d:28:19:2e:b3:94:58:01:
f7:49:99:a6:f4:13:76:2a:ee:3c:cc:a5:d4:91:ce:d6:7b:8a:
e4:00:80:1f:e4:af:c4:a6:88:6e:ac:e3:8d:d8:7d:68:d7:3e:
63:df:45:5f:93:fa:8d:f2:b2:e3:58:c9:2d:f2:ce:b9:ce:a3:
95:b8:15:a8:d8:15:b3:23:90:bd:24:49:cf:a8:72:c4:01:9f:
a1:4a:fc:70:91:f8:25:81:64:8f:aa:4c:c4:6b:69:9c:fc:7c:
2c:d7:62:d9:e6:21:ee:5c:2f:90:3f:cd:02:37:ee:52:60:fa:
e3:12:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:01 2025 by rpki-client