Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json)
Hash identifier: 0W8nFwcsbO4ZLNINm6LCmXZTfAoAqk469JZ0KlUOUSM=
Subject key identifier: A9:78:63:DF:54:65:46:11:37:56:5C:FF:0C:26:B3:7F:92:87:4B:83
Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
Manifest number: DC
Signing time: Fri 31 Jan 2025 04:50:06 +0000
Manifest this update: Fri 31 Jan 2025 04:50:06 +0000
Manifest next update: Fri 07 Feb 2025 04:50:06 +0000
Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: omr3ndt3+5stiwOVDvSiwBwzsgTcPPo5sh2qTSb6qEU=)
2: 3425A8A695C211EEBA1ABE46C4F9AE02.roa (hash: gex/Yt3Y2Pni46v08v3iUy5I+Ij4pJmNu8TapgzE+7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129
Validity
Not Before: Jan 31 04:50:06 2025 GMT
Not After : Feb 7 04:50:06 2025 GMT
Subject: CN=679c567e-4340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:aa:f7:9e:09:73:1c:e4:bf:e9:cd:b7:5b:
5a:e0:03:72:cb:01:ca:c6:16:17:1b:2c:83:12:2d:
69:ed:58:b9:a2:ba:56:66:3e:bc:b4:4a:d6:91:95:
a0:bf:03:68:03:31:70:a7:fc:26:d3:df:39:f7:16:
43:13:f7:17:73:00:1f:ef:cd:22:a1:bf:2b:0f:6c:
6b:7e:d3:11:18:ed:cb:f5:f5:a3:39:5c:3d:f1:04:
ab:62:86:bb:f1:f7:ce:53:95:96:38:7f:43:10:4b:
fe:75:21:85:4a:74:ec:10:88:0c:ff:51:24:98:b0:
8a:2e:a0:01:f9:c5:be:70:4d:b9:25:67:d2:8d:0c:
47:e0:30:cc:f9:7a:21:a7:0e:74:47:94:7c:04:2b:
cc:d9:e1:0e:14:27:86:71:98:9a:25:0d:b0:1b:7c:
bb:4c:cd:22:d2:be:4a:97:c9:fd:fe:1e:3e:38:af:
51:50:82:ed:a0:5f:28:bd:e5:6a:ab:79:08:62:a5:
e2:fb:30:ba:18:b5:39:d3:bc:3d:ff:12:a2:6b:54:
66:81:1c:ca:e8:2c:9f:e7:ef:cd:04:b6:d9:06:b4:
5c:bd:16:32:ab:56:3f:61:98:1e:c5:24:5a:78:c8:
b6:33:ed:50:e0:6b:ac:2e:ab:1b:46:68:30:35:8a:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:63:DF:54:65:46:11:37:56:5C:FF:0C:26:B3:7F:92:87:4B:83
X509v3 Authority Key Identifier:
keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3f:88:ad:ad:6f:3c:b6:f7:4b:fb:51:70:60:7f:c0:79:8f:
42:fb:50:44:4b:1e:39:d3:a8:fc:a8:3a:7b:2d:ca:87:4c:e9:
1a:f3:92:c6:52:48:5e:c7:43:5f:58:37:59:0e:d5:8d:5d:30:
78:61:78:63:30:97:4d:20:5a:78:64:d0:27:ca:3e:78:27:99:
e3:56:5b:f5:0e:47:e1:a7:bc:fe:2d:d9:90:8e:ca:19:48:9e:
ad:18:38:aa:19:7c:2f:a2:5b:0a:bb:09:ab:59:77:df:97:87:
01:24:be:12:85:5b:a2:4f:a3:73:4f:88:78:33:b5:62:93:a5:
13:7c:f5:17:a0:ad:39:98:2b:02:9c:cd:ca:98:f4:b7:4e:5c:
59:1a:65:5f:f8:a4:c9:c9:fe:46:d9:c8:f3:a0:4c:a9:48:b9:
d0:6e:c0:8c:d5:57:4c:6d:69:72:d8:20:14:bc:ee:2b:ea:f3:
b4:79:e9:b4:86:1e:c9:5c:89:85:1c:6f:1f:de:52:be:4f:99:
ea:bc:c6:e1:ff:d2:a3:38:78:1a:60:ac:c6:a7:66:10:59:d2:
0f:dd:9b:c4:58:da:1a:99:23:99:f1:f4:79:c3:7e:65:25:64:
f0:fe:96:bd:e2:cc:67:65:f6:4a:03:77:9c:db:cb:a0:05:63:
07:18:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:10 2025 by rpki-client