Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json)
Hash identifier: Q66ltEMYm8xh9QnJZGbSxETNe8RvF9OQ2py4r1hrNak=
Subject key identifier: 4B:64:E9:18:46:B9:13:4B:E9:4C:09:82:0D:A9:CF:9F:83:58:E8:55
Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17
Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
Certificate serial: 3468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
Manifest number: 345D
Signing time: Fri 31 Jan 2025 15:03:35 +0000
Manifest this update: Fri 31 Jan 2025 15:03:34 +0000
Manifest next update: Fri 07 Feb 2025 15:03:34 +0000
Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: F+RUgp+3/t/V94ZRtAvEdULrSa3U1rmKpfHsgPE5Mis=)
2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: 3fSEvKM13CebYGAsrgkzFIerRrbjNtx416zFYNRYGP0=)
3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: aVfEOKnVDm2poRF4e8I0r6U1onr3PWkW1eUF2/DigYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13416 (0x3468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17
Validity
Not Before: Jan 31 15:03:34 2025 GMT
Not After : Feb 7 15:03:34 2025 GMT
Subject: CN=679ce646-6c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:4c:a8:06:29:d2:65:9f:7d:fd:40:4b:1e:
9f:a8:6c:f7:6f:37:8d:c4:21:98:03:13:73:05:15:
68:18:ec:73:cc:5d:df:c2:16:5d:e3:7f:6e:fe:13:
ec:bd:a4:62:7f:cf:57:85:25:e8:3f:ca:8f:2f:de:
85:e4:e9:fb:f2:74:d4:cf:4b:09:6e:76:8b:a1:44:
0c:3c:a5:93:3c:6c:97:3c:8f:81:f3:75:e8:d1:e4:
3c:2b:35:fc:99:df:79:97:c1:dd:f3:e2:43:e2:8a:
5e:4e:3f:a4:d6:34:76:61:f9:13:d1:d0:e2:f3:15:
a8:63:f2:ec:3e:38:c8:9d:9a:3b:73:d4:1d:b8:71:
0e:1f:77:6d:c3:90:48:d9:6f:bb:b6:ae:64:67:01:
6a:5d:5d:d5:e8:1e:df:21:2a:b0:19:e3:a6:0d:85:
b9:cb:60:ca:1b:07:91:2b:d4:94:de:af:d9:d0:67:
6f:1f:95:43:a7:d5:5a:d2:80:b4:f6:ab:5b:ec:1f:
d4:1c:4c:95:f0:a7:ba:1e:05:36:f8:df:99:3d:d8:
8e:1e:53:77:57:3c:97:ba:f4:49:e9:37:57:54:d5:
4e:fb:09:98:52:a5:60:ad:13:92:20:4f:2f:3f:c4:
db:a7:ab:d3:6d:c0:7c:38:5d:75:60:72:ad:1f:c8:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:E9:18:46:B9:13:4B:E9:4C:09:82:0D:A9:CF:9F:83:58:E8:55
X509v3 Authority Key Identifier:
keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b4:84:8b:d4:f2:f8:c1:d8:19:8f:26:39:7d:0e:6a:9f:63:
85:27:bd:68:85:27:70:5e:94:ee:2b:4d:ab:a9:93:10:38:98:
bf:9d:7f:82:68:5d:86:0f:51:de:30:6d:9b:5b:c6:6c:56:14:
a8:73:68:2d:15:bd:ba:43:f4:c7:83:6b:1e:e6:2b:ca:d8:cc:
c0:29:d6:e7:43:ef:c4:6f:bf:0f:b1:58:93:0d:3b:3a:d1:ed:
45:ab:a9:b3:ba:a3:d4:d3:35:8d:3d:a1:38:46:6d:ca:eb:90:
7d:d4:a4:25:bb:59:ca:e0:ad:e0:4b:82:48:0f:23:5c:47:0e:
15:2e:1e:50:79:aa:5d:40:b2:a9:e4:8c:11:72:d8:d8:13:fa:
c6:18:26:b4:5e:22:38:ec:67:c9:f2:ca:6f:18:e0:72:3e:06:
f3:c6:d7:17:54:2e:1e:a1:54:6d:ed:c1:2c:29:c3:45:51:80:
69:38:0c:32:a8:58:0a:8e:f7:f5:54:d3:7b:12:13:3e:0e:94:
4e:a8:8a:cc:17:db:f1:32:6a:68:28:8b:07:ea:45:fc:63:86:
2c:60:92:44:49:4b:4d:03:f5:ca:a3:82:57:2b:22:54:7d:5c:
3f:ab:71:56:fa:7a:00:82:1b:80:da:0f:1b:ed:23:c6:35:d5:
d7:38:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:57 2025 by rpki-client