
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier: ENk/DniA5bOFxnlfqUmxg0nNkHaKeLyq1Yq19ihvVvc=
Subject key identifier: 44:8D:73:AD:BF:38:FE:4C:EF:C6:59:0D:CE:3A:BC:21:61:F5:08:F6
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 18:34:43 +0000
Manifest this update: Fri 31 Jan 2025 18:34:43 +0000
Manifest next update: Fri 07 Feb 2025 18:34:43 +0000
Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: XB9YBzQcs5mA/yRuZtsPG2iUtz/qyRBnUDDEUS0+SIE=)
2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=)
3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Validity
Not Before: Jan 31 18:34:43 2025 GMT
Not After : Feb 7 18:34:43 2025 GMT
Subject: CN=679d17c3-0cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:4a:83:ae:8f:82:86:0f:46:37:18:99:ad:
86:bf:83:a0:a1:9e:f3:6f:76:a5:44:3d:26:18:34:
ca:69:dc:0f:3c:6f:6a:41:f8:ec:4c:7c:c4:4b:f1:
1c:86:8a:3c:c7:d6:31:51:6a:aa:05:97:a1:22:91:
07:55:1f:f4:57:7f:2e:b5:98:4a:da:a2:bf:05:7e:
06:90:4d:33:4a:42:47:b5:ca:4f:9b:1e:e3:ed:c9:
df:b2:66:ab:ab:06:47:ff:99:ce:e3:e2:2f:3f:db:
ae:c2:0f:c5:dc:9f:e4:0c:2a:0e:d3:8b:cd:24:5a:
31:20:b1:a8:69:df:19:2c:aa:f0:52:42:99:63:83:
ab:11:40:23:23:56:1a:77:f9:bb:9e:20:fd:7c:3c:
09:4e:0a:c4:75:8a:97:a9:62:6c:7a:79:48:f1:9e:
ed:79:86:b1:1c:a9:1e:8c:85:31:1b:15:7c:40:02:
e6:ac:07:fc:f5:e8:85:cc:e1:a8:9b:94:1c:aa:6d:
25:23:7c:ea:b5:4e:93:15:d0:9f:9d:b8:9f:15:51:
eb:f2:01:5d:5e:fe:5d:c5:0e:7c:e8:2a:c0:5c:33:
b5:25:72:0e:aa:b8:a2:1f:90:ef:35:9d:1c:ef:67:
b0:e1:e0:da:7c:b1:32:2b:5e:4d:84:4c:6b:f8:a4:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:73:AD:BF:38:FE:4C:EF:C6:59:0D:CE:3A:BC:21:61:F5:08:F6
X509v3 Authority Key Identifier:
keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:31:c9:a6:79:0a:30:b7:4c:d5:9b:f4:3f:7a:5b:11:6d:d1:
cc:8a:71:f9:25:e1:d1:dd:81:b1:d3:f8:dd:87:e5:08:83:9d:
4e:c2:4d:3d:91:8c:cd:9a:b8:9e:6b:40:84:83:1b:b7:ca:c0:
0c:b0:b3:29:f6:d8:0b:91:b6:54:65:87:16:20:ff:85:08:87:
50:db:8a:25:38:dc:c7:f3:49:b9:10:ec:2f:74:0e:32:6f:0c:
59:55:d6:8b:c2:01:01:e4:ab:3f:5e:ef:31:58:ec:c0:25:39:
f3:74:d8:54:cb:e0:fd:b3:40:06:c4:b0:b9:9d:2b:69:8e:e2:
8f:13:b0:7b:10:3a:98:72:4e:04:ec:49:6f:c1:b1:7c:fe:b1:
e1:e8:49:e4:e8:e7:d1:5c:b4:a7:b6:a0:25:e6:67:0c:7d:45:
3f:43:af:40:7d:f8:87:53:db:58:d0:1c:44:0a:82:7a:41:f6:
26:78:31:b8:9e:74:ec:de:64:61:80:92:c3:84:af:34:46:27:
c8:2c:ff:6d:1d:06:c3:6d:b6:f3:05:a2:34:43:d0:e9:56:5b:
0a:9a:48:28:4d:50:62:4a:e0:6e:f9:68:56:91:f7:d5:bb:5e:
44:23:5f:fb:89:ec:b3:b8:7c:89:35:d9:ed:ab:06:32:e1:43:
a6:ef:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:51 2025 by rpki-client