Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json)
Hash identifier: X1AFYXcPeRDNyojYArDiGFjQx82F2QLnp72ZX59PUYg=
Subject key identifier: 98:41:50:CF:05:4F:62:DE:D1:51:A4:A7:CE:88:8D:38:A3:CA:84:7E
Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88
Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688
Certificate serial: 3467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
Manifest number: 345B
Signing time: Fri 31 Jan 2025 14:52:28 +0000
Manifest this update: Fri 31 Jan 2025 14:52:28 +0000
Manifest next update: Fri 07 Feb 2025 14:52:28 +0000
Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: JlroU/Xi5iJkyi5N2rGJAR7r8oojh6WaIH6Li1KSbDc=)
2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: 5UVYc1gM3pcN5MyLC+3d2F4QJ6pH7wnclugT6lLmPzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13415 (0x3467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688
Validity
Not Before: Jan 31 14:52:28 2025 GMT
Not After : Feb 7 14:52:28 2025 GMT
Subject: CN=679ce3ac-8e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:15:44:6c:70:1d:29:3e:9e:cf:5d:b0:0e:
0e:cf:77:eb:3d:cf:78:7f:c2:03:fd:31:95:0b:6c:
b0:7d:95:a4:ca:b9:d3:73:ff:8f:31:20:1c:71:7d:
57:f1:eb:b3:35:80:1f:7d:41:1a:51:6b:c0:11:23:
b7:be:a9:dd:e3:69:69:57:d8:97:44:ec:00:61:37:
bc:be:8e:74:ec:1c:df:e9:82:97:b8:a8:e8:e8:88:
92:c8:83:e3:4e:c8:90:90:a4:9c:24:04:7c:48:4d:
ba:11:4e:c8:0c:a6:47:d3:80:f8:07:d1:3a:31:5d:
40:27:52:f3:38:d6:a0:96:b2:26:75:53:40:43:a0:
13:a8:99:16:19:55:d5:87:f3:83:89:5e:cf:b5:8b:
46:d0:ec:15:26:6c:fa:7e:7c:f2:74:ea:d4:26:c4:
65:43:4f:47:68:c2:07:97:61:05:11:98:19:5e:c7:
3f:ec:cc:74:ea:6f:6e:c4:ca:31:4f:5f:9e:61:00:
ea:03:05:bf:e2:4a:64:e8:ab:75:55:0c:3f:50:3b:
07:18:de:21:71:cf:c2:2a:99:c0:28:b6:cd:2a:72:
1b:a8:b5:34:2d:27:46:c9:b7:22:f8:ee:fa:a9:9b:
aa:9b:40:62:c6:b8:93:be:94:de:d4:ad:99:75:96:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:50:CF:05:4F:62:DE:D1:51:A4:A7:CE:88:8D:38:A3:CA:84:7E
X509v3 Authority Key Identifier:
keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:62:b8:a1:5e:fa:47:85:21:7d:92:1c:16:e7:2b:b2:55:
b9:ed:8a:1d:23:cb:75:79:a1:85:a6:be:40:79:69:f2:d0:f4:
54:c5:fe:48:c0:5c:dc:6f:63:9c:08:ec:c5:c3:3f:ac:5f:46:
ac:0b:4d:19:8b:0e:71:0d:4e:d4:d4:25:a1:64:98:40:5e:63:
71:c8:d8:2c:eb:8b:67:a2:2f:de:4d:b1:17:ad:7b:f8:3f:a0:
5c:53:a3:ae:e7:ea:a5:e7:8d:56:a0:6f:52:9a:e6:38:89:6a:
2f:3c:04:b7:cf:d0:31:ed:2a:0a:2d:10:02:45:79:c2:59:5e:
82:b5:cd:bc:7e:50:7c:cd:b1:a7:74:57:a8:6a:d9:97:9b:f3:
01:2c:ca:48:d6:ac:dd:74:25:62:4f:8e:86:34:20:45:03:b4:
fa:4b:9a:52:9b:d3:d2:04:65:d8:eb:d3:66:05:ae:d7:a8:3e:
f3:ad:b9:c8:46:ca:06:95:ed:5e:12:0c:b7:7f:f2:ca:ab:55:
5c:64:9d:3b:18:73:11:82:2f:25:29:2d:76:5d:c7:de:30:69:
67:5c:b0:62:38:da:44:54:76:ff:26:63:98:f0:1c:1c:53:ac:
40:26:61:23:d3:e1:0d:ab:e1:26:07:ea:e8:07:d0:f3:5b:da:
b1:f2:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:14 2025 by rpki-client