Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json)
Hash identifier: JEaBFkBoOC5qf4hLI+Kzshs7ksh0vyTAj6kH1HzwoJk=
Subject key identifier: 4A:E1:B1:25:3C:B6:23:AB:8F:34:A1:AA:08:43:AD:B1:1C:72:27:2E
Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44
Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244
Certificate serial: 03A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
Manifest number: 03A7
Signing time: Fri 31 Jan 2025 00:45:29 +0000
Manifest this update: Fri 31 Jan 2025 00:45:29 +0000
Manifest next update: Fri 07 Feb 2025 00:45:29 +0000
Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: pFfBxys24JZ3JZntm9kxbFy9ze9Z3Hs8m83o9PeLkZw=)
2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: tkOHoIczvR2mvnPtwO2I6CTO8JqQ7Ha6TbdyLv7Jiak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244
Validity
Not Before: Jan 31 00:45:29 2025 GMT
Not After : Feb 7 00:45:29 2025 GMT
Subject: CN=679c1d29-5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:7a:59:ea:23:17:93:1b:1b:1d:d6:8f:da:
ad:da:d6:95:cf:d8:d1:de:e9:42:a9:fa:b0:c4:ca:
d0:41:37:a9:79:9b:e8:2f:d3:16:71:f5:ca:3c:ee:
34:cb:f9:96:0d:75:47:dc:fc:d3:62:9d:28:ad:62:
c3:d9:ad:91:48:73:72:1b:95:7a:8c:0a:28:a2:89:
7f:57:96:ad:43:8a:0f:f7:b3:70:5d:32:77:79:7e:
91:50:86:e1:72:98:f2:53:c3:35:74:f1:49:72:e6:
6a:2c:6f:fe:4f:86:90:1e:a6:67:d9:30:8b:12:67:
78:26:eb:a0:63:33:e2:16:6e:bd:28:4e:8a:69:1f:
38:69:66:b0:34:ce:0c:10:16:d4:ce:f1:2a:76:c7:
a2:9e:a6:ec:c9:65:95:05:9f:54:7f:e9:d9:6d:f5:
98:3f:ed:04:36:be:7b:d5:b7:24:ad:90:3c:73:38:
d9:9c:4f:5b:93:13:69:1c:27:7c:d6:6d:3d:a2:c2:
15:32:1f:c3:90:4f:a4:2a:8c:86:c4:cf:e8:51:24:
e6:40:ce:01:f7:51:6b:ba:16:c4:fe:7a:a0:f3:23:
33:72:e3:33:5c:d9:bc:fd:fa:89:86:26:b6:5f:85:
5b:7f:43:87:a8:3e:9d:ac:11:c9:4f:11:67:9e:41:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:B1:25:3C:B6:23:AB:8F:34:A1:AA:08:43:AD:B1:1C:72:27:2E
X509v3 Authority Key Identifier:
keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f9:6b:7b:db:86:8e:7e:6c:fb:41:68:d5:80:e8:f3:da:e1:
fc:98:2c:43:b5:d9:dd:e0:4c:26:f5:c9:2f:87:69:cb:26:55:
5d:d2:93:49:be:e3:b9:ab:7c:fc:ee:8e:66:00:e2:7c:09:a7:
f3:5b:16:c7:d6:46:8a:11:86:cc:b9:cf:a9:26:09:73:9f:98:
18:a7:8f:46:ad:93:11:8f:2e:c1:1f:2a:a1:46:8e:98:6f:d1:
52:a9:e8:58:ad:2a:f3:02:95:a9:0c:7c:23:a0:68:41:29:fc:
e9:74:67:83:84:75:93:69:dd:9d:3e:5f:a8:42:74:78:a7:c6:
4d:07:f9:51:f7:65:92:c1:3a:2e:59:f2:8c:1b:bd:46:2e:24:
c8:28:da:16:3b:5c:b5:1a:89:ca:20:b0:7f:28:c7:6c:6f:c2:
fa:22:57:d7:ce:35:c7:a6:fd:90:2a:d7:3a:d2:19:02:c1:d4:
c0:e0:d6:25:63:6a:2e:ea:68:9c:a4:f9:49:e1:76:5f:16:52:
e8:54:50:11:30:6c:78:a4:52:ae:78:0b:1f:10:f3:44:e5:18:
e4:65:f1:8d:e6:2f:21:55:38:13:26:86:5f:f3:47:97:a3:d3:
d1:79:89:02:60:4b:08:22:25:60:a8:e4:3b:d2:80:ae:c8:c4:
db:98:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:13 2025 by rpki-client