Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json)
Hash identifier: lRUdz6UmjmH2x+PDtT30vACu5lvsoItYOHdYtLh4EhE=
Subject key identifier: D6:11:7A:D3:79:B0:90:A6:DF:5E:1B:87:2C:59:54:4B:7D:4C:9F:5D
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
Manifest number: 76
Signing time: Fri 31 Jan 2025 05:50:24 +0000
Manifest this update: Fri 31 Jan 2025 05:50:23 +0000
Manifest next update: Fri 07 Feb 2025 05:50:23 +0000
Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: +i2aTnriSNR6DjMUDVt//IurdIgjMJZ65jQ3aKTVLqE=)
2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: hYjHUfvRUA2oxqxU9L94pcxlxZdbw5TFQJ8mDVWiXNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Validity
Not Before: Jan 31 05:50:23 2025 GMT
Not After : Feb 7 05:50:23 2025 GMT
Subject: CN=679c64a0-bb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:f4:84:6b:9a:15:6f:d1:2e:33:b8:43:39:
fe:3b:f3:3a:24:aa:5d:bf:e5:6b:55:53:ac:97:15:
ae:60:70:ce:80:bd:e7:ac:5b:e4:e2:af:d1:ee:14:
19:dd:22:ac:7a:37:24:15:26:1c:59:96:82:48:36:
ce:50:ba:b8:cc:19:f1:84:d5:9a:b4:84:92:cb:9b:
53:11:ef:4f:5f:3e:ea:9f:ea:cc:14:bb:df:86:f7:
d8:00:92:e1:16:eb:42:99:d1:ef:37:6b:29:02:e7:
c8:e2:ef:24:b9:c6:49:c5:eb:9a:29:18:43:3e:dc:
24:39:05:a3:a8:1f:bf:88:eb:4a:40:92:3c:d9:d8:
cb:9b:27:f8:a4:67:01:c0:c9:65:42:fa:05:20:71:
e0:2a:49:19:50:6a:db:71:02:50:2c:ff:26:80:1d:
0b:74:a9:fb:f7:5c:de:e4:e8:9e:89:5c:59:7b:3d:
6a:f0:c1:bb:79:fd:4a:d1:55:5a:65:51:38:2d:0c:
1a:83:6e:36:70:0f:a1:eb:d1:c8:74:a5:17:71:31:
dc:5b:bc:86:7e:13:2a:d8:a2:d7:50:da:e8:bc:e0:
16:46:19:47:21:4c:08:cb:c2:dd:8a:1c:78:55:18:
1d:5e:6b:32:e0:fe:36:4d:58:8d:d0:df:a7:67:ba:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:11:7A:D3:79:B0:90:A6:DF:5E:1B:87:2C:59:54:4B:7D:4C:9F:5D
X509v3 Authority Key Identifier:
keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f7:9d:da:a2:df:54:92:16:47:8a:64:d7:5a:a3:ba:ba:c3:
40:8b:be:5c:6b:b4:d9:72:a5:8d:b6:e7:f6:d3:c0:38:d8:6a:
f7:fe:10:43:64:a8:c7:3c:1d:31:e3:d9:a7:a3:65:cb:3b:54:
d3:91:d3:03:fd:fe:93:4d:14:a8:b0:fc:39:9b:08:1e:6d:ac:
b3:d7:6e:00:d8:6a:d5:36:cc:80:46:8c:3c:3a:89:c9:56:25:
52:0b:80:4f:a3:69:91:57:a4:60:fc:44:61:4f:32:97:4c:0e:
db:6a:98:7f:0a:37:79:bd:1a:33:32:a5:7a:05:5a:93:ed:b8:
dc:33:f0:a2:79:3e:08:10:33:dd:89:52:39:7b:ca:53:7e:4c:
29:f3:85:b0:6a:2d:ae:1e:56:9c:f3:d1:3b:01:67:fb:ab:ed:
80:da:b8:b7:e3:56:26:0c:fa:d1:ea:39:cb:9e:72:8c:c5:28:
2a:fa:1e:62:b9:03:c5:dc:cc:3d:43:60:f9:6e:fb:dd:b5:0c:
bf:c3:61:40:93:e8:9d:dc:56:ef:42:42:f8:fc:53:34:73:f6:
3a:e9:35:40:0f:c3:1a:a1:24:2f:2e:7f:a3:9b:4e:ea:e2:c1:
79:18:3e:0a:4e:50:d3:ad:02:f7:da:d5:52:86:50:3a:ca:0f:
4e:19:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:14 2025 by rpki-client