Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier: VRFD/WFF/xKf5wmXaVVQoyVleRu737QeRBNmK2NlHNU=
Subject key identifier: F0:B4:C8:17:43:DC:31:42:9C:92:40:64:0C:2D:5F:A1:0F:2C:86:29
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number: 98
Signing time: Fri 31 Jan 2025 05:28:44 +0000
Manifest this update: Fri 31 Jan 2025 05:28:44 +0000
Manifest next update: Fri 07 Feb 2025 05:28:44 +0000
Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: xwEuQEmi4K2z16a97EYpL4X1pF58igidzqx5xjNnu2g=)
2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: VHWFb8Z2Eu6wi8MvhvaLD3Xh92wBU8OtO+jqiGApjkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Validity
Not Before: Jan 31 05:28:44 2025 GMT
Not After : Feb 7 05:28:44 2025 GMT
Subject: CN=679c5f8c-2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:61:74:91:bc:c6:9c:6a:35:a9:d1:7e:81:
e3:6e:44:c7:55:ea:06:16:65:e2:73:67:c0:e5:1a:
e9:0a:a7:2d:7e:b3:09:c2:60:19:c4:c2:dd:6d:0d:
91:60:f4:df:5c:83:ab:a0:9c:1a:ce:5c:48:5f:bf:
28:6e:14:eb:4f:7e:46:2e:54:62:3e:fa:f3:50:eb:
19:87:56:ac:d9:c3:b0:e5:81:c1:0a:e7:0d:eb:06:
c8:ea:4c:83:f0:0f:0c:e5:34:56:73:bc:6c:c0:c7:
3a:e6:6f:88:57:e0:e4:be:4b:fe:75:ef:46:e4:85:
81:b7:82:17:97:83:9e:9b:ba:40:c3:ba:c1:92:55:
5a:30:3a:e5:38:6b:70:e0:55:24:79:44:dd:82:3f:
e5:c6:8f:db:7a:6a:2d:a8:c4:59:87:f4:7a:1e:cb:
9b:bd:47:f1:16:b3:b5:aa:51:49:97:a7:cb:30:b9:
dc:82:6c:8b:03:39:4f:ed:56:db:eb:98:8e:30:ff:
af:51:20:b3:38:33:ba:5c:0d:ce:fa:f9:50:db:f1:
7f:8c:07:b6:88:dd:7e:cf:43:1e:51:db:a8:a5:78:
66:d1:13:24:71:d4:6e:d1:e9:d8:67:5f:93:2f:0e:
03:3f:f7:c5:5f:cb:00:b1:f1:13:32:72:4a:44:d5:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:C8:17:43:DC:31:42:9C:92:40:64:0C:2D:5F:A1:0F:2C:86:29
X509v3 Authority Key Identifier:
keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:24:fd:76:6f:4f:f5:1b:df:bf:84:45:c4:4d:c1:bf:fb:
f7:90:02:30:81:7c:4a:ad:fd:7d:f1:f8:59:d4:af:1f:d6:c9:
f9:19:82:89:9b:4d:fc:73:b1:a7:01:31:c6:61:f0:16:28:75:
b8:65:8f:bb:93:07:4f:24:95:0e:c1:5f:f5:bb:e0:d6:c8:1f:
cb:5a:09:9f:b1:94:9b:82:59:5f:08:4b:5a:e0:88:f7:6d:fd:
e5:55:e0:2d:a7:2e:69:5d:35:f5:3f:f9:73:2e:f6:88:f8:c8:
11:23:7a:7e:13:29:a9:0d:b6:39:5c:29:dc:8a:e5:23:db:bc:
a6:c8:07:67:9a:a5:86:70:4a:9a:9b:60:b4:64:b5:f9:2c:49:
5d:79:f5:13:ed:58:b5:0e:dd:2b:5f:89:5e:de:ab:26:75:39:
1f:32:80:f9:2c:bb:8a:18:94:16:f9:6e:b0:8a:14:f2:5e:b7:
37:34:4d:78:bb:b5:47:d7:49:1b:1d:0e:c9:4f:24:24:79:0c:
58:19:b3:f3:29:74:4a:1a:df:7c:70:9f:ed:b5:2d:6a:31:16:
74:dc:74:6e:b5:3f:2c:4f:67:d1:af:48:db:95:44:f9:9a:55:
ff:6f:6c:8a:69:7d:bd:88:f5:c4:c9:d4:d6:5e:f6:91:83:46:
f1:32:98:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx
MTlEODIzMkYwHhcNMjUwMTMxMDUyODQ0WhcNMjUwMjA3MDUyODQ0WjAYMRYwFAYD
VQQDEw02NzljNWY4Yy0yNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2GthdJG8xpxqNanRfoHjbkTHVeoGFmXic2fA5RrpCqctfrMJwmAZxMLdbQ2R
YPTfXIOroJwazlxIX78obhTrT35GLlRiPvrzUOsZh1as2cOw5YHBCucN6wbI6kyD
8A8M5TRWc7xswMc65m+IV+Dkvkv+de9G5IWBt4IXl4Oem7pAw7rBklVaMDrlOGtw
4FUkeUTdgj/lxo/bemotqMRZh/R6HsubvUfxFrO1qlFJl6fLMLncgmyLAzlP7Vbb
65iOMP+vUSCzODO6XA3O+vlQ2/F/jAe2iN1+z0MeUduopXhm0RMkcdRu0enYZ1+T
Lw4DP/fFX8sAsfETMnJKRNUl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC0yBdD
3DFCnJJAZAwtX6EPLIYpMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4
QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ
SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBemST9dm9P9Rvfv4RFxE3Bv/v3kAIwgXxKrf198fhZ1K8f1sn5GYKJ
m038c7GnATHGYfAWKHW4ZY+7kwdPJJUOwV/1u+DWyB/LWgmfsZSbgllfCEta4Ij3
bf3lVeAtpy5pXTX1P/lzLvaI+MgRI3p+EympDbY5XCnciuUj27ymyAdnmqWGcEqa
m2C0ZLX5LEldefUT7Vi1Dt0rX4le3qsmdTkfMoD5LLuKGJQW+W6wihTyXrc3NE14
u7VH10kbHQ7JTyQkeQxYGbPzKXRKGt98cJ/ttS1qMRZ03HRutT8sT2fRr0jblUT5
mlX/b2yKaX29iPXEydTWXvaRg0bxMpgB
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:08 2025 by rpki-client