
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json)
Hash identifier: nW7AYG7HPHg6pYTshot81N7fJFscrrLS1dknPX6Zz/4=
Subject key identifier: 0D:2A:B7:31:B2:67:14:41:16:65:D5:5A:A6:25:4D:94:8A:6A:A0:69
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial: 0A4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
Manifest number: 0A3A
Signing time: Thu 30 Jan 2025 19:50:32 +0000
Manifest this update: Thu 30 Jan 2025 19:50:31 +0000
Manifest next update: Thu 06 Feb 2025 19:50:31 +0000
Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: jhdAT5PM/Ib+M7RBVeYWLZu7IjykclkvyLC07RerN8Y=)
2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: 5TpXg41XhGRSVvUHK5XRVEgpyHLz9AA+kgJTUOprqi0=)
3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: TRrnPYrOalEPWz9T5KXn22gUrdAbwDlWLGBn2HbQ6ag=)
4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 2Lal6Hihil8XYkgrg/1JrJLddglMRFIWSjh8Zg5doPM=)
5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 29WR9bK+1J7teRj22ZLgNx6ODw6+LHNBzuwuJrvhB0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2638 (0xa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Validity
Not Before: Jan 30 19:50:31 2025 GMT
Not After : Feb 6 19:50:31 2025 GMT
Subject: CN=679bd808-e29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:58:43:bb:3d:b3:cf:ab:ce:90:ff:8c:26:
23:f7:72:75:bb:63:c1:e7:7a:e5:fa:d4:cb:6a:71:
f9:9b:37:ad:b3:67:1c:c4:ce:e5:44:c8:a2:08:6e:
b3:de:e3:85:11:37:b1:e3:b7:51:02:18:4c:f3:3d:
86:21:5c:fa:a0:48:b5:90:e4:36:5c:25:a3:01:25:
bc:c9:55:37:83:3f:b0:23:68:8d:19:b4:15:c4:0b:
74:06:b0:29:47:55:5e:72:d7:a6:3a:8f:63:d0:df:
10:0e:fc:0d:ea:9e:cf:10:e9:b9:c7:87:3f:02:09:
3d:96:59:0b:3a:28:ea:e0:de:64:58:eb:d6:15:74:
46:f8:86:de:27:6f:f6:85:fc:2a:89:44:e1:9e:bd:
dc:0d:d7:90:92:c3:cd:77:14:96:0d:fe:63:df:59:
cc:33:92:29:57:08:b2:40:2c:32:c4:43:77:ca:96:
1f:95:bb:c7:6b:5a:ed:ab:49:50:42:91:52:59:78:
64:26:76:b7:7b:a4:c0:4a:63:17:6b:0e:11:5c:86:
53:5b:07:9f:5b:bf:17:98:7c:91:60:7b:9c:3a:80:
85:0c:99:13:ff:f7:e6:88:db:ea:b0:b9:42:66:df:
68:6f:41:3c:ee:62:52:db:4a:56:8b:b7:c1:36:5e:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:B7:31:B2:67:14:41:16:65:D5:5A:A6:25:4D:94:8A:6A:A0:69
X509v3 Authority Key Identifier:
keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:b2:bc:8e:a4:02:a6:a2:69:86:7a:a3:70:74:0e:80:79:
a2:d0:f1:43:5c:3d:98:ea:00:81:7d:5c:c3:7c:34:a6:f5:5e:
17:43:68:87:fa:b9:17:05:8b:4a:0e:6b:2d:16:15:f2:b3:a5:
ba:90:4c:42:66:be:ef:3c:0a:bc:3e:90:44:7b:81:65:e8:74:
09:e8:9e:2c:eb:95:b6:20:9d:81:29:2d:9d:c3:83:d1:0e:a9:
e7:54:30:49:d1:01:69:99:d5:b8:ee:99:a6:c2:49:0d:8b:73:
9a:6e:d9:eb:41:d6:c4:23:ee:01:f6:06:bc:e5:c9:18:79:47:
a8:b5:f4:8b:ba:17:1b:14:b1:c5:ff:85:db:b2:d9:f9:39:71:
6a:71:3b:b1:bf:56:ca:72:15:eb:7c:c7:64:30:00:00:fe:6c:
2d:3b:40:1b:97:84:9b:7c:53:20:56:69:1c:27:4f:a4:cd:cc:
d1:95:2e:6e:fc:94:63:81:13:e6:ef:2b:54:99:da:89:c6:3b:
fb:b2:e3:de:d6:05:7d:ff:ba:6e:fa:1c:78:d0:ea:0c:93:cc:
5d:cf:9a:38:9a:58:c3:b0:9b:8b:61:f4:66:23:39:cc:99:77:
79:b6:20:5a:b3:2c:b3:86:be:6e:fe:53:fb:60:c7:d7:34:6c:
af:11:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:44:58 2025 by rpki-client