Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json)
Hash identifier: Uwa/+N/dbA8FFahMwqEF9LAMlTMlPW1M68VbgAD8e/c=
Subject key identifier: 7C:4C:20:06:AC:52:52:E2:BD:82:5C:69:A7:B7:3E:12:4C:BE:C4:9F
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial: 344B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 15:21:05 +0000
Manifest this update: Fri 31 Jan 2025 15:21:04 +0000
Manifest next update: Fri 07 Feb 2025 15:21:04 +0000
Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: 9Hs6ECyP1DPaO1x3yLzaCgyMGe2tgZ4Nyeb25Hjj88A=)
2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: QaQ5tb2HeArxrs87I/5ZhVBteyAtirQGpvcsd5zF3kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13387 (0x344b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Validity
Not Before: Jan 31 15:21:04 2025 GMT
Not After : Feb 7 15:21:04 2025 GMT
Subject: CN=679cea61-60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:bf:85:f5:80:42:36:61:c4:ee:ea:65:14:
d6:94:9b:e0:95:50:69:93:1b:fb:b9:33:4b:0b:ce:
d3:3f:02:ef:6a:ad:26:e8:bc:d1:1b:10:76:1d:fe:
33:de:b0:53:01:74:79:b4:9b:8e:86:7a:11:bd:be:
9a:09:76:7d:66:ff:59:f0:27:2c:e6:62:fc:74:16:
9f:8b:8b:1a:38:de:11:35:01:72:f9:f7:98:97:43:
ca:f7:b9:97:80:45:5c:1d:4f:77:64:22:51:59:89:
a1:82:84:0e:c3:d0:91:e8:7f:b7:08:06:92:0c:71:
04:2a:65:a2:24:c4:8b:09:59:8c:96:99:7d:e4:3f:
80:75:1f:27:6b:96:ba:9e:d5:f6:43:61:e3:95:7a:
8c:f4:b9:96:2a:05:8b:e4:59:de:28:33:5f:eb:ad:
22:a2:8c:13:3b:de:da:07:a2:2d:a4:2d:e2:ab:cb:
c0:74:62:9d:da:35:72:0d:7b:ea:e9:7c:07:8d:18:
fd:ef:b2:b7:21:00:43:f0:bb:bb:51:5c:85:b0:29:
c9:52:5d:80:b0:60:ac:6d:da:26:ad:b3:57:1d:e0:
ef:a2:5f:69:7e:a9:4f:e1:b1:77:5a:fb:5b:0d:0a:
3c:b3:f1:60:38:d3:a2:37:fa:ce:1a:62:7b:1d:aa:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:20:06:AC:52:52:E2:BD:82:5C:69:A7:B7:3E:12:4C:BE:C4:9F
X509v3 Authority Key Identifier:
keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:15:af:66:1e:f0:a7:01:e7:4f:83:d0:c6:c9:1d:7d:4b:2a:
84:66:f1:7a:79:42:6b:ba:44:d2:d8:87:76:8c:60:24:1f:72:
04:1f:d8:87:1f:e0:aa:13:98:22:a0:e0:93:8e:b6:0d:97:af:
e3:eb:12:52:a9:8f:c8:e8:ba:b8:88:aa:dc:f7:d6:aa:fb:8d:
fb:b6:5a:83:85:83:5e:06:af:22:f4:63:13:76:27:89:2e:08:
d8:29:61:db:d3:91:8a:67:16:60:f5:d4:f0:60:c1:f2:a3:ae:
5d:94:1c:8f:fa:c6:9c:d5:56:f0:59:2e:66:48:6c:de:e9:d3:
cf:47:46:8b:9c:a4:b0:12:78:e8:80:75:5a:51:97:5f:6c:c6:
62:a1:88:68:23:b0:44:08:e6:67:ee:58:bb:f9:c1:dc:7f:fd:
cb:cc:3f:97:60:c5:df:87:56:be:16:0a:42:48:75:cb:62:d4:
7a:44:83:b4:61:d7:77:9e:ed:cc:b8:8e:9c:23:ec:6e:07:8c:
38:0b:71:88:bc:dc:8f:14:65:f9:ac:35:1a:d1:b9:06:20:46:
a3:f4:83:cb:dc:1e:05:0f:e4:d4:b3:2a:a7:9b:8d:b1:50:62:
9c:e5:fe:b4:d1:0e:b0:2c:ac:82:da:97:ef:88:ce:78:86:99:
1e:8e:f5:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF
MDg5ODg3MzQwHhcNMjUwMTMxMTUyMTA0WhcNMjUwMjA3MTUyMTA0WjAYMRYwFAYD
VQQDEw02NzljZWE2MS02MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Fm/hfWAQjZhxO7qZRTWlJvglVBpkxv7uTNLC87TPwLvaq0m6LzRGxB2Hf4z
3rBTAXR5tJuOhnoRvb6aCXZ9Zv9Z8Ccs5mL8dBafi4saON4RNQFy+feYl0PK97mX
gEVcHU93ZCJRWYmhgoQOw9CR6H+3CAaSDHEEKmWiJMSLCVmMlpl95D+AdR8na5a6
ntX2Q2HjlXqM9LmWKgWL5FneKDNf660ioowTO97aB6ItpC3iq8vAdGKd2jVyDXvq
6XwHjRj977K3IQBD8Lu7UVyFsCnJUl2AsGCsbdomrbNXHeDvol9pfqlP4bF3Wvtb
DQo8s/FgONOiN/rOGmJ7HarniwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxMIAas
UlLivYJcaae3PhJMvsSfMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE
QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ
TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDcFa9mHvCnAedPg9DGyR19SyqEZvF6eUJrukTS2Id2jGAkH3IEH9iH
H+CqE5gioOCTjrYNl6/j6xJSqY/I6Lq4iKrc99aq+437tlqDhYNeBq8i9GMTdieJ
LgjYKWHb05GKZxZg9dTwYMHyo65dlByP+sac1VbwWS5mSGze6dPPR0aLnKSwEnjo
gHVaUZdfbMZioYhoI7BECOZn7li7+cHcf/3LzD+XYMXfh1a+FgpCSHXLYtR6RIO0
Ydd3nu3MuI6cI+xuB4w4C3GIvNyPFGX5rDUa0bkGIEaj9IPL3B4FD+TUsyqnm42x
UGKc5f600Q6wLKyC2pfviM54hpkejvXW
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:16 2025 by rpki-client