Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json)
Hash identifier: bFZrhd1axv61ewckMjFmXwfxXTa5pHZuLJevlecIeqc=
Subject key identifier: CB:74:CC:74:3F:6E:36:70:CE:FC:CE:44:B5:DF:3C:CA:28:32:98:44
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 04F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
Manifest number: 04BD
Signing time: Fri 31 Jan 2025 00:03:23 +0000
Manifest this update: Fri 31 Jan 2025 00:03:22 +0000
Manifest next update: Fri 07 Feb 2025 00:03:22 +0000
Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: MiZBDf63Kpc/97H3CbH4EF0hXk3/6PEu5FecHWEMrfQ=)
2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: c5X0bRS1v3BmM8+viPXYxx/gJz2nVR8k5o+BxqMhvNI=)
3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=)
4: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=)
5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=)
6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=)
7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=)
8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Jan 31 00:03:22 2025 GMT
Not After : Feb 7 00:03:22 2025 GMT
Subject: CN=679c134b-8762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:88:c9:42:21:b6:64:13:ad:73:32:2b:61:
eb:13:11:4d:18:1d:65:88:ea:91:6b:0b:d0:74:69:
82:fa:74:26:01:b7:02:96:39:51:eb:b3:f7:d8:1f:
78:69:fc:bd:98:87:d4:7d:24:4c:06:ea:d7:dd:f9:
bf:2f:9d:cd:f2:5e:7b:93:6a:1e:01:e0:4e:84:d7:
00:f1:63:f9:fc:f7:38:3a:ca:36:6f:3d:44:2c:64:
b3:1f:19:9c:a1:8a:cb:e7:c0:fe:da:f6:e4:33:8e:
bc:af:85:55:88:bd:cc:4d:bd:4e:87:d7:bd:82:54:
4e:92:a7:e0:5a:5b:68:c1:c0:6c:81:d3:e2:c2:83:
bc:fa:73:0b:35:63:29:7b:ec:9e:60:eb:b5:56:6d:
8f:8d:20:d6:88:63:e8:08:d7:e4:19:1a:b5:cc:bd:
96:ee:7d:c1:1d:80:f3:df:a3:52:57:49:8b:56:82:
31:9e:2e:b4:73:95:79:f1:f3:61:51:7d:00:96:4f:
05:82:1f:3a:33:69:f3:0e:cb:a8:6f:98:59:31:f1:
1b:50:fa:13:08:73:9b:b7:a8:01:df:1d:ea:23:38:
be:21:da:95:a9:c1:b5:3f:f5:ca:72:03:fc:a9:94:
7d:83:78:b5:7b:af:00:92:36:ec:5a:31:2e:bc:5c:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:CC:74:3F:6E:36:70:CE:FC:CE:44:B5:DF:3C:CA:28:32:98:44
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f0:5d:82:90:c9:c2:03:1c:05:b6:1e:ac:e9:d6:45:db:24:
2d:fe:a7:9f:66:68:26:e6:7e:2c:7f:f5:48:2f:79:72:29:f0:
59:13:68:1e:14:f6:d8:33:ce:72:dc:57:87:f4:1a:46:69:f6:
bf:91:9a:9a:a3:20:b0:9d:ff:29:fc:72:8c:06:ea:bc:3c:c9:
d0:df:42:be:ef:d9:8a:97:09:b7:d0:4a:a9:f8:2e:65:1f:2f:
f7:0c:87:0c:f9:bc:c4:e3:c4:8e:24:22:e1:47:ff:c6:ad:24:
6c:98:55:8b:6d:f0:e1:56:d3:0b:f8:33:68:99:36:33:71:bc:
70:94:0d:9d:56:ab:54:40:c5:84:b7:52:1a:8f:f8:38:90:91:
29:4e:56:c5:12:f7:f8:01:9a:40:25:62:a8:bb:93:7e:7c:33:
30:7e:70:42:24:f7:0c:e9:29:79:f8:e1:87:98:63:f8:57:ef:
76:58:99:ba:7d:85:e9:c8:ed:8c:22:dd:95:eb:66:4e:b1:ac:
f3:82:53:76:7c:58:ed:72:ce:44:39:d5:2a:70:0b:3b:c2:c0:
a4:57:aa:0a:54:6b:e0:c0:1e:c3:00:3e:ff:40:20:24:4a:8d:
0f:f3:a6:a3:6a:a2:67:48:28:40:59:97:3c:eb:6e:6d:d5:ad:
a4:ed:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:06 2025 by rpki-client