Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json)
Hash identifier: for5H9iOLP69r2ei8Qx6UBXSl7T58Fm6KReFi5ghE9w=
Subject key identifier: 8F:5B:02:10:EA:E3:58:1E:5E:00:4B:49:F9:49:9B:93:09:05:F5:C3
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 06AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
Manifest number: 069D
Signing time: Thu 30 Jan 2025 22:16:41 +0000
Manifest this update: Thu 30 Jan 2025 22:16:41 +0000
Manifest next update: Thu 06 Feb 2025 22:16:41 +0000
Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: gr+rjrTNn7/D4Wwci6pTqcFSvEiS5vk9cE8veRL6EG4=)
2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: 6XobdgjEZjWaxcX+bmHjFrx4HuCJhh1PmrGKZGDFUHE=)
3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: 8pN9UTSbptAJjL+U1Se3cf6KUhvsNW9+Qz8zuxsCBmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Validity
Not Before: Jan 30 22:16:41 2025 GMT
Not After : Feb 6 22:16:41 2025 GMT
Subject: CN=679bfa49-b367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:06:00:45:58:cb:4c:f2:2a:d8:8b:08:e4:
0f:97:e8:28:bc:7b:82:fb:2e:7f:ad:6b:3a:d4:06:
7a:e1:ba:38:0f:bb:aa:f7:a2:40:02:c7:d8:58:cf:
1c:c2:07:d2:83:df:d3:32:f8:75:a2:21:ae:e8:13:
3b:a7:56:ff:ee:5b:af:76:c9:b8:6e:92:55:8e:63:
61:bb:42:b8:a9:d8:d4:d4:a0:70:7f:bd:50:9b:45:
f6:64:d3:4f:bc:70:6b:1e:c6:2d:60:56:d3:5d:c5:
54:21:9d:ff:30:e0:20:27:71:8f:5a:25:23:cf:63:
00:76:1d:60:35:16:41:0a:5c:07:15:be:5d:64:2b:
fe:7a:d8:57:e6:35:cd:ea:64:3f:f8:a3:ac:60:de:
11:8e:10:4b:ec:dd:9a:b6:dd:e1:2f:bd:1b:ce:e0:
69:31:36:92:36:ac:b1:8f:d3:4d:18:32:1e:6b:36:
34:f4:a7:08:e1:36:f5:5e:0b:a7:8e:15:b0:5b:1d:
5f:38:38:6c:86:21:bd:bf:b5:6c:c2:7e:9c:98:db:
c7:03:4b:0f:61:b6:1c:45:18:e5:94:f6:38:99:2d:
bf:03:e4:30:ca:fa:89:1d:04:94:63:bd:ae:73:f5:
02:32:6f:bd:b5:65:eb:9e:ff:5f:e3:66:d1:66:a1:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:02:10:EA:E3:58:1E:5E:00:4B:49:F9:49:9B:93:09:05:F5:C3
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:23:4c:53:18:6f:84:1c:28:c3:1b:91:c0:35:07:e6:30:
ba:27:29:04:f0:c3:bd:43:6a:28:42:0a:38:31:4e:5f:a1:f2:
a8:85:09:71:dd:36:8f:7c:e7:cc:b3:56:c6:3a:75:0c:ed:5f:
94:5d:8b:dc:b4:22:5d:f2:80:f5:fb:ed:a7:57:a4:7e:6e:59:
73:a3:01:ca:ac:7e:27:51:35:77:81:ed:51:67:cc:b5:af:45:
fc:e2:62:28:9b:8b:49:ab:d3:e0:1d:d4:63:77:04:7d:3b:78:
7d:d7:5f:c1:76:96:7e:10:23:7b:04:ba:bc:e2:d0:ab:b3:ac:
89:ed:57:a5:5c:89:c2:f6:e1:68:c3:80:dd:cd:fb:a5:2a:35:
cf:98:98:4a:91:ab:d0:15:c1:d4:79:4e:d9:b3:c3:d5:52:6b:
eb:41:eb:48:a2:7f:d5:06:59:28:2d:59:ee:8e:f2:84:e3:bc:
cc:69:76:70:3d:85:0d:94:65:ff:be:1e:04:ce:0a:d2:fa:21:
71:41:a2:1b:f1:49:4e:04:8c:f1:e3:18:de:60:24:dd:52:88:
10:2d:fd:8f:82:cc:f8:5a:4e:17:62:5c:f5:f2:87:3a:0b:27:
d2:30:fe:2c:c4:13:af:ab:8c:77:8d:79:ca:0f:00:a9:ea:4b:
48:a6:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:37:28 2025 by rpki-client