Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json)
Hash identifier: 71ey/r3qrdnEi7MLgP6PR+MJlspbYR1sHwtdLQuIzMw=
Subject key identifier: 29:B1:9C:74:53:FC:85:03:27:3C:E8:EB:CE:0C:E3:DB:FF:08:F8:FE
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
Manifest number: 0267
Signing time: Fri 31 Jan 2025 01:47:56 +0000
Manifest this update: Fri 31 Jan 2025 01:47:56 +0000
Manifest next update: Fri 07 Feb 2025 01:47:55 +0000
Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: 6lAbymhwBJsyUZRz3vZeGcOrFisjOgVwT6kjxhPG/Ak=)
2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: tal6R2lkJBoeIIUyi6mdxCD2dqzkhyqrKbW//gzTT04=)
3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: Qlo4+mbKJCym2bywU9/+B9nSR/lgPkj3tiR7WBd3VEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Validity
Not Before: Jan 31 01:47:56 2025 GMT
Not After : Feb 7 01:47:55 2025 GMT
Subject: CN=679c2bcc-9d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:a9:05:c7:f9:d4:e7:24:09:a9:69:80:ad:
d5:5d:54:13:d7:b0:4d:da:2a:75:62:49:87:a4:f6:
de:13:dc:b6:c5:eb:a1:ce:0e:3b:84:a9:b7:6c:8c:
82:42:0b:fe:a7:9d:ea:f6:11:60:98:a9:2b:8a:e2:
41:89:c3:2b:a6:ee:e4:81:30:31:4a:e8:df:45:2f:
b2:4d:d2:de:7f:3d:7d:05:a5:2d:fb:ff:8f:ee:15:
eb:0c:38:07:21:09:e0:70:49:2c:87:ef:91:c5:f2:
7b:23:bb:d8:47:b8:d1:92:12:71:46:d9:0b:4b:cb:
f4:e3:10:ae:f4:13:c7:d8:2e:23:66:af:da:87:18:
6f:bb:12:82:b6:f9:6f:43:7d:d1:a6:26:aa:09:11:
84:39:b2:89:c8:65:fd:a7:20:15:dd:34:62:54:ac:
0c:a2:6f:66:80:42:a4:56:79:82:48:8c:50:45:d6:
8b:61:73:47:c2:a2:17:7e:01:72:10:ca:45:1e:9b:
80:ba:67:c3:b6:7a:ef:47:af:d3:73:da:86:88:42:
c7:cb:46:2e:5f:fd:29:98:5c:95:c2:de:db:77:9d:
dd:65:7f:2f:08:13:1e:a7:08:64:b0:0c:51:41:11:
d1:fc:0c:e4:70:24:e4:c1:ff:5e:c4:92:4a:60:18:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:9C:74:53:FC:85:03:27:3C:E8:EB:CE:0C:E3:DB:FF:08:F8:FE
X509v3 Authority Key Identifier:
keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:39:8d:fe:20:d2:98:e6:a0:24:96:64:57:03:68:6d:79:48:
4a:4b:70:d3:99:11:3f:19:b7:46:cd:b1:57:56:76:bc:f0:f7:
e3:3e:21:7e:41:5e:b3:35:2d:d9:9d:a7:b0:a5:a7:d1:d7:ff:
d7:5c:fe:8f:d5:45:16:d7:36:4f:a5:d3:3c:ec:c9:0a:c4:97:
c7:a9:03:92:e1:5e:87:60:f0:c8:5d:fb:a7:96:39:8b:09:ff:
58:bf:04:32:18:5d:5b:2f:5f:91:2a:8d:a1:43:e2:fd:39:1a:
ad:6b:a2:45:81:d1:3f:36:5c:4a:db:0f:be:3b:f5:ec:dc:ff:
b0:df:29:84:3c:81:08:22:20:84:39:e2:25:8a:55:37:d3:4c:
a3:92:14:a2:81:e7:6b:30:e1:b4:bc:0c:26:03:62:79:e9:81:
70:1f:58:df:9f:bc:11:f9:0b:61:65:a6:78:09:2c:9c:b8:8e:
4f:7f:ed:0a:b3:2d:cb:79:af:d2:53:16:1b:e9:0f:b4:d7:3c:
80:4a:25:e7:be:af:68:7d:40:2d:67:4f:c7:b7:ce:25:0d:64:
de:2b:86:f9:3e:05:8e:08:18:60:e6:e8:25:f8:17:9f:e6:b3:
44:e3:31:04:ae:ba:ca:61:20:cc:a2:fa:c6:dc:ea:5c:de:99:
2a:94:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:38 2025 by rpki-client