Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier: TDYEsQWFXLFqJ0YCWBbrJBaZGaGxiFlH0R8buIVuQkY=
Subject key identifier: 47:1F:E4:16:69:CC:0E:5D:12:F1:0F:C3:54:27:96:3F:6C:80:B4:4E
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number: 26
Signing time: Fri 31 Jan 2025 06:53:18 +0000
Manifest this update: Fri 31 Jan 2025 06:53:17 +0000
Manifest next update: Fri 07 Feb 2025 06:53:17 +0000
Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: edhAj/iskI3IoA0d8v+2sS0NxN3fKZ18uwjuooxP2tc=)
2: 8DBD0EBCABCA11EF984C832AC4F9AE02.roa (hash: 8Dmn7khqMXjuTQiezguWUTsHSU/EM/tHFNVuXGCGR0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: Jan 31 06:53:17 2025 GMT
Not After : Feb 7 06:53:17 2025 GMT
Subject: CN=679c735e-105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:56:47:d6:72:a1:08:40:11:0c:2e:cb:f5:
e7:2b:1f:4c:c5:6a:47:1f:bb:8a:5f:28:60:cf:69:
3f:ff:cc:d3:e6:76:fd:1b:52:bc:61:d5:ff:a6:f1:
27:4d:40:8e:a8:f8:8d:57:06:98:45:07:d5:d1:e2:
59:fb:64:70:8a:c8:ce:85:f8:33:b9:d0:e1:56:9f:
c1:ba:7d:31:98:50:72:bd:69:ac:c1:77:3d:39:77:
30:4d:70:14:05:e5:60:59:a0:36:40:0b:36:69:39:
36:ed:f8:36:17:29:e4:04:b6:60:53:c5:62:02:6a:
72:83:2f:f6:76:5b:bc:4c:a8:b7:a1:16:11:c3:8f:
f8:0b:2f:c6:b7:45:fc:8e:38:5b:fb:f2:6a:d8:91:
41:e1:c3:dc:1d:09:db:31:c6:af:42:87:59:b3:39:
6c:2d:5a:08:e3:84:ee:11:0c:b7:19:5a:b6:12:eb:
dc:46:14:97:75:1c:88:b0:e7:6b:b5:aa:f7:c0:4d:
be:c0:06:c0:25:61:4b:21:da:74:58:88:17:90:ee:
e0:58:4a:d6:0b:68:85:89:93:70:0d:4f:71:34:03:
d2:3d:22:77:a2:a2:53:e8:b1:7f:d7:43:1e:43:09:
58:21:ea:8b:1c:f7:55:bc:a8:a7:f5:b3:f5:ff:bc:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:E4:16:69:CC:0E:5D:12:F1:0F:C3:54:27:96:3F:6C:80:B4:4E
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f2:3f:cd:83:28:a9:a9:b2:0b:46:e3:4d:25:ff:69:ef:36:
3b:88:91:54:be:5f:12:75:53:e1:9f:a5:21:29:09:39:f1:15:
4d:c7:d7:1c:4b:98:78:fa:e4:a9:3b:e4:b5:d8:55:d5:7f:31:
34:84:4d:e2:22:37:1a:cb:a2:85:1d:37:3e:8f:df:81:f6:b0:
9a:db:d4:22:e5:e7:cc:69:5a:f3:f4:94:31:92:e4:d2:fb:aa:
73:e6:bc:88:b1:f4:b7:3f:db:0b:ff:11:d7:e3:99:9c:75:8b:
df:67:33:be:0c:a1:22:ca:a0:57:05:e9:8f:2c:ce:20:f5:b1:
a8:b7:25:10:13:df:3e:74:6b:70:27:a6:2c:4c:fb:a0:d0:e9:
4a:d3:57:68:2b:5b:c0:53:1e:10:eb:4a:42:e4:fc:b5:aa:f5:
58:99:40:bd:e6:2c:28:f4:bb:9b:1e:e1:d7:12:11:e5:68:c0:
00:84:8f:2f:0f:10:e0:f0:69:58:f7:a2:c2:37:9d:a0:18:77:
90:2a:35:ef:52:6d:30:07:c8:10:e9:4e:28:01:91:40:a0:c0:
a5:0d:0a:de:6e:13:38:c7:d8:5b:d0:3b:92:11:a4:53:93:4a:
49:a1:88:a0:82:a1:71:9a:a7:86:1a:d4:fe:e6:ff:27:2b:be:
6f:8f:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:22:24 2025 by rpki-client