Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json)
Hash identifier: Czx7+uifWuqbGe3oLlVR/8uZfA5tDdVerPqkoYtxTHs=
Subject key identifier: 62:1A:76:B6:07:63:97:4D:DB:77:85:3E:86:C5:4F:9B:C3:DC:EF:0A
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial: 0413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
Manifest number: 040E
Signing time: Fri 31 Jan 2025 00:29:47 +0000
Manifest this update: Fri 31 Jan 2025 00:29:47 +0000
Manifest next update: Fri 07 Feb 2025 00:29:47 +0000
Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: B1XZRxPavasS/Wa/tX82gezNAiAwwUjCmN8/GWntqtU=)
2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: 8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Validity
Not Before: Jan 31 00:29:47 2025 GMT
Not After : Feb 7 00:29:47 2025 GMT
Subject: CN=679c197b-1d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:ef:7f:fc:58:44:17:94:97:e7:3c:54:94:
c4:f5:fc:ba:23:79:7c:e3:82:79:e1:64:e7:8c:b7:
8d:ea:a5:4c:e1:d6:8e:47:a4:d8:ec:59:bd:35:4f:
14:88:c3:30:86:56:09:d4:16:84:aa:98:57:2d:17:
36:ba:56:31:a1:0d:46:1c:a3:f9:70:4f:9d:56:3b:
8d:dd:f1:0b:e3:9c:c0:37:21:1e:dc:8c:15:47:d6:
ad:9e:16:10:5e:ac:2c:05:d9:71:c3:1a:bf:35:91:
f9:59:7d:fb:62:8b:31:a8:7f:a5:a7:81:b8:f0:8a:
44:4a:d7:9d:06:74:28:73:ef:ff:2e:68:59:6e:b3:
69:6e:c3:33:d3:60:f5:74:68:c0:00:b4:33:f7:2e:
50:07:8a:fc:59:fb:60:83:59:55:9c:81:2e:a8:12:
57:23:36:01:a4:89:57:c8:fe:86:ec:b6:f7:a7:7f:
f3:e6:04:03:da:7b:62:88:85:9f:bd:31:94:dc:aa:
2d:49:c8:8d:76:59:26:95:76:11:8f:a2:28:5e:4f:
4e:dd:3e:c9:9c:08:8b:99:03:0f:92:8a:cb:21:ee:
71:81:7a:79:b4:20:7b:60:08:bf:2a:c9:72:a0:fe:
68:32:4c:e6:73:a4:7d:3d:41:56:b1:07:9e:75:0e:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1A:76:B6:07:63:97:4D:DB:77:85:3E:86:C5:4F:9B:C3:DC:EF:0A
X509v3 Authority Key Identifier:
keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:34:15:f6:5b:01:4f:0f:3d:df:b4:36:c4:c1:ca:92:2d:
6a:8b:dd:39:d6:ba:cc:3b:58:74:5c:a3:a6:e4:c5:60:ac:0b:
8a:c9:06:80:b1:cf:69:fd:4b:f4:62:39:21:97:d1:20:5e:5f:
aa:53:3f:87:43:fe:f2:10:5b:74:5f:d2:d2:21:2d:ae:a7:63:
19:f1:80:e1:f2:d7:a5:5a:90:bc:c5:64:47:86:5c:bf:35:51:
ae:95:71:43:d6:0e:6e:01:11:be:1b:26:0f:49:b2:fe:7e:65:
96:c4:e7:b6:ab:0b:f8:39:6d:09:28:bd:9e:96:0e:73:3e:7f:
7d:2d:a3:97:20:39:45:5d:18:cc:42:21:fb:bc:e5:d2:24:a4:
ba:37:dd:04:a3:1d:cf:f8:b6:46:b0:52:55:48:9f:d3:7d:3b:
bf:d6:63:06:46:a4:c5:35:7b:5f:29:81:d7:50:ce:e1:e5:69:
6f:8d:0e:1b:70:cb:0b:66:22:c5:da:a4:69:5b:6d:b7:4c:8d:
b8:93:09:3d:ff:2e:22:71:1a:dd:b6:9b:5e:36:52:b4:a6:c9:
ea:a1:96:44:da:7c:95:a0:cf:bc:7c:45:7a:13:cb:87:ba:32:
51:43:8c:b8:95:ba:46:a2:20:9a:6f:dc:5a:0d:8b:7d:1c:e0:
f4:a5:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:51 2025 by rpki-client