Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json)
Hash identifier: /x5KQE9DIzO41F+upRerl3jbkMH3WG4Vn2/oKWBjsHQ=
Subject key identifier: 6F:3F:FE:A1:EB:31:37:C9:AB:F1:22:4B:46:22:23:6B:B1:F5:DE:90
Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Certificate serial: 044A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
Manifest number: 0442
Signing time: Fri 31 Jan 2025 00:20:00 +0000
Manifest this update: Fri 31 Jan 2025 00:19:59 +0000
Manifest next update: Fri 07 Feb 2025 00:19:59 +0000
Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: 9EbBAoPkefBP88T6UeMZTEbzoI7oMImqbgjIEsBbh+E=)
2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=)
3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF
Validity
Not Before: Jan 31 00:19:59 2025 GMT
Not After : Feb 7 00:19:59 2025 GMT
Subject: CN=679c1730-423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:e5:bf:4d:21:4a:59:74:14:5a:81:b4:8e:
a1:aa:7d:89:4a:37:1b:7f:5f:f8:11:5c:4b:90:c1:
e9:3b:3f:03:81:a6:78:ef:ba:82:ca:9b:44:a7:33:
2c:bf:6d:fa:e4:4e:6f:e2:e9:e1:cb:cc:81:72:93:
ef:c6:f2:a1:14:b3:3f:ce:35:49:cf:fa:f5:f2:c7:
9f:2d:28:fd:b0:0d:e5:a1:86:3d:23:98:67:66:1a:
a3:2b:5a:e2:4c:6a:64:e6:a5:57:82:9b:09:4f:ed:
06:5c:78:f1:98:54:a0:c0:6d:0d:12:65:7b:d4:5b:
25:fc:57:a9:47:87:25:ba:18:24:b7:53:1a:fe:5d:
bf:eb:a9:89:96:82:e8:e6:b3:a1:42:81:a5:73:27:
b4:bc:a6:19:58:80:68:4b:f0:7f:80:5d:4d:fc:26:
b4:92:a0:88:35:8c:d6:7a:e7:c7:1c:13:be:19:e2:
06:b4:b7:c8:f6:a1:d2:09:2b:da:c2:7b:22:82:62:
ca:b0:5f:58:02:23:c7:82:68:4a:bd:e0:a8:3a:be:
01:03:a0:01:52:4f:ff:05:df:d9:6e:ed:ab:a5:a3:
9b:25:82:bc:74:c9:40:54:a7:4a:92:5c:e6:4a:62:
c7:a0:b3:97:d8:9f:ca:f4:65:77:f4:6d:86:30:59:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3F:FE:A1:EB:31:37:C9:AB:F1:22:4B:46:22:23:6B:B1:F5:DE:90
X509v3 Authority Key Identifier:
keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:27:e7:37:c0:45:5a:4d:48:bd:d3:53:cd:70:6d:a8:c9:
cc:15:b5:cd:8c:b3:9a:c0:fd:ae:57:af:35:22:3a:ea:b1:d1:
8d:ef:be:13:f6:7d:ff:8d:67:b9:1b:70:0a:1b:c9:22:c1:68:
25:31:cc:25:05:70:e3:0f:6f:d1:9d:37:f5:5b:b6:79:e1:3f:
29:5d:4e:6f:30:95:97:a4:3a:55:df:db:4e:6e:58:7e:66:68:
38:bf:ae:82:f8:28:8f:0d:ba:16:1b:b6:82:ec:8e:ae:53:3e:
08:a5:09:91:22:4c:8e:b1:32:5a:ae:ec:33:cb:df:93:b1:21:
b4:14:29:3a:53:77:5a:6c:42:21:91:78:e0:f4:7b:8f:7e:9d:
4a:ae:be:b4:02:ec:4f:75:37:0f:13:99:ae:80:a9:c6:2c:d7:
f6:57:96:0b:4c:58:48:91:bf:d9:c6:e6:24:b8:ab:79:53:11:
19:84:56:ff:8c:0d:5f:1e:c0:d6:3d:f0:6e:3a:f4:d8:6f:45:
0c:d8:95:d5:ea:13:07:e8:6d:5a:19:8f:b5:ac:4e:81:49:60:
ff:a8:40:12:85:b5:d8:ce:b3:b6:e7:30:11:02:20:de:80:b7:
2a:d6:a0:db:b9:0a:82:6d:27:22:83:24:04:74:cb:3b:a2:66:
1c:42:59:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:04 2025 by rpki-client