Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier: 11nOdiqsP8dPZNKw8Og+TdWg5GszODMt9kvGEVDvpXY=
Subject key identifier: 25:A9:56:FC:03:5F:23:42:C4:7D:FC:99:94:9D:59:22:99:16:24:D6
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number: 018B
Signing time: Fri 31 Jan 2025 02:49:52 +0000
Manifest this update: Fri 31 Jan 2025 02:49:51 +0000
Manifest next update: Fri 07 Feb 2025 02:49:51 +0000
Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: HKGIvcGT4rDnc70cfHDLLc7KNGGVibsmOBbFIhin6qo=)
2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Jan 31 02:49:51 2025 GMT
Not After : Feb 7 02:49:51 2025 GMT
Subject: CN=679c3a50-00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:ec:a1:d3:89:cb:20:4c:d3:51:b2:a9:84:
31:c2:70:98:43:ea:1d:9c:3c:dc:e9:16:1b:9e:f2:
97:e6:b0:39:47:ca:55:7c:a8:a1:e9:95:80:dd:eb:
dd:7b:26:f9:a1:7e:65:ba:3f:76:1e:90:70:73:a7:
ed:37:ae:3b:d2:e4:3a:7e:83:82:37:15:bf:51:d6:
a9:f2:9d:0d:68:2c:16:bc:cd:81:77:58:9c:ca:ba:
cb:e4:c9:b9:dc:61:99:a8:b5:42:62:48:f3:02:4e:
ea:8e:f7:ed:4f:a6:08:5e:75:68:9c:6f:83:bc:72:
a0:cf:7f:f3:9e:63:c7:ce:52:ce:73:6a:aa:59:65:
4c:d2:cd:6d:de:47:bd:3b:32:78:26:99:a2:df:61:
78:e0:85:e0:33:1d:1e:6b:66:ac:c2:b3:b6:e8:8a:
6f:79:02:d3:69:c4:d2:f3:cb:a0:5f:51:64:b3:ac:
db:0b:ca:52:6e:4f:4a:99:ca:40:b3:72:e9:81:d5:
2e:b3:cd:ca:1c:2b:07:2c:d6:70:46:d2:5a:bf:c8:
b1:d7:1e:4e:b3:5d:89:4d:a7:27:d7:16:45:a5:67:
c5:7c:a5:5a:8d:0d:05:52:b0:e4:6e:7d:5f:65:ae:
26:7f:00:d1:1e:09:c2:f9:d4:64:3f:a0:7d:41:70:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:56:FC:03:5F:23:42:C4:7D:FC:99:94:9D:59:22:99:16:24:D6
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:94:b6:92:ff:40:f7:c8:21:97:87:b3:c5:50:c8:da:39:
e3:d6:64:a5:d9:7d:a8:67:c2:a2:20:f8:b3:f2:7d:b2:28:ee:
c7:e4:9c:9e:66:53:57:9e:60:37:0e:e6:94:82:71:be:98:b5:
df:8d:52:f0:63:95:08:16:44:d1:e6:59:dd:c4:5a:74:be:90:
88:43:ab:75:00:5a:e3:45:81:fa:f6:94:9c:c7:1d:64:6b:19:
f0:ad:ee:6f:c4:29:d3:e0:ad:de:10:0d:10:19:a7:42:ba:4a:
2a:ae:13:aa:4f:e0:0b:a1:23:41:af:52:54:b4:d2:4e:c6:df:
2a:a8:47:d9:79:b0:e4:5b:73:2a:e9:0f:11:7f:9a:83:09:c2:
d6:4b:c2:3f:4b:41:a6:81:eb:dc:de:3b:b6:e9:59:98:d8:7a:
9e:d7:f1:3d:26:d2:8a:64:e6:fb:fd:b4:27:d0:48:a4:b6:3b:
81:13:e1:ba:ed:5d:b9:d8:30:ea:8d:6a:80:59:11:dc:89:b0:
d7:2f:b2:11:de:97:03:9a:de:6d:d7:92:ec:8f:a5:bc:cb:3d:
fd:03:59:ed:c9:03:9c:b3:de:b6:4e:48:7a:43:b5:fb:38:2a:
d9:ba:98:30:a3:0f:9a:c7:45:1f:dd:f7:52:02:4a:00:43:27:
75:72:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:53 2025 by rpki-client