Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json)
Hash identifier: EAz4ScpbijofjhzAogNsybuN51gNYie4zoWkhI9o3QQ=
Subject key identifier: F8:C0:56:A4:6F:01:F8:D6:51:30:23:50:18:83:F9:A0:8F:C5:E9:A1
Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
Manifest number: D4
Signing time: Fri 31 Jan 2025 04:50:31 +0000
Manifest this update: Fri 31 Jan 2025 04:50:31 +0000
Manifest next update: Fri 07 Feb 2025 04:50:31 +0000
Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: 3bJAR9oqRfHVvfCg+xvpAvenOfJRhAddgBAR8qJtDJs=)
2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: g8Elzlw4tRoXrBliL3a4u/fyR/SHOUoxq/RpKAIAzgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383
Validity
Not Before: Jan 31 04:50:31 2025 GMT
Not After : Feb 7 04:50:31 2025 GMT
Subject: CN=679c5697-9bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:2a:2b:29:1b:72:cd:48:ec:c6:99:4c:d5:
97:d5:7e:b8:4e:85:45:ff:09:c7:5e:6c:67:e1:81:
38:22:68:9a:ef:d7:11:fe:83:6d:c9:38:6e:1a:36:
3c:cc:70:ee:25:c2:a7:ed:fd:c0:ea:7c:e8:0b:67:
a2:75:ee:2a:40:b1:b4:36:74:d3:51:92:99:a6:8b:
54:e8:b1:c0:ae:28:e2:7a:74:73:cd:71:9c:23:9d:
30:38:bb:cf:5a:cb:37:91:97:6e:1c:4f:a4:2a:af:
fe:50:73:3a:74:b3:1d:1c:9c:92:75:60:ff:67:a6:
e7:eb:83:31:51:90:ff:60:5a:22:4e:83:d9:98:75:
69:56:41:49:d0:b2:8f:8b:06:64:81:9f:69:85:11:
6a:93:41:a6:94:42:e1:4a:33:27:69:0a:8e:89:d3:
94:73:84:f8:f8:9f:9f:0c:98:32:7f:34:27:34:73:
79:ee:84:d2:b0:6d:dc:42:2b:85:85:02:aa:71:e2:
3f:e8:df:28:3c:fb:0c:3d:5f:49:4e:63:ba:9c:49:
19:26:0d:44:d3:ab:0e:d1:50:f7:3e:5e:8c:85:5c:
8f:96:f7:f3:0a:a0:d1:1b:e1:b2:ab:83:86:5b:1a:
0b:d5:4a:6c:f9:4c:a6:a7:e7:c7:83:87:7c:aa:bf:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:56:A4:6F:01:F8:D6:51:30:23:50:18:83:F9:A0:8F:C5:E9:A1
X509v3 Authority Key Identifier:
keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1f:b0:fb:29:23:42:bb:8a:7b:83:ba:4b:fc:ae:ce:c7:14:
06:ab:08:d8:5b:e5:3f:fd:c1:66:b4:0d:98:dc:df:8e:ff:bf:
2a:74:6a:1e:9d:fb:8f:b9:c6:93:be:97:6d:12:59:98:dc:44:
19:06:42:91:ac:c0:8d:8f:00:ac:4a:38:42:6c:5d:99:e5:ce:
2d:5c:67:bd:2e:21:6d:09:ec:1b:f1:a2:65:92:55:1d:41:fc:
79:7c:1a:91:3e:7f:65:30:ca:f2:0b:14:0d:f8:ce:30:e4:b3:
49:5c:18:94:d7:6b:cb:44:40:89:c1:ff:c3:c9:d3:ec:09:09:
ce:6a:8a:f1:90:cf:5b:40:f9:86:ce:f2:5e:0f:db:ca:12:25:
06:4b:47:b2:87:c5:ff:07:53:c0:21:65:76:68:f8:37:be:41:
4f:a1:09:2c:42:06:b5:47:81:64:b2:e5:ee:db:14:14:4c:b9:
52:e5:55:ef:a9:ba:cb:a7:75:a8:e4:d7:40:1f:50:07:65:25:
29:ac:91:b5:b9:46:d4:f6:d2:75:c5:9b:ac:dd:0e:2f:31:dd:
6b:22:4d:be:a6:88:40:90:df:c5:69:39:ef:92:bf:92:ca:93:
27:73:d3:a7:82:33:e0:10:56:38:e4:79:0e:f0:dc:90:ff:aa:
58:52:d1:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5
QjM4NkQzODMwHhcNMjUwMTMxMDQ1MDMxWhcNMjUwMjA3MDQ1MDMxWjAYMRYwFAYD
VQQDEw02NzljNTY5Ny05YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhwqKykbcs1I7MaZTNWX1X64ToVF/wnHXmxn4YE4Imia79cR/oNtyThuGjY8
zHDuJcKn7f3A6nzoC2eide4qQLG0NnTTUZKZpotU6LHArijienRzzXGcI50wOLvP
Wss3kZduHE+kKq/+UHM6dLMdHJySdWD/Z6bn64MxUZD/YFoiToPZmHVpVkFJ0LKP
iwZkgZ9phRFqk0GmlELhSjMnaQqOidOUc4T4+J+fDJgyfzQnNHN57oTSsG3cQiuF
hQKqceI/6N8oPPsMPV9JTmO6nEkZJg1E06sO0VD3Pl6MhVyPlvfzCqDRG+Gyq4OG
WxoL1Ups+Uymp+fHg4d8qr/a5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjAVqRv
AfjWUTAjUBiD+aCPxemhMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5
MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx
YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqH7D7KSNCu4p7g7pL/K7OxxQGqwjYW+U//cFmtA2Y3N+O/78qdGoe
nfuPucaTvpdtElmY3EQZBkKRrMCNjwCsSjhCbF2Z5c4tXGe9LiFtCewb8aJlklUd
Qfx5fBqRPn9lMMryCxQN+M4w5LNJXBiU12vLRECJwf/DydPsCQnOaorxkM9bQPmG
zvJeD9vKEiUGS0eyh8X/B1PAIWV2aPg3vkFPoQksQga1R4FksuXu2xQUTLlS5VXv
qbrLp3Wo5NdAH1AHZSUprJG1uUbU9tJ1xZus3Q4vMd1rIk2+pohAkN/FaTnvkr+S
ypMnc9OngjPgEFY45HkO8NyQ/6pYUtGo
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:00 2025 by rpki-client