Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json)
Hash identifier: /QiJ9SFnqQILspKT2dmbBcZePUqF3fJoe4R0b79us4w=
Subject key identifier: EA:AD:16:A9:03:14:FA:A4:67:EE:4C:4E:40:90:C6:2D:BC:0F:77:1D
Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Certificate serial: 06E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
Manifest number: 06DC
Signing time: Thu 30 Jan 2025 21:59:26 +0000
Manifest this update: Thu 30 Jan 2025 21:59:25 +0000
Manifest next update: Thu 06 Feb 2025 21:59:25 +0000
Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: WrX6UG1j3DNGt/U967m6OwvSEZdR+kskiUJhkHZN0HE=)
2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: u4f2AhOEZ5LsFTZIbA/6gU0UEmVk6N2OiqEjoSnMP5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Validity
Not Before: Jan 30 21:59:25 2025 GMT
Not After : Feb 6 21:59:25 2025 GMT
Subject: CN=679bf63d-3786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:11:ea:42:39:07:27:d7:07:09:b8:7a:49:
3c:65:1e:8f:bd:96:13:3f:1c:7e:d3:76:d9:7b:21:
3f:5d:4c:1a:a8:52:db:05:bf:43:6a:58:d6:10:22:
2e:23:1b:d7:e7:fd:2b:07:5f:47:c2:36:ec:8f:56:
20:84:58:2b:a5:ba:f1:e4:f3:cf:77:1c:6d:9b:9c:
9d:89:68:5b:2d:07:26:fa:10:c5:39:f2:44:c4:bd:
28:0f:db:6c:50:80:a4:f9:a5:82:09:85:69:cc:8f:
03:91:91:9e:72:85:fc:0c:ac:38:45:9a:81:33:10:
86:4a:38:45:e5:04:4c:0a:d3:17:c4:fb:99:7c:8a:
d5:06:96:73:57:b8:ff:5c:81:9d:4c:43:21:f9:8e:
e6:bb:a7:97:6d:7b:0f:d2:7b:05:cf:09:a9:01:f7:
6c:2f:e2:6b:5b:c8:7c:8a:3e:1f:6f:33:5b:71:d8:
1e:e1:a6:c1:b2:18:67:6b:75:38:36:e7:3a:60:81:
34:a1:8e:51:d4:87:83:a8:b9:52:54:56:84:ea:95:
49:5b:c5:8a:b7:b6:22:80:a8:9a:31:ac:a4:91:0a:
9c:00:1d:63:d4:60:ac:4f:6b:be:6b:96:cc:c0:cb:
2d:53:a4:be:34:de:68:59:a2:cc:66:69:4b:99:3b:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:16:A9:03:14:FA:A4:67:EE:4C:4E:40:90:C6:2D:BC:0F:77:1D
X509v3 Authority Key Identifier:
keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:a8:5b:18:d6:26:14:c8:8b:fc:33:9d:1d:25:01:59:ac:26:
56:92:99:9f:89:ff:ff:1e:51:3d:70:d5:15:03:a7:8e:6c:2a:
a6:c9:78:1e:9e:48:bd:5e:bb:04:45:5b:fb:65:84:48:6d:55:
f3:54:24:1b:ba:88:33:de:5e:c6:2f:b4:51:00:d0:5e:16:7e:
79:11:5a:e1:f7:86:aa:67:02:53:38:11:56:92:f3:98:55:43:
1a:00:82:dd:97:55:03:4e:6d:13:5c:12:b1:95:46:d2:55:99:
26:10:43:72:5c:95:2b:ae:07:91:11:ce:61:90:a2:b7:52:39:
ed:89:2c:12:e3:88:5a:67:1d:a4:e1:06:c9:9e:4f:4c:bd:26:
9c:84:32:25:24:4e:f5:fe:45:99:06:bf:27:cd:b7:c1:cf:8a:
f9:c7:3d:a2:44:24:29:93:b8:4a:55:de:78:f6:72:37:e1:82:
81:07:4c:09:e3:b6:7e:c6:e3:9d:9d:9f:3a:2c:04:3a:51:eb:
7c:66:78:97:2b:65:f2:b2:14:9a:4c:28:6d:fb:62:45:c4:85:
4a:b8:d8:bc:88:49:64:47:a2:0b:9c:63:ba:a6:be:55:a0:b6:
39:8d:73:59:a3:2e:72:b7:77:2c:bd:53:67:e3:fc:b4:6c:0d:
b6:32:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:00 2025 by rpki-client