Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft (raw, json)
Hash identifier: fm71+L+AVfLMvMcd9XCxP2+OkcW3HjNjehbKZZM2PV4=
Subject key identifier: 91:A8:D4:F8:08:69:37:6E:EB:90:1F:AE:6A:38:A3:39:2F:21:ED:FF
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Certificate issuer: /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
Manifest number: 019D
Signing time: Fri 31 Jan 2025 02:33:21 +0000
Manifest this update: Fri 31 Jan 2025 02:33:20 +0000
Manifest next update: Fri 07 Feb 2025 02:33:20 +0000
Files and hashes: 1: LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl (hash: DFJ5OjppkfTveLDUkTHtQWqra4DIdlU1QMc2M1dexIU=)
2: 552D155464A711ED99D40117C4F9AE02.roa (hash: vqnq1ln0jacCM48xfrENGgLrWxqslFbyB5Snj9ZJdaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Validity
Not Before: Jan 31 02:33:20 2025 GMT
Not After : Feb 7 02:33:20 2025 GMT
Subject: CN=679c3671-d6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:d6:81:f8:c7:1d:31:97:be:27:5d:d2:54:
6a:a3:91:8a:8d:ea:87:2c:63:b7:27:84:34:ad:6d:
33:43:7b:42:5c:6e:82:3b:05:1b:a5:21:40:d0:0e:
ff:6f:db:2f:89:31:d3:98:7e:b8:17:d5:10:78:8e:
2c:dd:a5:e6:eb:45:29:16:fe:ed:a9:2b:0a:32:78:
b0:47:8e:da:dd:38:e8:76:5e:06:e9:28:9b:d2:7e:
ec:27:08:44:bd:d4:2e:86:ba:0d:00:e0:f6:7c:85:
a9:6a:d4:88:e8:08:98:c6:bc:c6:af:9a:97:02:ca:
64:ed:72:20:23:48:eb:d3:d7:80:94:13:67:f5:7b:
5a:29:d9:21:44:83:88:6e:32:65:3a:85:49:30:b2:
d3:37:91:24:f4:03:0d:40:24:96:e8:f5:fe:3e:04:
ef:d2:86:a3:eb:51:57:48:b9:dc:c1:f3:63:d9:da:
56:ae:1e:c0:b6:92:9e:8d:c5:d1:28:4b:c3:ae:e9:
f3:6a:1d:2d:0e:c7:17:7f:c6:f6:6d:59:3d:fa:7e:
1a:49:10:e8:05:58:f8:65:59:a2:84:24:d9:92:83:
69:97:9c:d7:81:03:e5:c8:aa:67:4b:33:cd:7e:5b:
ae:de:c9:54:e4:7f:c5:d2:cb:65:c0:d1:e2:fd:16:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A8:D4:F8:08:69:37:6E:EB:90:1F:AE:6A:38:A3:39:2F:21:ED:FF
X509v3 Authority Key Identifier:
keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:98:91:37:8a:45:67:94:88:a8:ea:46:62:38:f9:a2:3b:b2:
20:6b:77:b3:d7:a4:4d:e4:8c:25:61:d8:ee:cd:6b:0e:46:bb:
b8:2f:63:6d:c2:f4:e6:49:02:4c:e1:50:8c:06:ae:24:e8:a4:
12:5e:d4:7a:19:a3:ef:b8:f5:9e:cb:83:59:45:52:36:e6:c5:
97:4b:00:b5:65:9a:60:40:3d:31:e3:00:bd:66:69:ca:75:85:
f0:06:8f:67:d9:6f:14:46:2c:16:9d:97:99:e4:0e:0a:59:af:
8a:74:f6:cc:17:de:87:70:65:b1:08:20:d7:d3:f6:b5:e4:ac:
13:15:ff:81:c2:27:68:d6:57:d0:7a:46:61:35:2d:e4:de:34:
0c:fa:83:8e:54:d0:03:97:d0:9a:64:f3:9a:c8:a1:ac:eb:e1:
89:b6:45:16:32:1e:68:b8:f9:25:8c:48:f3:81:c1:2c:61:16:
d4:53:17:bd:46:d6:1d:d1:34:90:b8:19:9b:58:90:a1:43:70:
08:f1:e8:c2:78:4c:b1:b1:9a:1c:bf:61:3a:b3:80:9d:77:35:
e1:94:ec:ab:ba:c2:89:93:42:99:90:79:f3:ed:8c:5d:0f:83:
91:16:87:2a:02:4c:b7:03:85:ba:34:3f:c9:bc:6f:41:83:4d:
a9:43:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:25:42 2025 by rpki-client