Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
File: L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json)
Hash identifier: imv3PDk2eSTCndP6K4eKuJy39wPpqBbmJIKdBvF6RGY=
Subject key identifier: 23:58:54:08:AC:5D:DA:01:5B:E9:95:C9:8B:BE:41:CE:DD:FF:A4:50
Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B
Certificate issuer: /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
Manifest number: 0725
Signing time: Thu 30 Jan 2025 21:43:11 +0000
Manifest this update: Thu 30 Jan 2025 21:43:10 +0000
Manifest next update: Thu 06 Feb 2025 21:43:10 +0000
Files and hashes: 1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: KTJVBGqI/eai0BOrfOdvVbM9KP3J5jLM2stCY6TvO1M=)
2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: 7aqFTC0pvymz2qNJgMgOiSvmjJnWEvFpbf7HqEGVxms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
Validity
Not Before: Jan 30 21:43:10 2025 GMT
Not After : Feb 6 21:43:10 2025 GMT
Subject: CN=679bf26f-31cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:bf:51:00:2b:07:91:e3:fa:05:e1:a0:6c:
11:95:e8:1b:50:75:82:0e:af:8a:65:0a:a3:c0:e3:
af:e7:57:ad:45:52:c4:5f:5b:6f:23:df:36:ec:85:
19:82:95:71:ea:87:75:f5:b2:18:28:e1:0a:1b:8c:
fb:34:04:ec:bf:c5:e0:61:96:3c:59:a6:13:86:e3:
77:8e:89:81:85:f4:20:96:d4:e2:87:51:f2:c4:3f:
2d:98:9a:dd:94:49:ac:de:c6:68:ae:6d:e5:d6:6a:
a5:b5:9e:5d:47:7a:1d:68:7b:1d:f2:7d:73:f7:05:
8f:be:91:ac:22:24:3a:f9:1a:8d:df:38:80:95:10:
36:23:23:07:28:f4:65:a6:d0:8f:6a:73:6f:c4:f8:
c3:de:01:e9:71:7b:b7:41:d5:a6:06:94:bb:a4:e9:
dd:a4:8c:40:d7:1a:6e:fb:94:06:7e:c9:ae:c7:6a:
de:04:4e:54:a3:c1:cc:d3:ae:09:06:17:b5:63:09:
ce:31:2b:bf:a5:c9:2a:03:e3:3a:be:61:da:76:31:
72:f4:0b:9a:ea:5e:ee:ed:70:84:bf:95:81:68:13:
9f:e2:0f:dc:4f:9e:b4:53:0f:f0:2d:a7:aa:c1:ee:
5d:2a:85:f8:c0:55:2a:04:2a:3c:57:d2:28:29:5e:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:58:54:08:AC:5D:DA:01:5B:E9:95:C9:8B:BE:41:CE:DD:FF:A4:50
X509v3 Authority Key Identifier:
keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:6e:ac:72:4d:85:7e:c1:1e:bc:ee:4c:72:40:7f:60:18:
77:fd:8c:b6:f3:ba:56:5e:a0:f8:14:19:7c:bb:85:30:61:44:
97:33:0f:11:61:2c:2c:ec:aa:12:49:c2:91:0a:2d:58:01:bd:
d2:fb:f4:25:5c:f8:c9:25:0a:f8:b7:98:8a:d0:26:d3:13:1d:
8b:58:87:cb:82:01:52:46:eb:67:a5:f3:8a:b0:16:b5:ac:03:
f6:0f:3a:d0:db:78:3e:d5:ad:6e:ec:74:dc:7c:d3:80:07:e3:
af:6d:b6:f3:f4:37:6e:e1:6e:24:28:78:0e:7e:b2:4b:4f:3f:
6a:01:36:56:b2:f5:4c:d6:14:fd:26:30:38:c5:23:4b:3f:79:
5b:a1:95:ae:b8:bb:47:5f:f7:ac:97:20:22:0b:cb:53:6c:9b:
4c:f9:cd:64:a4:16:d3:b6:ad:79:59:f1:2b:96:ad:48:d2:c4:
64:9a:5c:e6:2f:27:34:98:12:55:a2:04:4f:34:ad:36:3a:9d:
7a:d3:0f:fa:b5:27:53:3f:c4:b7:c4:7b:c3:b3:34:f9:f2:b2:
27:76:15:d3:f5:79:4f:da:c4:bd:cd:b2:48:9d:bd:26:30:54:
34:89:bc:7c:4f:1b:42:22:d0:d7:37:9e:a9:63:84:a2:27:29:
66:e7:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:52 2025 by rpki-client