Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json)
Hash identifier: No9W1trcojRayAwvsQOAW0K08Kr+qCii8rl2QNphVls=
Subject key identifier: 7C:BE:9A:45:47:21:F8:47:E2:EA:04:5D:F5:E8:62:AB:BC:8F:28:2F
Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Certificate serial: 067A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
Manifest number: 0672
Signing time: Thu 30 Jan 2025 22:23:42 +0000
Manifest this update: Thu 30 Jan 2025 22:23:42 +0000
Manifest next update: Thu 06 Feb 2025 22:23:42 +0000
Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: hFdo1by4/vW9S8G1sMJ9j3/CNhNChDxRQWcDwE1h0Mg=)
2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: 8jITrnqODr3hbw+6QboJeBK8U7SJ4xuwPGHj3X5tTD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1658 (0x67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594
Validity
Not Before: Jan 30 22:23:42 2025 GMT
Not After : Feb 6 22:23:42 2025 GMT
Subject: CN=679bfbee-f77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:a8:d4:70:a0:05:89:5e:b5:f1:5d:bc:67:
4f:4d:21:46:12:0f:9a:ba:1b:dc:66:9f:cb:d5:ed:
8f:cb:14:75:db:a8:95:14:86:fa:5f:93:72:d7:59:
20:2e:0d:68:42:74:b3:fb:e4:00:e8:41:d2:02:2c:
83:3f:13:85:77:37:88:f4:b5:b7:c9:63:27:af:de:
e2:4c:f2:88:be:dc:c5:eb:40:e6:43:6f:34:ee:32:
25:31:1c:12:94:06:1c:40:60:63:33:03:3d:f3:f7:
be:3d:d6:7c:6f:ff:66:ff:e6:4c:0b:f3:e1:27:a6:
d8:00:be:a6:bc:3e:a8:8e:0a:af:fa:f2:42:ea:91:
c2:5f:0d:21:18:e6:8d:e9:83:97:2e:9d:a7:38:fe:
b5:a4:f2:28:6f:89:01:1c:56:d8:01:0c:96:92:28:
19:c2:69:38:54:69:cf:1b:52:26:cf:bc:dc:53:ca:
86:81:52:da:e4:4f:28:e1:96:69:b3:8f:ef:d4:77:
4e:46:95:65:78:fc:1a:f3:7e:81:15:eb:3b:ae:dc:
39:00:78:f7:14:be:19:f3:b9:a4:c6:d9:d1:aa:41:
02:bb:8b:c2:6c:d3:35:0a:1e:59:65:d5:ae:de:ad:
9c:58:ef:3d:39:17:9d:5b:fb:8e:5c:76:55:5a:e7:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:9A:45:47:21:F8:47:E2:EA:04:5D:F5:E8:62:AB:BC:8F:28:2F
X509v3 Authority Key Identifier:
keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:3e:de:6a:4f:28:53:51:5e:16:39:f7:1c:2d:db:5d:7c:a2:
b1:38:13:9c:02:15:7f:d0:fa:cf:4f:60:ca:bf:0d:8e:04:fc:
2a:c7:c4:32:cc:1d:e8:0f:bd:10:77:b1:a5:cd:f0:af:d0:54:
f5:35:59:fc:1c:c6:67:cf:21:8d:de:db:a4:c9:50:cc:18:e2:
ba:01:39:7d:a3:95:e7:d8:c1:5f:a1:4b:3f:e0:85:8b:cc:e6:
ef:21:52:5b:65:60:9d:0a:ff:b9:24:07:4d:dd:ae:19:06:ff:
d6:2a:a7:30:98:63:54:2d:62:75:c1:c7:3d:a6:4d:aa:21:fd:
9e:83:3c:92:70:32:5d:53:04:43:28:e1:16:a7:40:43:08:de:
9a:a1:b7:ba:a3:9c:a0:c7:e7:47:b5:b6:21:4d:55:b1:9f:6a:
8a:9e:45:df:7b:a0:c0:1b:f8:a3:af:c5:ed:84:7a:95:bb:6b:
92:e8:15:c3:81:56:18:d8:31:c6:63:38:bc:a4:fa:92:2b:ab:
ba:c3:d3:da:d1:d3:b1:40:b8:ab:b9:94:c9:4a:f8:f8:61:c1:
70:d0:3a:f5:d1:da:32:6b:2f:f2:08:fa:65:b2:64:26:79:9d:
37:75:ce:49:67:73:25:eb:e9:8e:d6:bc:8d:aa:c0:9d:79:d3:
bf:87:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:39 2025 by rpki-client