Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json)
Hash identifier: Gvx515yJu6IbWdki0o8zEJbfp92BMftk9+udCOB/oVg=
Subject key identifier: B9:D2:33:77:EF:85:2A:EA:74:54:5B:47:2F:C4:55:A6:95:BB:39:2F
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0906
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
Manifest number: 08E4
Signing time: Thu 30 Jan 2025 20:32:09 +0000
Manifest this update: Thu 30 Jan 2025 20:32:08 +0000
Manifest next update: Thu 06 Feb 2025 20:32:08 +0000
Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: QojPRiwLY0YXgrECWyGAFlMbTCG7f2T5XOYbhzO+qx8=)
2: C87A727C2F8411EBA83F6F6DC4F9AE02.roa (hash: ZlqUSLpbo+lZIiR9ntEA9vKv0z9qoBvMsZaB985S8kc=)
3: 5C0A4894F60D11EEADD2752BC4F9AE02.roa (hash: H/NoPQuzUHx4Pz2NsHS1IxKvOouKPbRBspJCW/d+jBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310 (0x906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Jan 30 20:32:08 2025 GMT
Not After : Feb 6 20:32:08 2025 GMT
Subject: CN=679be1c9-fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:d4:29:68:58:cd:34:47:d9:f4:2e:98:c3:
86:9d:0c:16:7b:06:24:92:bb:dd:ed:48:d9:74:6d:
f4:07:8d:5a:6a:85:19:08:0e:8d:20:d9:c2:c7:a8:
07:6e:66:a0:46:a8:a4:fb:77:4a:31:0c:dc:64:a9:
53:04:fa:96:f6:e2:4a:0d:1f:5e:49:89:b3:9c:73:
b0:c0:da:50:4a:3b:41:66:04:7c:d6:83:49:80:f4:
af:8b:4a:18:86:7b:90:cf:38:7b:14:09:dd:5a:0e:
c9:7e:e1:bf:94:9c:35:d7:a1:ac:6a:32:19:c5:03:
bc:0a:3b:d2:14:96:a2:15:44:0f:35:7b:76:cf:41:
23:a7:49:57:2b:f6:a8:38:40:a2:ef:74:2d:56:00:
3c:22:84:02:29:3d:d1:4d:0a:f5:c2:a6:c5:5b:5a:
06:f2:58:68:db:a4:2e:05:c2:69:48:bd:b8:70:90:
93:9b:45:a6:c4:b0:43:c4:86:f6:62:e8:38:3a:84:
2d:b0:27:ba:a9:0a:9f:d9:92:af:9d:0b:a4:96:0d:
67:54:1f:5b:21:34:a2:eb:8d:77:3a:b2:1e:18:02:
1f:ec:80:63:a7:eb:8c:61:e1:66:77:32:89:f3:58:
d1:44:5b:0c:ae:61:9e:98:48:e3:36:61:ac:26:fd:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:33:77:EF:85:2A:EA:74:54:5B:47:2F:C4:55:A6:95:BB:39:2F
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:f4:c2:11:d5:aa:a9:6b:44:f0:80:37:5f:2d:fc:7f:48:
98:b2:b1:ab:16:ec:47:a5:84:60:37:15:0a:78:67:e8:ff:a1:
91:49:21:1d:2a:16:84:36:10:13:2a:95:34:d8:f5:e1:64:a4:
10:b5:ce:52:cc:3e:74:03:3f:5b:8d:fc:c0:e2:3c:ba:3f:84:
62:6c:58:30:45:80:dd:c9:68:85:09:3d:a1:29:53:06:af:68:
9a:d9:4e:46:cf:eb:07:1e:04:b3:69:5e:76:ea:1e:27:11:63:
3c:a0:1c:df:67:48:c8:1f:ec:93:3c:ef:f5:7b:5a:a3:13:b4:
75:9f:e9:17:6d:0f:7e:9c:eb:b7:6c:9f:0c:62:cd:d5:e5:57:
56:ab:5a:53:8f:64:60:39:02:7b:73:ff:b9:d4:4c:a6:b9:11:
09:5e:8d:04:50:95:cd:10:58:24:ff:a7:33:9b:46:b3:5a:91:
d8:52:25:0f:02:4e:32:68:4d:98:d3:49:b3:a9:3f:f7:74:a4:
f2:3e:9d:f6:6d:fa:a6:fb:20:06:2b:82:a8:37:ac:a5:1d:b0:
df:45:c6:f4:7b:1a:2d:9c:f0:ff:22:41:d3:b1:d0:d0:0c:e4:
45:30:d7:13:5a:c0:8a:a2:c1:84:b1:5e:3f:4f:d3:5b:45:2d:
ab:a9:bc:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz
NDg0MjVCMTcwHhcNMjUwMTMwMjAzMjA4WhcNMjUwMjA2MjAzMjA4WjAYMRYwFAYD
VQQDEw02NzliZTFjOS1mYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9zUKWhYzTRH2fQumMOGnQwWewYkkrvd7UjZdG30B41aaoUZCA6NINnCx6gH
bmagRqik+3dKMQzcZKlTBPqW9uJKDR9eSYmznHOwwNpQSjtBZgR81oNJgPSvi0oY
hnuQzzh7FAndWg7JfuG/lJw116GsajIZxQO8CjvSFJaiFUQPNXt2z0Ejp0lXK/ao
OECi73QtVgA8IoQCKT3RTQr1wqbFW1oG8lho26QuBcJpSL24cJCTm0WmxLBDxIb2
Yug4OoQtsCe6qQqf2ZKvnQuklg1nVB9bITSi6413OrIeGAIf7IBjp+uMYeFmdzKJ
81jRRFsMrmGemEjjNmGsJv31pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnSM3fv
hSrqdFRbRy/EVaaVuzkvMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5
ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a
MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBu+PTCEdWqqWtE8IA3Xy38f0iYsrGrFuxHpYRgNxUKeGfo/6GRSSEd
KhaENhATKpU02PXhZKQQtc5SzD50Az9bjfzA4jy6P4RibFgwRYDdyWiFCT2hKVMG
r2ia2U5Gz+sHHgSzaV526h4nEWM8oBzfZ0jIH+yTPO/1e1qjE7R1n+kXbQ9+nOu3
bJ8MYs3V5VdWq1pTj2RgOQJ7c/+51EymuREJXo0EUJXNEFgk/6czm0azWpHYUiUP
Ak4yaE2Y00mzqT/3dKTyPp32bfqm+yAGK4KoN6ylHbDfRcb0exotnPD/IkHTsdDQ
DORFMNcTWsCKosGEsV4/T9NbRS2rqbyt
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:43 2025 by rpki-client