Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json)
Hash identifier: cSeuXGKOVW5N9kOSXbNS6MgXu+h5d8LszZHcLFcgNOk=
Subject key identifier: 35:1F:2B:68:E7:FF:6E:C9:B7:A1:52:E3:66:39:03:8F:44:5D:B4:30
Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
Manifest number: 01F7
Signing time: Fri 31 Jan 2025 02:13:14 +0000
Manifest this update: Fri 31 Jan 2025 02:13:14 +0000
Manifest next update: Fri 07 Feb 2025 02:13:14 +0000
Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: vE1aB6uk1/jzsgDYX2oUg4n0g6NOYTfM/+mJntlrn4I=)
2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=)
3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A
Validity
Not Before: Jan 31 02:13:14 2025 GMT
Not After : Feb 7 02:13:14 2025 GMT
Subject: CN=679c31ba-9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:70:95:9f:35:e8:ed:9f:54:29:c2:e0:0f:
f8:42:3d:f8:84:14:b0:13:be:48:34:bb:38:7f:28:
7b:39:e1:ef:df:49:ea:8d:5b:d4:4a:00:88:61:9e:
ef:3c:7e:e4:38:84:20:4b:45:7e:5d:04:c9:3d:b1:
54:e2:2b:7a:7a:16:ae:64:59:40:98:c3:9f:8f:0d:
a6:4a:73:df:42:00:c3:19:ec:e4:aa:79:62:60:92:
b2:82:d7:f8:f5:b2:ac:0e:96:bf:bf:08:8f:7d:2b:
ab:04:20:e0:5c:24:da:bb:da:47:69:87:a9:9c:ce:
75:9f:1f:06:1d:97:70:bd:9e:5d:e2:83:df:f4:79:
a7:0c:c9:78:d4:8d:9f:ca:ed:0c:a9:a1:ee:63:5b:
d4:32:b3:0d:fc:ab:d8:53:3d:61:81:7a:da:dd:12:
5b:7d:b3:2a:42:f7:e0:e4:01:4b:ce:31:29:20:52:
f7:82:ac:e2:10:b0:71:6b:08:f6:75:c0:b2:85:ad:
2f:a3:20:4a:1f:cf:a7:1d:06:ca:36:8b:b1:f5:31:
d5:45:9f:db:94:9e:a1:8d:df:b6:8e:5a:31:b4:ea:
32:3a:8f:7e:22:18:f2:c9:e5:4a:5d:61:41:2d:e4:
a3:63:e0:16:99:eb:3f:54:6e:04:1f:13:6d:54:8e:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1F:2B:68:E7:FF:6E:C9:B7:A1:52:E3:66:39:03:8F:44:5D:B4:30
X509v3 Authority Key Identifier:
keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:39:52:db:23:ce:f9:a0:4b:ff:60:06:97:f3:16:b5:2c:0d:
27:74:c0:6c:42:f6:53:24:c5:7e:21:f4:0a:07:01:71:1d:a6:
cd:2f:43:14:d0:bc:e5:a2:b0:5a:dc:dc:b4:3e:fb:24:ef:42:
8d:da:7b:d9:cc:68:a7:f7:77:e9:65:cf:ed:de:c3:d2:7c:e8:
b7:6f:ed:d3:3c:59:a3:68:31:52:e2:bf:95:08:9d:33:15:a3:
67:04:2b:16:56:7e:61:fe:59:95:90:7e:92:88:ed:01:5e:d8:
df:f1:59:0f:ff:b7:d6:1c:9c:ac:92:41:41:c7:e7:1c:93:db:
5a:88:5b:f7:72:0f:7d:26:7b:26:98:30:d6:86:74:60:5b:94:
cf:59:6f:b4:af:3f:70:e1:c5:cf:07:4b:20:59:ad:c8:32:27:
2d:c7:e4:9b:14:41:35:1e:72:9d:57:9f:1f:1b:93:9d:e7:0f:
3d:47:50:73:03:9f:9a:eb:f7:f0:ba:68:70:9a:eb:6d:46:41:
ff:c1:7f:e1:b8:bf:0d:7f:e4:c4:2a:2e:79:a8:5e:a7:52:95:
e4:8d:0d:18:13:a1:ca:b1:8a:f2:02:1b:ad:8d:a5:f0:1f:9d:
06:3c:45:fd:4b:43:29:b2:1b:30:7e:00:54:c6:b8:5a:d6:5b:
04:1c:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:28 2025 by rpki-client