Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json)
Hash identifier: HYaC8hmKEyzmb41opQpoju+C2FWTzGOSX1/M7zWNmJw=
Subject key identifier: 36:33:89:C7:AE:89:15:C6:70:C4:9C:3A:C9:64:A2:61:31:52:05:0F
Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Certificate serial: 05F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
Manifest number: 05E7
Signing time: Thu 30 Jan 2025 23:01:36 +0000
Manifest this update: Thu 30 Jan 2025 23:01:36 +0000
Manifest next update: Thu 06 Feb 2025 23:01:36 +0000
Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: 1gfgzZw8qekWj1dAzb7f42yDXg+yUs4fbwAx8b/pouk=)
2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: YhkBn/J1JdTWK5hPkNAkFpEw4Az5dw82JJQnUVEN+2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Validity
Not Before: Jan 30 23:01:36 2025 GMT
Not After : Feb 6 23:01:36 2025 GMT
Subject: CN=679c04d0-0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:c3:8e:d4:43:36:f2:3a:41:ba:8d:5a:36:
88:be:c3:3f:2f:68:c8:ea:6c:f2:57:b6:33:dd:24:
8e:87:7f:cd:e7:7b:d6:d6:7b:2a:10:02:08:2b:3c:
e7:68:8c:40:99:66:ee:1e:94:9b:c8:98:49:55:f4:
19:36:20:c6:98:2d:14:a1:68:9a:97:f6:5d:56:3d:
d3:d9:0c:5c:ed:69:dd:4f:80:bd:bd:e9:4a:e2:32:
2b:6d:b0:96:9f:ad:43:95:af:6a:bd:ce:f7:06:74:
ce:7e:ba:7c:75:a9:fc:2f:52:27:f1:97:d1:88:aa:
20:22:46:bf:a0:bb:19:95:fb:a3:f2:2c:a8:18:a5:
b6:f3:ea:63:5a:2b:a2:a3:e7:85:92:50:17:8a:14:
8c:af:3e:c5:2c:c3:36:e9:9a:5e:f4:dd:e7:1a:7f:
ef:33:c5:75:55:15:f7:48:d1:d8:d6:2e:8b:21:de:
34:01:38:41:f4:a1:03:10:17:35:79:91:3b:af:81:
96:3c:ac:4c:68:f1:a2:1b:64:f0:15:69:ab:ca:21:
67:1e:0a:a6:ef:78:4c:68:ef:87:74:1d:5d:03:9e:
ec:31:3f:b3:6e:3f:03:a5:33:bd:8e:97:e0:8c:50:
50:9e:99:e8:c7:58:35:c5:fc:47:a2:23:61:ab:4d:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:33:89:C7:AE:89:15:C6:70:C4:9C:3A:C9:64:A2:61:31:52:05:0F
X509v3 Authority Key Identifier:
keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:9b:87:72:cb:3e:c6:53:71:c3:1d:5c:01:3c:74:2e:22:6f:
f7:74:06:76:e7:14:f1:8c:3c:14:70:60:de:69:17:52:3a:dc:
e1:15:1b:f8:6a:a8:88:5b:57:1c:37:bb:f4:39:10:2f:12:3d:
ed:6e:bf:11:d5:96:04:ed:ec:e3:08:77:6d:12:84:c0:62:ab:
35:45:29:d0:5b:d3:c1:78:28:21:da:77:02:f3:4f:8b:8a:f9:
7a:f7:7f:8d:bf:73:3b:c1:4c:b3:8f:87:d6:89:79:20:32:fc:
13:38:c2:49:56:88:41:06:ad:45:7b:9a:60:a8:9e:c5:5a:4a:
4b:33:a5:ea:76:23:df:ae:63:34:76:fc:7f:36:6d:5d:1b:59:
26:19:c0:c1:30:75:0a:3e:98:08:ff:af:c3:2e:14:ad:da:78:
7c:96:ca:cd:05:68:80:bc:fb:5a:09:35:c0:00:6f:1a:09:52:
93:95:a0:5d:b8:42:30:e0:6f:8f:12:6f:7b:1a:c0:3b:a5:3f:
ec:af:87:53:5f:82:f5:60:49:e7:dc:d0:1f:b7:3d:ff:48:1d:
19:7b:16:d9:2e:0a:08:e4:f8:b5:fe:e5:81:b8:9e:69:c0:71:
f9:f4:6e:f3:eb:1e:e8:6e:f9:5f:63:c0:cc:ef:aa:4a:da:9b:
93:aa:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:12:04 2025 by rpki-client