Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json)
Hash identifier: c3n/aF1ujI/sdX0DBf/xny8uiSAI4isqYDTGpvrYI5U=
Subject key identifier: 25:98:21:FC:F0:29:BF:79:51:E6:35:01:88:E5:DD:58:47:46:54:FA
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 05AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
Manifest number: 0594
Signing time: Thu 30 Jan 2025 23:20:09 +0000
Manifest this update: Thu 30 Jan 2025 23:20:08 +0000
Manifest next update: Thu 06 Feb 2025 23:20:08 +0000
Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: EP8tvkZrPfWzYM7kXfD5uJxk7obU2GsKWbuBzaxqGrk=)
2: 32B24F6425FD11EDA4097785C4F9AE02.roa (hash: 1DnKSzLoM0CTCgb09q8W/MqI67bjoZqKAzNGq6PC5cw=)
3: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: Cj1/piPyZE/JuRDwxvwSW+MueXSWf8zlHIF4b8CMXf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Validity
Not Before: Jan 30 23:20:08 2025 GMT
Not After : Feb 6 23:20:08 2025 GMT
Subject: CN=679c0928-b95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:3b:f7:e3:ec:1c:3a:2b:d0:06:6f:e0:38:
6a:d9:f1:f6:52:66:3a:94:d2:aa:06:17:e5:8c:80:
9d:9e:f8:2c:17:03:bb:f9:7d:a1:4f:43:ac:78:3e:
f7:dd:f6:c3:cd:01:38:f0:a6:3e:f0:5b:82:d4:77:
8d:d9:3d:64:d7:91:80:53:9d:8d:bc:67:6c:7d:d1:
65:4d:87:fb:ef:93:56:53:4c:68:db:9b:cc:b4:bf:
8f:1b:35:94:e4:18:b7:42:ca:a4:6f:43:f5:54:9d:
f1:83:80:17:3f:da:b1:05:ee:c0:98:87:26:97:7e:
c3:9b:61:d9:1c:53:08:86:4c:a7:13:08:72:cc:55:
d3:02:14:82:fe:45:49:dd:99:9c:fd:77:57:4a:81:
ce:d8:ab:39:3a:10:44:a1:4a:2c:c2:04:bd:e1:ff:
8f:a6:5a:2a:2a:7d:12:8d:57:63:8c:71:0d:3e:90:
5e:0b:bf:9e:d2:6c:56:d1:c5:54:a5:e3:9d:f8:6f:
f2:9a:25:2a:dd:3b:48:4c:f2:2c:94:11:24:3b:89:
c5:37:e9:69:27:43:15:ed:3b:4d:05:f7:38:1d:f4:
5b:a3:78:92:d2:3c:62:0f:36:90:ae:7d:76:97:11:
e0:a4:5b:a6:a3:8a:d8:75:4d:bd:3b:4f:1c:8e:43:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:21:FC:F0:29:BF:79:51:E6:35:01:88:E5:DD:58:47:46:54:FA
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:a5:9b:c8:07:54:6d:0b:1b:96:e5:c2:74:f5:60:a5:ac:
cd:ea:32:b9:01:8b:96:81:bb:af:ed:31:98:39:0e:39:f3:ba:
fb:e1:be:4e:4f:63:61:d0:bf:14:25:26:f3:6a:a8:f0:69:db:
75:56:e4:c4:aa:f0:ba:c8:fe:ae:4a:93:01:1a:aa:71:58:0c:
6d:f3:37:84:08:d4:09:e0:6d:83:02:f7:7f:e0:fa:9b:85:20:
58:6f:58:7d:7b:96:8e:98:74:60:9a:2a:fe:74:bd:cd:a4:85:
a9:2a:93:56:6d:15:36:1e:fc:00:c9:1d:1d:b1:18:5f:59:88:
ea:ab:df:04:69:66:0b:fc:93:0f:4f:8a:ee:06:52:d8:a6:59:
7d:1e:14:93:96:96:61:5c:db:88:51:48:59:e0:86:9d:f0:e3:
2c:70:ce:7c:ec:18:7e:a6:d5:bb:16:e7:84:e2:08:db:4a:50:
ea:8f:e7:77:5e:b4:47:9f:e9:75:9c:34:06:76:2d:7b:6f:29:
bf:9a:e9:09:36:fb:43:74:9d:e2:25:8e:eb:94:6e:f5:79:07:
86:39:09:aa:bb:fd:16:9c:29:55:c1:5b:c0:da:05:89:12:4b:
24:eb:0a:3b:3a:65:f1:3b:71:d8:aa:0e:4d:d7:5d:07:9c:f9:
1f:a7:84:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND
RTVEMTE3RjkwHhcNMjUwMTMwMjMyMDA4WhcNMjUwMjA2MjMyMDA4WjAYMRYwFAYD
VQQDEw02NzljMDkyOC1iOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvo879+PsHDor0AZv4Dhq2fH2UmY6lNKqBhfljICdnvgsFwO7+X2hT0OseD73
3fbDzQE48KY+8FuC1HeN2T1k15GAU52NvGdsfdFlTYf775NWU0xo25vMtL+PGzWU
5Bi3Qsqkb0P1VJ3xg4AXP9qxBe7AmIcml37Dm2HZHFMIhkynEwhyzFXTAhSC/kVJ
3Zmc/XdXSoHO2Ks5OhBEoUoswgS94f+PploqKn0SjVdjjHENPpBeC7+e0mxW0cVU
peOd+G/ymiUq3TtITPIslBEkO4nFN+lpJ0MV7TtNBfc4HfRbo3iS0jxiDzaQrn12
lxHgpFumo4rYdU29O08cjkOGwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWYIfzw
Kb95UeY1AYjl3VhHRlT6MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4
NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1
N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfyaWbyAdUbQsbluXCdPVgpazN6jK5AYuWgbuv7TGYOQ4587r74b5O
T2Nh0L8UJSbzaqjwadt1VuTEqvC6yP6uSpMBGqpxWAxt8zeECNQJ4G2DAvd/4Pqb
hSBYb1h9e5aOmHRgmir+dL3NpIWpKpNWbRU2HvwAyR0dsRhfWYjqq98EaWYL/JMP
T4ruBlLYpll9HhSTlpZhXNuIUUhZ4Iad8OMscM587Bh+ptW7FueE4gjbSlDqj+d3
XrRHn+l1nDQGdi17bym/mukJNvtDdJ3iJY7rlG71eQeGOQmqu/0WnClVwVvA2gWJ
Eksk6wo7OmXxO3HYqg5N110HnPkfp4TL
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:04 2025 by rpki-client