Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json)
Hash identifier: LWR7GovyXsTmV7m4Xtz/puAsoqIYp/sPNa/5ZxUdMPY=
Subject key identifier: CA:27:7D:25:5F:12:23:07:5E:17:4A:BF:43:34:A2:5A:90:0C:21:BA
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
Manifest number: A0
Signing time: Fri 31 Jan 2025 05:21:47 +0000
Manifest this update: Fri 31 Jan 2025 05:21:47 +0000
Manifest next update: Fri 07 Feb 2025 05:21:47 +0000
Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: VktViva+QqP3scGHFM63LA4OZ7RoOK0z0gS4Mmc9SdY=)
2: AB3CCD50E79011EEA3DFB922C4F9AE02.roa (hash: yZ6MBJhoD6w3VG8OJH7ZW6bW41xKAcxHLnAOqa1PvDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Validity
Not Before: Jan 31 05:21:47 2025 GMT
Not After : Feb 7 05:21:47 2025 GMT
Subject: CN=679c5deb-b417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:23:ff:10:03:69:56:cc:a1:f6:8e:57:a7:
13:94:92:d5:51:b4:d3:b4:ad:c5:03:51:c6:e5:88:
de:d7:c3:8d:10:7b:b1:e1:69:2f:81:92:de:6a:85:
09:0d:b0:04:73:fc:cc:f8:48:d4:ff:47:ec:35:93:
34:20:4b:6a:df:af:15:af:a4:c2:6f:70:24:e6:6b:
9e:d9:66:23:ee:aa:e2:fb:ba:11:fe:13:2b:f1:19:
78:da:5a:c1:cd:06:b9:0a:37:35:e6:73:1c:84:97:
96:bc:f6:cf:8d:33:ee:31:aa:3e:e0:09:2c:2a:01:
dc:a3:c3:74:e2:b6:e5:85:e2:8e:30:16:53:15:d4:
44:01:a6:c1:79:ad:71:43:41:47:e3:a6:cc:6f:ee:
0b:73:26:3b:d2:49:a2:c7:61:89:c6:ed:3c:41:ca:
40:8b:61:ed:a6:18:36:19:42:73:d4:7c:1c:af:22:
d6:17:db:6c:dc:69:b5:ef:3d:1a:16:e8:ba:b1:c9:
c3:b6:35:84:c0:0f:d7:24:b6:f8:0a:f2:e7:6c:92:
a9:c0:92:88:80:7e:ea:68:29:df:2c:2f:2c:71:be:
03:7a:64:6b:27:df:7b:63:9b:27:b6:16:f3:d8:45:
dd:74:f6:63:9d:3b:0f:01:fe:01:a5:88:7d:3e:33:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:7D:25:5F:12:23:07:5E:17:4A:BF:43:34:A2:5A:90:0C:21:BA
X509v3 Authority Key Identifier:
keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ff:5b:31:36:38:da:cf:de:08:5f:1c:12:2f:55:e3:ee:3b:
f1:b5:89:7a:5a:b5:ca:ae:32:37:58:81:d8:88:75:fe:bf:46:
d8:87:df:ed:10:f0:e3:3b:7e:c0:26:65:0d:bd:31:cf:8b:64:
5f:2c:79:d2:7e:93:bb:fb:86:7a:08:07:9f:af:a2:14:80:f7:
42:57:67:6d:f0:6c:af:a4:dd:f5:b8:29:fb:26:e5:f5:12:0b:
d3:2d:f2:d8:45:64:f7:86:de:df:d3:6c:75:3c:da:c4:e3:61:
a6:ef:f7:1b:08:27:ae:f9:bb:c7:47:73:64:bb:ed:e7:d5:47:
a3:61:8b:ec:9c:4e:38:b6:8f:fc:18:11:04:90:d4:d4:19:4a:
65:bf:6e:b4:e7:ed:db:50:93:63:b7:ef:1d:47:92:bb:04:ff:
42:bc:35:69:6d:c9:35:55:64:36:04:f2:a0:66:25:8a:03:73:
06:31:69:a1:24:33:81:95:e4:8b:9c:d5:98:9f:e6:87:e1:40:
6f:ca:b6:f9:04:6b:3d:45:77:30:f8:13:d6:34:fc:44:1e:aa:
6f:18:5b:4a:c8:1e:34:d0:b1:11:2f:a1:ba:a3:51:1f:d6:da:
69:6e:33:36:dd:9f:61:f9:18:85:3b:f3:9f:76:23:f4:32:c0:
e6:54:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:14:07 2025 by rpki-client