Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier: 9JkOvp6Tz3+H0LAsgArhqvdtV8aWDO5rzl70EGG8jHY=
Subject key identifier: BD:4C:A1:48:EA:51:41:1A:EC:07:AD:7C:29:6C:DD:55:0A:CC:DF:12
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number: 0503
Signing time: Thu 30 Jan 2025 23:44:33 +0000
Manifest this update: Thu 30 Jan 2025 23:44:32 +0000
Manifest next update: Thu 06 Feb 2025 23:44:32 +0000
Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: WYmf6qlMonzV67Hp8u4dCZCePsH/lF4RLgRGw1FI1oM=)
2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: IVU27JRYWuBmIt6QcWFMqPFM6vDpf9nhIJBTc75GYY0=)
3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iDEEL9U9FxQCZ93LBYj286NgN76ygoYjLl0M4z8SPpI=)
4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: U7esX+0iuEFV+x7WiXgxLOpS83nYnKPDWOfbwdSRies=)
5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: OD4QLqvF0E7NjniUYIqO9yXt+jiElu9IZS+rh6A1NUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Validity
Not Before: Jan 30 23:44:32 2025 GMT
Not After : Feb 6 23:44:32 2025 GMT
Subject: CN=679c0ee0-20b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:28:91:07:ea:13:f3:7b:f3:91:d9:b5:c9:
1f:18:7d:5f:82:2e:24:4a:57:4d:ad:9f:b2:18:37:
64:45:1d:6d:b2:ba:1e:8e:ff:94:aa:e3:9f:9d:5b:
06:04:b0:23:c6:50:74:ac:08:5e:b0:8c:49:a5:63:
47:d4:ba:56:0a:c5:82:9e:ec:b8:a1:c7:bc:44:bc:
74:e9:11:65:7b:4c:38:dd:dd:65:53:77:8c:e4:24:
93:c8:c6:7d:7c:87:55:ea:a2:3a:df:ae:62:18:9d:
55:01:b2:a5:04:f4:db:5f:47:0c:66:e9:41:17:22:
d1:a2:ad:97:30:26:00:5b:af:d0:27:35:85:9c:f9:
dc:63:e6:bf:76:69:aa:ca:71:82:d2:02:dd:5a:11:
d4:e9:04:1c:a4:03:8d:78:0c:e1:05:55:db:11:ff:
2c:64:e7:61:be:85:b6:4a:38:cd:04:27:8a:fe:3e:
b4:3e:3a:4f:06:1e:d6:f9:c6:74:2f:44:7f:0d:b3:
ab:89:e0:ec:57:ca:9a:bc:c1:56:f1:a6:f6:91:65:
ca:3c:6e:cc:18:7e:24:38:8a:74:51:d3:76:20:07:
44:1e:48:19:cd:ed:61:90:05:e3:a5:9d:d3:2d:c2:
8b:a0:96:a4:ef:f4:a5:48:7f:25:6a:5e:50:ae:6f:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:A1:48:EA:51:41:1A:EC:07:AD:7C:29:6C:DD:55:0A:CC:DF:12
X509v3 Authority Key Identifier:
keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:08:0e:03:dd:3e:d7:37:98:36:9b:11:30:9c:7a:0c:e0:da:
90:c3:16:c5:f5:3b:9e:da:c7:ae:c0:b7:c4:b5:37:7b:3e:fd:
6a:a5:29:7b:0b:e0:42:06:83:f8:55:53:e7:7b:6e:2c:43:52:
b3:1a:11:cf:7b:80:6d:77:77:7c:ec:bc:de:6c:57:ef:93:ba:
cc:c6:54:40:8d:75:21:c0:45:28:fb:14:01:ad:f6:30:14:d4:
05:36:c1:98:3a:84:2a:82:0b:a6:76:e2:92:1a:62:c2:63:54:
48:3d:0e:d4:6f:65:91:f7:ca:97:0f:11:d8:ec:07:fc:1f:74:
cb:79:3a:95:b1:3f:b4:94:e8:d8:4a:47:b7:29:7d:a9:7a:67:
64:f1:2c:bc:93:51:fe:7b:6f:21:3a:bd:18:68:dd:aa:6b:82:
40:7c:93:5f:a7:2c:fd:03:e0:38:67:4a:ab:a7:61:c7:55:16:
cd:76:b8:b3:7e:e0:40:f2:ec:a5:ac:b7:8b:8e:58:4f:42:a0:
6c:cd:6b:47:33:ac:4e:2c:e7:cd:93:10:d2:02:56:56:ad:16:
2d:88:48:e2:4f:6d:08:0e:90:2c:a7:04:75:d7:41:f4:4f:1a:
0a:a9:75:de:0e:41:10:bd:dc:b0:1e:0a:0b:4d:27:c4:1f:31:
59:9f:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:53:51 2025 by rpki-client