Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier: FJHTzut1MBewMjftqiBFuxXDflTXUgVl9GkpwIWytic=
Subject key identifier: 8C:00:E7:E7:6C:57:3E:17:E4:36:DF:46:1B:CD:31:CC:AC:AC:6E:E3
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number: 0190
Signing time: Fri 31 Jan 2025 02:47:57 +0000
Manifest this update: Fri 31 Jan 2025 02:47:56 +0000
Manifest next update: Fri 07 Feb 2025 02:47:56 +0000
Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: +53ja/weSIVv8Ta+B7Kpd3aNKbKE6KmCgMA/O8IMIrU=)
2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: jJCobfJLcL+bxm+0JuTzhdUR6TH06A3Cv8Ze73t5bJc=)
3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: 30rh6IWxeAZSoQLXE8+fnFkH8FRjm++ff7WAqq69pt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Validity
Not Before: Jan 31 02:47:56 2025 GMT
Not After : Feb 7 02:47:56 2025 GMT
Subject: CN=679c39dc-b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:18:3d:df:0b:00:00:c6:35:e5:6d:01:53:
b8:00:08:08:af:64:85:f6:d7:10:8e:09:2a:f8:c8:
00:63:4c:64:d7:5d:42:a7:a6:77:c2:ad:f8:f9:37:
67:9a:ad:dc:ef:84:a0:c4:d7:fa:7f:19:c8:ba:aa:
40:0f:27:1d:9f:e5:a8:79:a0:55:e9:e1:84:53:34:
f3:2b:9e:38:69:d2:e0:fc:01:53:42:32:ba:06:fb:
a9:54:1e:ab:ba:d3:7c:10:a6:07:64:ef:fc:74:79:
03:e8:70:04:9c:0d:3a:63:05:f7:2c:61:e3:64:1c:
2d:e7:b9:5f:6c:50:44:35:05:f2:b0:ef:66:47:93:
6d:b9:70:78:f6:ab:69:5d:bb:89:57:c0:1a:8b:ce:
c2:05:8d:8b:a4:55:25:ba:18:ef:c0:21:61:6e:36:
83:ea:4e:29:c2:ff:8a:9b:bc:f4:97:51:80:6b:9b:
5c:8b:7b:bb:1c:28:d3:59:74:f2:e6:51:41:c2:07:
0e:77:48:29:c7:18:13:29:a5:44:0e:1f:a9:f0:7d:
af:4b:a6:50:c8:17:c8:e6:8d:03:d1:68:6c:7c:13:
6f:1e:2f:a5:fc:0b:92:9a:13:2c:6c:a4:4f:88:bd:
26:27:ec:59:c7:91:d5:88:bc:a1:6d:eb:29:4c:d9:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:E7:E7:6C:57:3E:17:E4:36:DF:46:1B:CD:31:CC:AC:AC:6E:E3
X509v3 Authority Key Identifier:
keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:bc:23:a8:b9:9c:8c:eb:93:4c:ef:91:cb:70:a7:0f:ae:
19:d8:0e:bb:1c:63:4e:41:2b:f0:28:2e:3d:f7:2f:4c:8e:5d:
41:66:68:50:e1:88:47:a4:09:e8:e1:c8:10:85:87:69:64:f6:
6f:ab:24:3d:6a:25:b9:9c:c6:2e:10:ea:d8:3d:11:b5:4e:a0:
44:38:13:96:62:6b:1b:a3:b1:bc:18:01:7e:27:45:ef:03:03:
88:8e:df:cc:60:21:f2:be:79:f7:52:28:b0:26:bf:80:a4:1c:
9c:93:6f:26:7e:d5:b7:6b:8f:f3:6d:a5:a1:03:4c:b8:79:47:
f2:9f:13:3f:80:b7:04:44:b1:99:1b:c7:91:88:67:57:b4:f5:
5a:29:4b:de:8c:36:ae:a0:e3:21:1c:d4:16:35:ff:3b:64:d2:
78:84:cc:d2:42:c6:93:7d:39:a0:31:02:5d:13:a8:a6:5e:16:
78:7c:6e:2b:d6:02:22:6d:65:be:dc:3d:28:a9:e5:79:26:7f:
db:c8:bb:30:10:a9:12:75:e0:b8:9d:8c:b3:04:69:70:b9:cd:
05:42:1d:15:99:43:87:b7:1d:55:3e:84:de:73:ba:12:b6:3b:
56:13:75:40:50:4c:55:05:87:fd:b4:a7:c6:e6:52:32:29:b0:
c4:f6:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:08 2025 by rpki-client