Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
File: l_lzn2QJyHWu4cSbtpqnQ882YRs.mft (raw, json)
Hash identifier: uVmEiwFXSiQ88Rx8Yjt4hQbaOs1H/Uml2H8ECGM8TJc=
Subject key identifier: DA:20:BC:DA:2A:41:87:D3:B5:0A:BF:72:BD:85:0F:06:29:58:2B:42
Authority key identifier: 97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B
Certificate issuer: /CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B
Certificate serial: 0E0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
Manifest number: 0DFF
Signing time: Fri 31 Jan 2025 17:49:12 +0000
Manifest this update: Fri 31 Jan 2025 17:49:12 +0000
Manifest next update: Fri 07 Feb 2025 17:49:12 +0000
Files and hashes: 1: l_lzn2QJyHWu4cSbtpqnQ882YRs.crl (hash: Itz68/j7koaJ7oSDZdtpAc9zlW437FRTY/hnrPegBOA=)
2: 06FD60AAA8CE11EBBD4DB90DC4F9AE02.roa (hash: fNpUJmaY/58+uPHYwxaUVKQVkJ1Z1JQOjKMefzdFE80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3596 (0xe0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917047F/serialNumber=97F9739F6409C875AEE1C49BB69AA743CF36611B
Validity
Not Before: Jan 31 17:49:12 2025 GMT
Not After : Feb 7 17:49:12 2025 GMT
Subject: CN=679d0d18-854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:15:19:d9:94:a4:16:20:54:49:a1:40:e2:
00:4e:50:e7:ce:fc:ea:20:18:e4:f9:9f:fe:53:1c:
89:6a:2a:9e:fc:49:59:7c:b1:65:9c:83:88:72:01:
6a:e1:27:3d:7f:cb:1f:ff:18:ad:6c:65:49:8a:66:
06:c1:87:b9:15:ff:63:85:ed:73:80:14:ef:16:84:
7c:4e:b7:6a:f1:03:20:28:21:31:c2:d4:3a:40:df:
18:99:61:81:4d:53:18:14:04:ad:d0:14:5b:53:60:
1f:55:83:27:47:1a:d7:6f:17:9b:1c:c1:7f:e5:4e:
b5:6f:3a:39:d4:6c:a2:a1:be:46:d1:45:04:7f:6e:
c7:71:3b:2f:86:3e:77:84:23:9e:e8:7c:be:2d:ec:
2c:ee:78:32:b0:fc:40:bf:71:d9:af:a4:b2:86:bf:
62:d1:00:01:be:53:74:3b:8c:73:91:16:83:3e:0b:
97:78:ff:6e:77:0c:52:b0:d5:08:42:e0:3f:19:c3:
99:c4:d9:ad:c8:a1:05:40:2a:e7:c5:9f:f9:39:2e:
76:4e:8c:0d:9f:7f:95:00:a1:34:58:85:84:10:9a:
6c:bb:51:41:45:46:bc:f8:43:ec:9d:78:4a:d0:36:
94:02:27:da:52:c8:70:d6:4f:60:55:c6:9d:d1:53:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:BC:DA:2A:41:87:D3:B5:0A:BF:72:BD:85:0F:06:29:58:2B:42
X509v3 Authority Key Identifier:
keyid:97:F9:73:9F:64:09:C8:75:AE:E1:C4:9B:B6:9A:A7:43:CF:36:61:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_lzn2QJyHWu4cSbtpqnQ882YRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917047F/FD72DE14A3A911E99F75777BC4F9AE02/l_lzn2QJyHWu4cSbtpqnQ882YRs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e5:86:8e:f6:49:a7:56:ff:f9:6d:e5:a6:78:3d:34:3b:31:
15:b6:65:33:fe:82:85:b7:0e:18:cb:48:07:30:7c:29:86:37:
1c:67:2a:fb:75:03:a1:11:d2:3a:19:d3:67:84:0b:8d:9e:2c:
5f:5f:57:df:d8:d5:33:4e:d6:92:67:e9:1e:9d:77:75:57:ae:
75:90:1b:8c:60:ac:71:03:80:f4:9e:c5:4a:6d:da:3a:d6:24:
c8:8d:73:f2:c2:39:8d:fe:62:ef:e2:8a:bb:0b:81:c5:17:2b:
ca:e9:c9:5c:10:5e:87:a4:63:5b:8a:37:1e:4a:80:9b:65:f5:
19:8a:5f:ea:82:a5:8c:5b:24:16:56:3e:e7:ac:74:65:6e:68:
d9:f0:a7:e1:a5:ff:e8:90:29:ef:80:ac:22:30:f2:07:58:0c:
9a:a1:ea:6e:aa:22:90:14:c2:55:c2:25:01:da:30:61:47:8f:
e9:26:f0:8f:b2:b9:e1:00:08:60:e6:d8:06:d6:34:23:8c:26:
8f:0b:75:a9:dc:33:be:c4:b3:08:f2:ad:f1:c8:de:0e:90:1c:
0d:8d:ab:4c:37:fc:3e:67:9a:87:be:03:b4:de:5f:db:86:1f:
0c:99:dc:1d:6f:a7:9e:89:99:10:21:55:6a:d0:17:84:ba:61:
ac:7a:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:21 2025 by rpki-client