Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier: 76pIthTM5lcusvqzry8qh2FHtQ6SCkLMg5Kg7wGZboM=
Subject key identifier: 93:C9:9D:4C:E0:33:86:28:FA:DB:C7:22:88:F8:DE:83:BF:B5:96:C6
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0959
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number: 0954
Signing time: Thu 30 Jan 2025 20:17:13 +0000
Manifest this update: Thu 30 Jan 2025 20:17:12 +0000
Manifest next update: Thu 06 Feb 2025 20:17:12 +0000
Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: Teohsy7Pvwmq111sY1UorQgnHEi8Sf4Z8/5i73tVUBQ=)
2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: N+jthyTGVjfvL/quxUMUol5Q7xnLJ/R/6L1JWE7fVrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393 (0x959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Validity
Not Before: Jan 30 20:17:12 2025 GMT
Not After : Feb 6 20:17:12 2025 GMT
Subject: CN=679bde49-e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:f8:e1:53:29:47:e2:b2:e6:82:97:60:34:
e7:6a:a1:32:0b:9d:d9:66:83:c5:dc:1f:9f:2f:86:
0c:29:85:45:48:37:40:c5:cc:8f:be:de:e4:ed:86:
c9:df:dc:62:ec:d3:81:b3:95:d5:2d:ed:e9:ed:b2:
49:0e:49:1e:66:55:05:0c:95:87:70:a3:d1:ab:ce:
71:70:1e:93:b8:09:23:bb:63:45:58:39:4d:48:72:
b0:dd:d9:43:1a:ff:0b:bc:90:92:af:19:4e:58:71:
c8:68:a7:a3:ec:a9:ef:8b:6e:b8:fe:19:0c:1c:ac:
47:86:58:0c:30:aa:dc:49:30:38:2b:e1:ca:e9:2b:
05:b4:82:72:b9:ef:4b:b1:69:98:a7:22:b3:fe:de:
7b:65:70:8a:b3:cb:96:1e:83:de:d7:c6:3e:75:be:
46:c5:a6:97:a2:38:34:ee:23:b1:e3:78:21:36:79:
36:eb:2f:35:ab:92:55:23:2d:85:9b:66:94:23:1b:
cd:88:3c:7c:b1:a4:28:fb:13:e1:cb:4d:35:e3:07:
aa:be:95:8b:03:0f:bc:ce:be:df:27:5e:25:37:d2:
fe:0d:cf:94:99:2b:73:59:5a:de:70:37:8e:5e:97:
56:d9:92:cb:07:5b:af:ff:f2:78:a7:09:77:d9:11:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C9:9D:4C:E0:33:86:28:FA:DB:C7:22:88:F8:DE:83:BF:B5:96:C6
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:ce:00:5f:8f:55:1a:c9:4f:36:24:b8:72:dc:7d:4d:2f:
f1:cf:ef:0d:ad:fa:db:f1:e8:ab:3c:96:c4:7c:77:73:e7:88:
3b:48:0f:9a:29:1b:df:d8:1b:9b:e2:02:f4:02:f8:a5:f7:80:
6d:4c:91:8b:cc:01:88:86:4b:b6:53:48:e0:2f:e3:08:8d:b0:
89:c8:c6:f4:75:2c:c9:e2:a6:de:3a:66:4b:b0:25:2a:0b:cc:
14:13:c2:df:17:4a:79:40:28:8b:8c:7d:e7:54:1b:b9:d1:e3:
87:e0:85:31:0f:5c:fe:87:f2:60:7d:42:5e:6c:10:c0:a3:3a:
f0:0e:ac:45:17:0f:e7:c6:fa:63:7c:16:8c:f0:d1:55:4c:80:
23:be:a2:b8:b0:c1:72:c5:db:45:2b:84:33:d1:30:a9:b2:2e:
a1:d5:dc:2e:4c:4d:08:4b:ea:7b:f3:29:3c:67:e0:ac:2e:64:
4d:6a:ca:8a:91:6a:fb:91:3d:e5:ce:43:3c:5e:00:db:92:48:
42:cc:d4:a1:cd:a6:0b:50:ba:fd:39:d5:0f:e0:c3:b6:74:36:
93:c2:54:b0:95:54:1e:39:ce:13:8b:14:35:6a:90:a3:a4:d1:
97:b7:ac:c1:08:14:0f:98:17:e2:9e:83:c6:8c:35:60:0f:9a:
91:fc:20:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG
OEYyMjFFMDMwHhcNMjUwMTMwMjAxNzEyWhcNMjUwMjA2MjAxNzEyWjAYMRYwFAYD
VQQDEw02NzliZGU0OS1lODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrz44VMpR+Ky5oKXYDTnaqEyC53ZZoPF3B+fL4YMKYVFSDdAxcyPvt7k7YbJ
39xi7NOBs5XVLe3p7bJJDkkeZlUFDJWHcKPRq85xcB6TuAkju2NFWDlNSHKw3dlD
Gv8LvJCSrxlOWHHIaKej7Knvi264/hkMHKxHhlgMMKrcSTA4K+HK6SsFtIJyue9L
sWmYpyKz/t57ZXCKs8uWHoPe18Y+db5GxaaXojg07iOx43ghNnk26y81q5JVIy2F
m2aUIxvNiDx8saQo+xPhy0014weqvpWLAw+8zr7fJ14lN9L+Dc+UmStzWVrecDeO
XpdW2ZLLB1uv//J4pwl32REhcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPJnUzg
M4Yo+tvHIoj43oO/tZbGMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB
OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk
NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuPM4AX49VGslPNiS4ctx9TS/xz+8Nrfrb8eirPJbEfHdz54g7SA+a
KRvf2Bub4gL0Avil94BtTJGLzAGIhku2U0jgL+MIjbCJyMb0dSzJ4qbeOmZLsCUq
C8wUE8LfF0p5QCiLjH3nVBu50eOH4IUxD1z+h/JgfUJebBDAozrwDqxFFw/nxvpj
fBaM8NFVTIAjvqK4sMFyxdtFK4Qz0TCpsi6h1dwuTE0IS+p78yk8Z+CsLmRNasqK
kWr7kT3lzkM8XgDbkkhCzNShzaYLULr9OdUP4MO2dDaTwlSwlVQeOc4TixQ1apCj
pNGXt6zBCBQPmBfinoPGjDVgD5qR/CAZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:45 2025 by rpki-client