Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json)
Hash identifier: mgrQ+8pkRn8XOJaYVu3GgfHwjL/L5lu5FmN48NBWgNs=
Subject key identifier: 85:71:CC:70:F6:BC:64:78:B6:7A:18:64:DC:45:79:69:63:26:E4:92
Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Certificate serial: 252F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
Manifest number: 2520
Signing time: Fri 31 Jan 2025 15:45:59 +0000
Manifest this update: Fri 31 Jan 2025 15:45:58 +0000
Manifest next update: Fri 07 Feb 2025 15:45:58 +0000
Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: j52qdL2/48r68GmfpsNilT1Cyynp/HuyRGpXt28Kxkw=)
2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: H+wCANBD5klfwreCxJGeJ4oz5YqLeKbiWBpEUR9/a3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9519 (0x252f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1
Validity
Not Before: Jan 31 15:45:58 2025 GMT
Not After : Feb 7 15:45:58 2025 GMT
Subject: CN=679cf037-83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:96:09:37:4a:b2:f0:02:c4:54:76:d4:90:
ba:94:d3:f1:2f:62:80:10:77:21:ee:c8:c3:cd:be:
b3:ad:ca:1d:55:d1:d3:e0:38:6c:ee:84:fc:76:36:
32:2f:57:77:bd:aa:98:78:21:32:df:e1:67:aa:b7:
98:f7:98:33:13:b3:87:53:18:e0:b6:47:02:3a:9c:
e6:10:9b:da:33:bc:58:30:36:0a:fd:dc:b1:01:49:
4e:bb:8e:c3:ad:f8:e8:e6:48:66:52:8b:eb:e7:18:
8e:bd:e1:6d:02:b3:9d:92:0d:18:a7:95:ad:25:8b:
e2:8d:f5:d1:06:28:a0:f0:3e:44:f1:9f:c6:f9:e3:
85:2c:c9:f8:bf:51:a8:7c:cb:8e:4d:12:6c:23:e4:
37:8b:88:90:3e:94:c2:e2:1e:3a:49:cf:9f:0a:76:
23:1e:4d:8c:f6:7c:59:cc:2d:96:5d:6a:20:77:6f:
d0:43:9e:6c:1a:d5:67:e9:41:b0:25:b9:ce:46:6d:
08:f4:35:1f:02:27:b7:98:b0:6b:07:a9:67:83:de:
d6:b2:bc:98:39:49:6c:0a:5b:e9:74:eb:90:bb:fd:
82:a0:c8:ef:9a:0c:d1:60:9e:6f:61:7a:f4:04:c9:
4e:b1:8a:71:e7:6a:19:0d:f0:a1:af:d6:4c:d7:e8:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:CC:70:F6:BC:64:78:B6:7A:18:64:DC:45:79:69:63:26:E4:92
X509v3 Authority Key Identifier:
keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:ab:1b:51:8a:07:58:27:a0:03:ec:af:ef:1f:a0:11:19:68:
e3:db:36:9d:6e:86:b5:76:84:36:4e:55:d0:83:31:d2:80:50:
c2:7b:ad:dc:e7:e3:5a:64:d7:11:99:ad:76:cb:10:d8:d5:70:
76:36:2e:19:71:9a:88:db:03:34:a1:b9:7e:b1:92:8a:2e:c7:
d8:6b:74:7e:74:40:f8:2a:ee:30:9c:d6:4e:52:99:5d:62:1f:
c7:1f:c2:b0:49:b3:89:c2:7a:58:6d:b0:f1:14:47:c3:1c:d5:
e3:94:92:9c:e5:a6:3c:0d:00:fd:38:a0:6e:c1:61:4d:5c:13:
97:d0:55:4f:0b:92:cd:f0:4b:ef:a9:e7:bb:9d:ec:1d:10:72:
74:1d:08:55:42:3c:db:6e:ce:95:e7:9a:10:9b:f4:da:1d:d1:
97:9c:c1:ff:08:ce:65:2d:c7:10:f9:37:b0:df:d1:74:b1:bc:
3d:d8:ad:ca:07:3d:6b:c1:eb:2d:d1:c5:0c:4c:e2:3f:9e:49:
55:64:56:75:d9:06:72:d4:83:c2:1c:cf:2f:1d:90:cf:39:21:
7c:46:23:54:93:f1:5a:6f:6b:03:28:a5:7c:70:a1:08:bf:aa:
23:67:6b:a6:b4:f8:7b:2f:f5:40:99:98:e3:d2:8d:d8:f0:c5:
b5:64:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:12 2025 by rpki-client