Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json)
Hash identifier: OY3A3HiE1ffcDMhFw6riJa8Nn2Fgj0F2JfhVhtWonyQ=
Subject key identifier: B9:95:C6:67:A2:CD:F8:D0:A9:4E:DD:DF:EC:8E:43:15:36:D9:38:40
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0B4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
Manifest number: 0B2B
Signing time: Thu 30 Jan 2025 19:16:32 +0000
Manifest this update: Thu 30 Jan 2025 19:16:31 +0000
Manifest next update: Thu 06 Feb 2025 19:16:31 +0000
Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: 4sidH46ndYMd2C4CJE/lfJRgQxDl39BQA1mdVsBGBTM=)
2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: v3eM1afKfp5x6LJXjZiYB0SH5/PZklJnEe+riVHLKYw=)
3: 879EEF1ECD6911ED8A27BE3FC4F9AE02.roa (hash: Bqlt5+xf6/HFlqAInXNus3mqHWon08H2oLf73/ZH6kI=)
4: F8088528E65D11EDB5112931C4F9AE02.roa (hash: Lzmul2Cef2NofonlnFrwzVunzHlMbNBTtbdpet7f/jA=)
5: D9173AE459E811ED85614349C4F9AE02.roa (hash: zJ5BK1dHdR/yZ3djpSjZWWfhHBcKyuyePotDm2SHibI=)
6: D7D5B86859E811ED85614349C4F9AE02.roa (hash: Ltz6LBvyoZXhbJ9WTgNP/OOOspHsk57wHv6qE/cOGxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Jan 30 19:16:31 2025 GMT
Not After : Feb 6 19:16:31 2025 GMT
Subject: CN=679bd010-bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:d9:9e:30:e4:6a:b7:e0:3e:ea:8c:6e:b0:
ad:dc:f3:bc:ec:b1:42:89:0b:55:26:01:ff:03:d2:
64:99:48:92:61:f1:51:07:23:b8:1e:b9:92:93:db:
22:e9:62:1f:c6:8f:9c:63:6e:9d:1e:31:ec:ff:a8:
c7:11:48:4e:ff:9d:5c:b5:d9:ab:78:33:73:ec:ba:
1a:bf:56:54:39:eb:f6:60:24:74:8c:fd:73:8f:7a:
3b:a2:a6:58:26:73:b1:fd:00:ae:ce:d3:a1:3e:7f:
41:9d:85:1e:78:d1:e4:ef:b4:0c:c3:4b:27:98:42:
fe:7b:dd:e4:d3:f3:16:ef:25:96:d2:f1:e8:5a:f3:
a4:15:2e:46:3e:b3:37:3b:7a:a2:22:63:46:dc:b5:
a6:f5:0d:72:15:25:32:d3:9d:78:6f:0e:18:47:1a:
63:ec:df:d7:1f:74:78:34:5d:6c:e3:2a:f4:e4:ff:
66:ac:b3:11:ec:ad:0d:84:1d:6a:5e:e6:7c:56:6e:
62:fb:df:7f:17:e7:30:2a:89:db:94:51:ad:05:2b:
ac:3d:8d:e6:6f:64:66:24:70:72:b6:3e:48:02:f9:
eb:27:49:30:96:4f:0b:fc:95:b9:e5:8e:9e:bd:16:
38:8c:cc:ac:b9:c1:c9:61:61:3f:51:4f:b0:37:5b:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:C6:67:A2:CD:F8:D0:A9:4E:DD:DF:EC:8E:43:15:36:D9:38:40
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:9c:b5:2b:4b:48:a8:6a:af:f5:6f:a9:a2:e1:50:30:ab:44:
ea:a1:ba:eb:c1:17:5c:ee:35:70:bd:9a:4a:6d:61:68:fa:05:
54:f0:eb:75:f2:c4:a1:6c:33:22:9e:55:6e:35:f4:b3:05:66:
fb:70:b3:34:bb:35:de:8a:61:b2:4c:98:b4:fe:b3:c5:d3:1e:
31:2e:fb:a8:ed:41:c7:39:0a:71:52:58:ea:57:17:58:79:9e:
44:b8:7c:b4:db:6a:4e:37:3f:40:72:61:b1:f4:bf:6e:3f:3a:
37:f6:0d:7c:b9:73:40:92:36:35:dc:70:b0:96:89:00:a5:a9:
de:f7:5d:8a:6c:cc:72:74:8f:01:12:89:20:69:c6:3c:6a:a6:
66:b3:8a:13:eb:0b:f9:e3:dc:31:f8:d6:19:71:16:00:d1:47:
0d:e1:1b:54:a8:e3:b1:bf:fe:49:53:89:b8:8b:b9:b4:12:a9:
f7:64:c8:84:20:2b:1a:5a:93:b6:66:34:4c:20:c4:dc:c3:b8:
d3:ad:e1:10:88:9a:7f:95:0a:f8:6e:75:5f:bb:7d:c6:f8:e1:
ba:cc:5b:3e:be:27:5c:11:64:3e:fd:04:09:05:64:e4:a7:2b:
cb:b1:f7:90:44:44:e0:30:60:4e:cf:32:27:b7:9d:db:61:12:
c2:20:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:48 2025 by rpki-client