Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json)
Hash identifier: 2SQpoSCK3gzXYLaU4tyz8aGIOtMeB3nx8Vt/wuvfzjE=
Subject key identifier: B5:32:26:EC:53:D8:97:7E:29:04:7A:1C:9B:9B:74:94:12:C1:98:F7
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0B03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
Manifest number: 0AED
Signing time: Thu 30 Jan 2025 19:24:31 +0000
Manifest this update: Thu 30 Jan 2025 19:24:31 +0000
Manifest next update: Thu 06 Feb 2025 19:24:31 +0000
Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: o7ZMbRTFON9yEHoJzwczzxF0eh55UlsBJ+w4HtGfWDk=)
2: B76E518A1ED011EFAB39482AC4F9AE02.roa (hash: JZVX1mYWxvx3DuiFZY84uw6rWyCqk7v0HK2SQQP29l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819 (0xb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Jan 30 19:24:31 2025 GMT
Not After : Feb 6 19:24:31 2025 GMT
Subject: CN=679bd1ef-9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:38:48:17:78:73:26:b6:69:c6:b3:05:02:
ec:27:a1:14:d2:36:a3:8c:b9:e8:9c:0c:fc:d9:77:
8a:92:b6:16:87:99:e1:38:dc:d7:7b:f0:97:a3:27:
ae:f5:29:5b:29:06:00:d5:94:67:34:ef:82:a4:d4:
7a:f9:63:37:fd:46:5a:86:28:69:e6:43:e5:ad:67:
2c:af:1c:34:a8:2b:2f:36:ad:43:b9:14:28:f2:b5:
f4:98:61:8f:26:48:4b:a4:c4:28:cc:ac:0e:82:2a:
22:f7:d2:aa:1c:3c:b5:c0:54:fd:8e:eb:f7:08:17:
60:11:5e:fd:be:64:09:77:02:d3:ba:e5:77:ff:fe:
eb:ef:dc:dc:85:b6:25:9d:24:7b:05:d7:f2:a1:3b:
80:50:a9:16:00:fa:01:58:33:dd:80:96:ae:6b:c7:
51:6d:da:30:b1:f0:7e:d3:2a:76:ca:42:a6:6e:1b:
6f:b6:78:a0:ae:69:9b:b7:58:44:c8:cb:8c:9a:31:
da:69:bc:fb:e1:4b:7c:c1:80:8f:95:58:22:85:5e:
55:8b:5b:d0:f2:30:60:b3:bd:ac:6e:72:16:9c:5c:
8e:30:22:fb:34:d4:87:33:c3:a0:c9:dc:19:76:66:
c0:cf:4d:19:3a:df:06:15:35:5c:51:65:e1:99:f5:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:26:EC:53:D8:97:7E:29:04:7A:1C:9B:9B:74:94:12:C1:98:F7
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:11:75:f4:d9:5f:c8:1d:55:23:68:61:31:b6:ae:bf:23:85:
ab:70:70:2a:ac:3e:71:78:45:c3:8e:99:8d:3c:bb:c6:5a:9d:
28:b2:d8:62:27:66:13:53:66:bf:d9:c4:e1:2c:37:92:9a:4e:
92:d4:29:01:dd:27:a0:27:ac:c3:43:87:30:bb:d3:fc:71:ef:
f7:59:41:8d:3e:3f:f8:5a:0a:cd:0a:b6:0d:85:91:e4:28:13:
ee:d8:3b:f4:6b:56:a1:4b:2c:b6:5c:36:fa:aa:8c:3a:9a:91:
36:ce:88:db:c7:b2:7d:7f:83:9e:52:91:dc:06:8e:83:75:91:
72:b5:cf:c7:2a:6e:06:f2:a1:81:e6:e8:f9:84:f1:3d:78:cd:
00:86:05:b9:8c:f5:da:cc:e9:fd:b1:7f:e1:23:7f:5f:02:ca:
e9:7b:b6:b3:f0:68:bb:5e:25:55:f0:67:8e:35:2b:e2:bb:20:
64:78:3e:a1:18:a7:64:cb:a3:32:b5:e0:b9:c9:a2:6a:07:e7:
01:4e:10:3b:58:e5:ec:01:c1:08:22:bc:4d:8f:b0:8f:a6:8c:
2a:7c:0a:40:2c:4e:c8:50:88:77:1a:1b:66:35:ef:80:32:e8:
09:5c:f6:b4:d0:43:d0:53:b7:be:bb:68:67:ee:c9:b6:cc:1c:
db:9a:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:41 2025 by rpki-client