Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier: 0EWzgUo/eN4MMsVts8uCqSHaKJA9vvBSKCinUI6gfy0=
Subject key identifier: A4:20:6F:83:5F:BB:19:0E:B9:B4:1D:EF:8D:60:0F:A1:C9:83:E9:C2
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial: 0615
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number: 0615
Signing time: Thu 30 Jan 2025 22:42:59 +0000
Manifest this update: Thu 30 Jan 2025 22:42:59 +0000
Manifest next update: Thu 06 Feb 2025 22:42:59 +0000
Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: nbxG92C9zTyjyA8cIWX0e9zYgqUTzJ1gaM9raghNc/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Validity
Not Before: Jan 30 22:42:59 2025 GMT
Not After : Feb 6 22:42:59 2025 GMT
Subject: CN=679c0073-9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:69:92:86:87:5e:9f:21:0c:25:52:ec:0e:
b6:08:2d:a9:f7:a4:4b:9e:1c:3b:92:af:4f:69:8e:
93:d9:19:d9:75:a4:14:a7:e2:25:40:43:14:d2:ce:
19:07:bb:2a:49:06:f3:84:ca:f3:f4:53:53:3d:e3:
91:c5:26:fe:39:f0:a1:0e:d7:31:15:a1:a7:be:4c:
b7:e5:fb:24:5c:8c:ec:43:44:20:11:9b:16:48:ae:
25:bf:77:f1:03:ac:da:a3:e2:a7:91:04:35:e5:d4:
2b:8a:c3:3a:bf:bc:0c:8a:70:30:6c:91:46:66:c8:
ef:32:e2:13:d8:ba:96:87:9b:4b:64:1b:9d:a0:81:
9d:71:5e:78:0d:93:6d:8f:1b:af:ea:ae:e3:32:80:
da:de:9b:41:1c:6f:65:92:0b:7c:aa:06:7a:7f:e2:
40:40:60:da:dd:df:46:17:cf:92:3e:e9:fb:de:ad:
23:79:18:0a:c9:43:1a:c6:74:44:6d:37:62:83:6f:
87:35:da:70:0c:6e:68:5a:34:bc:02:61:f9:fb:9f:
9f:7e:d2:11:2e:42:f4:70:90:ab:cd:d7:4a:47:4a:
3e:d8:16:e5:a5:86:f2:93:94:f4:ab:55:02:0f:b8:
cb:29:c6:c9:01:4d:ca:51:df:2a:e7:62:c4:dc:f1:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:6F:83:5F:BB:19:0E:B9:B4:1D:EF:8D:60:0F:A1:C9:83:E9:C2
X509v3 Authority Key Identifier:
keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0d:68:a1:1f:1a:13:af:55:61:c7:49:1b:88:4b:61:e4:9d:
7c:9d:01:3c:90:cc:aa:c4:de:a8:f8:02:c7:0d:58:3b:6d:bc:
32:01:6a:9f:78:75:24:fb:96:20:9a:0b:f2:49:7d:78:7c:8d:
22:d1:02:fb:19:68:60:17:28:7e:42:83:9d:e2:63:e0:bc:e8:
7f:4e:51:ab:a4:85:30:1c:d1:f4:b3:e4:a0:bc:b4:6a:93:18:
07:7b:2d:c6:ae:ad:db:2e:14:22:69:33:2f:02:09:3d:1c:17:
48:a3:ca:3c:89:eb:c4:48:d7:07:45:a9:d9:18:36:a3:77:53:
b1:a3:08:87:4d:dc:2b:bf:54:5b:c3:88:6c:6a:f1:5c:f7:12:
ac:5c:cd:fb:a8:82:89:2c:9e:e0:f9:ec:bb:9b:ee:f9:14:fe:
15:29:d5:f9:85:50:3c:b1:27:6c:b0:21:0a:08:1a:85:74:bc:
4c:e3:23:b1:25:dd:7d:96:bc:fd:7a:c1:59:bf:f3:ae:a4:ea:
65:bd:d6:62:a6:2d:f1:e9:3f:bb:1b:f5:de:36:52:84:ea:38:
2c:4b:00:db:dc:d5:a8:a8:cc:0d:dc:cb:82:1c:75:a7:98:c8:
b5:bd:d2:df:62:82:8c:55:7b:01:59:0c:1f:2d:31:1d:fb:be:
29:9a:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:45:50 2025 by rpki-client