Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json)
Hash identifier: b+RTiFdUwPmdwpHGP25P/a0DOe3hQdbdsmkFoLblK1c=
Subject key identifier: 6E:F7:FB:83:0E:82:62:4C:0B:F3:2C:CF:2A:00:70:8F:F4:72:29:C8
Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
Manifest number: 0485
Signing time: Fri 31 Jan 2025 01:17:44 +0000
Manifest this update: Fri 31 Jan 2025 01:17:44 +0000
Manifest next update: Fri 07 Feb 2025 01:17:44 +0000
Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: bwmrYj8FglyaiGRleeZP1wDsRInha9BHeRW8DM/upMc=)
2: C310EE5AACD311ED84BAA06EC4F9AE02.roa (hash: NPYNnjaBYs2qmRUfu8/y0KOBedXU4EghxnWja8r1cbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6
Validity
Not Before: Jan 31 01:17:44 2025 GMT
Not After : Feb 7 01:17:44 2025 GMT
Subject: CN=679c24b8-e8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:38:80:11:23:4b:36:5d:ed:19:6d:1d:46:
ef:3d:fa:a1:b2:5b:0d:44:cb:c9:33:66:5f:95:32:
bc:be:52:2f:bf:53:7e:1b:53:97:eb:99:ce:62:64:
20:fa:76:89:31:7d:9e:5f:64:24:52:d5:00:03:f5:
ff:f4:af:97:17:3c:2c:70:6d:d2:17:cd:7d:14:ee:
64:a9:24:7b:08:32:66:3a:9b:68:37:57:fa:8b:6c:
bd:4b:a6:5f:32:e5:30:50:3a:43:4b:8e:5f:1a:88:
6d:7c:1e:52:67:0a:42:98:fa:1d:08:04:5c:ae:6a:
94:ad:fe:7e:82:1f:a0:6c:45:47:6b:11:90:8a:19:
3e:af:3f:18:3c:40:59:79:34:32:80:7e:49:52:64:
7f:a3:f3:6d:8c:3f:82:52:2f:62:1f:2a:25:69:af:
84:73:51:aa:f5:3f:d4:da:1a:20:c5:57:8d:bd:fe:
eb:7a:d0:30:db:d4:0e:89:67:a0:31:c8:8e:48:83:
2c:6b:c3:e4:41:ca:e9:d1:70:52:5d:6f:d0:58:1f:
83:81:b8:ef:8c:69:9f:f1:02:b5:13:bd:14:8d:e9:
f2:25:16:59:11:bf:c3:c5:ad:fd:71:48:32:10:db:
2a:83:1a:8f:02:04:28:f0:2b:b5:88:5b:65:e6:28:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:FB:83:0E:82:62:4C:0B:F3:2C:CF:2A:00:70:8F:F4:72:29:C8
X509v3 Authority Key Identifier:
keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:c0:53:37:74:91:57:17:9a:49:6e:ba:f0:e4:5d:8d:b1:
de:23:a1:a2:a8:8e:d3:68:c6:f6:b3:21:94:47:a4:4b:7a:3c:
cc:18:8f:45:2f:84:32:75:4d:cd:92:0a:06:f5:ef:42:b1:48:
86:66:a4:90:30:c3:fe:12:2f:c9:47:94:02:c1:d0:b5:c7:23:
99:b9:eb:ad:ad:1e:7b:55:3d:b2:9a:5f:c7:07:5c:f3:7a:4b:
3c:82:eb:71:af:ba:3d:11:1b:4b:ad:25:d5:9d:90:89:66:8b:
cd:59:82:67:6b:8f:4b:c6:17:93:71:e5:0f:dc:4a:dc:c7:0e:
a7:39:75:1c:2c:41:dc:1d:43:08:93:8b:d0:1a:80:41:6f:46:
c2:74:33:c6:42:df:6c:38:e3:8d:06:4e:a1:68:23:d4:36:74:
df:21:bf:0f:91:63:1c:21:8e:a6:d1:67:7c:2b:e0:01:f4:24:
25:68:07:3f:1c:c6:25:fb:86:2b:f9:59:47:ce:e1:f7:d3:7c:
9c:7b:af:92:0a:0a:6a:b4:44:dc:6a:8a:69:36:b2:b8:8f:8f:
fa:6b:17:e8:00:7f:25:21:2a:9a:2a:e9:28:1c:ee:c2:a1:5f:
af:f4:d0:ba:af:49:da:d2:a1:93:b6:d8:d5:8a:4f:78:c7:b3:
0e:9c:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:56 2025 by rpki-client