Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json)
Hash identifier: MwEqX/Jdul/wJpXN1kzDttEbzM9W+2wvD7dzp1bkBWE=
Subject key identifier: B3:22:AB:C7:20:DB:92:76:FC:A6:89:D4:56:8D:2A:F6:E9:1E:AF:70
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 07:16:29 +0000
Manifest this update: Fri 31 Jan 2025 07:16:28 +0000
Manifest next update: Fri 07 Feb 2025 07:16:28 +0000
Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: AEt89a3A+TFoeqFCd3tsYN3B+G/pAIuvhWKFTNpYDys=)
2: 78F169A4DD3611EF95C91540C4F9AE02.roa (hash: 3844VvzQ3rK5bYUtvprhDMOXyi2B25paUWSe2A5eois=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Validity
Not Before: Jan 31 07:16:28 2025 GMT
Not After : Feb 7 07:16:28 2025 GMT
Subject: CN=679c78cc-480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:be:58:14:7e:53:4e:f1:86:74:40:16:1a:
43:5e:5b:2e:e5:25:db:ec:5d:35:3a:b7:48:ef:f9:
fd:4e:03:e6:33:22:4e:c5:f3:2d:c6:39:a4:82:09:
05:f8:2d:6e:ca:5e:38:f9:f2:d3:76:96:70:b1:8a:
1e:a2:5e:76:07:60:1f:2a:3d:bb:da:8f:21:5e:57:
9b:31:04:9f:b2:95:97:52:76:1c:41:b3:21:28:7e:
d0:a5:fd:bf:c8:3f:6b:d4:93:28:ec:64:d3:76:c6:
63:e1:3d:89:82:15:b1:04:12:d0:d7:ac:f5:1c:a9:
e8:44:c0:ce:e1:f1:c2:b5:c4:47:6f:8d:72:0f:a6:
23:a8:7d:af:e5:8d:5d:27:b2:27:85:55:98:e4:aa:
80:c1:0f:bf:e8:e6:f4:3b:84:8c:41:55:43:c3:fe:
d4:13:74:aa:14:c6:2c:11:bf:a8:cc:46:58:39:ba:
02:c0:2d:49:fb:ea:18:c4:92:5e:4e:d1:87:d0:73:
8f:ef:49:aa:42:ff:57:d7:92:97:99:75:9d:94:66:
81:f7:a8:1f:a5:7c:27:61:be:53:b6:1d:c6:c9:9f:
f3:6b:05:b8:3e:78:e2:8f:85:50:fd:51:03:00:9a:
f8:c7:4a:ae:bf:c9:0a:1b:96:58:b8:04:92:36:77:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:AB:C7:20:DB:92:76:FC:A6:89:D4:56:8D:2A:F6:E9:1E:AF:70
X509v3 Authority Key Identifier:
keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:68:37:e3:4d:c9:1e:36:dc:32:8d:78:52:30:ce:8c:da:fe:
96:fb:ec:34:5f:ae:0e:a9:fa:4f:72:84:2c:a6:42:e9:4c:6a:
d0:84:55:f5:67:b6:09:2f:32:9d:4c:f7:1e:83:99:14:75:36:
09:82:02:3f:30:6d:1d:b0:28:9c:26:cf:c1:89:f2:eb:51:bf:
ef:54:4a:92:94:e8:14:b4:fe:99:cb:b2:98:e1:e5:0b:bc:ba:
06:3b:48:a5:9c:96:74:9d:84:df:33:d1:83:2a:96:3c:e1:85:
c9:ee:fc:76:0c:88:c1:e7:10:a2:1c:0a:31:86:08:21:65:31:
d6:9b:9e:d0:2b:2a:42:21:a0:3d:16:f9:3d:a7:4c:88:95:5e:
94:18:a1:03:f2:f0:0e:30:6b:35:ff:f1:63:37:d6:56:bb:84:
46:d7:97:cd:6d:2e:38:14:9d:0f:b7:50:1e:7a:fe:e3:49:89:
38:7b:fa:0b:e4:0e:21:af:40:10:c6:28:79:4e:3a:1f:65:b9:
58:2f:2c:06:96:70:09:5a:44:62:7d:e3:f4:2c:f4:fc:d6:d3:
d4:f3:d1:40:32:e9:db:cc:74:44:6d:98:b4:1b:76:ae:f9:a7:
60:c7:e3:81:20:62:18:e1:76:17:e2:f5:c8:7b:fe:4e:60:6d:
43:88:fe:e0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTY0ODExMC8GA1UEBRMoMkMxQzA3RDE1MTI3MTk2OUUxM0UxQ0ZEMTYxQjFGNjA3
NzBFMjkwRDAeFw0yNTAxMzEwNzE2MjhaFw0yNTAyMDcwNzE2MjhaMBgxFjAUBgNV
BAMTDTY3OWM3OGNjLTQ4MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKob5YFH5TTvGGdEAWGkNeWy7lJdvsXTU6t0jv+f1OA+YzIk7F8y3GOaSCCQX4
LW7KXjj58tN2lnCxih6iXnYHYB8qPbvajyFeV5sxBJ+ylZdSdhxBsyEoftCl/b/I
P2vUkyjsZNN2xmPhPYmCFbEEEtDXrPUcqehEwM7h8cK1xEdvjXIPpiOofa/ljV0n
sieFVZjkqoDBD7/o5vQ7hIxBVUPD/tQTdKoUxiwRv6jMRlg5ugLALUn76hjEkl5O
0YfQc4/vSapC/1fXkpeZdZ2UZoH3qB+lfCdhvlO2HcbJn/NrBbg+eOKPhVD9UQMA
mvjHSq6/yQoblli4BJI2d0PpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsyKrxyDb
knb8ponUVo0q9uker3AwHwYDVR0jBBgwFoAULBwH0VEnGWnhPhz9FhsfYHcOKQ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NjQ4LzIxOEYyNjhBREM5
RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tR
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTEJ3SDBWRW5HV25oUGh6OUZoc2ZZSGNPS1EwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1
NjQ4LzIxOEYyNjhBREM5RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1du
aFBoejlGaHNmWUhjT0tRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFpoN+NNyR423DKNeFIwzoza/pb77DRfrg6p+k9yhCymQulMatCEVfVn
tgkvMp1M9x6DmRR1NgmCAj8wbR2wKJwmz8GJ8utRv+9USpKU6BS0/pnLspjh5Qu8
ugY7SKWclnSdhN8z0YMqljzhhcnu/HYMiMHnEKIcCjGGCCFlMdabntArKkIhoD0W
+T2nTIiVXpQYoQPy8A4wazX/8WM31la7hEbXl81tLjgUnQ+3UB56/uNJiTh7+gvk
DiGvQBDGKHlOOh9luVgvLAaWcAlaRGJ94/Qs9PzW09Tz0UAy6dvMdERtmLQbdq75
p2DH44EgYhjhdhfi9ch7/k5gbUOI/uA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:09 2025 by rpki-client