Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json)
Hash identifier: mw4KahAl5DDcupTX5kt51iepHr9OxeTPF5NiA21G97k=
Subject key identifier: 8C:AC:5E:52:33:5D:10:72:0E:7A:FB:4E:E2:04:A6:19:FD:47:31:A9
Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Certificate serial: 07D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
Manifest number: 07CE
Signing time: Thu 30 Jan 2025 21:01:42 +0000
Manifest this update: Thu 30 Jan 2025 21:01:41 +0000
Manifest next update: Thu 06 Feb 2025 21:01:41 +0000
Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: G76YHrid1MCt7vOmFXnTL+cDxzu8T0imCus/EaahbOQ=)
2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: YzRGLkjULPU+ioJVfbcrwOW+ba4Nt7jncXRuXU7oLyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344
Validity
Not Before: Jan 30 21:01:41 2025 GMT
Not After : Feb 6 21:01:41 2025 GMT
Subject: CN=679be8b5-44a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:04:63:38:c2:be:94:75:9c:29:18:93:32:98:
1f:d0:c6:61:ea:1e:4d:11:56:c0:08:d5:c4:ac:47:
98:35:6a:af:da:a4:66:4c:f7:30:fb:31:30:94:9d:
08:18:68:55:c1:0a:cf:4b:47:4b:61:b7:44:a0:14:
6b:a2:4b:cf:95:bc:1b:b1:ec:e9:0b:b1:b3:58:80:
12:77:9b:55:ce:55:a8:bf:69:bd:dc:bf:14:b3:90:
c1:75:8d:14:e5:de:9b:ac:b0:37:10:83:c9:ea:63:
15:96:80:8e:0d:1f:af:d3:fc:61:46:3b:f1:cf:77:
cd:a3:df:85:4c:ba:60:6f:1e:18:05:b2:42:3a:c2:
81:a7:f7:eb:65:1c:d9:40:fe:3f:d3:9d:80:57:ac:
80:c9:44:33:64:c1:8e:1f:95:13:83:a2:51:9d:55:
fd:08:e3:36:11:61:1b:1f:e5:76:7c:79:7a:13:64:
c4:88:57:aa:8c:1d:cc:0a:b0:74:62:58:81:b5:8c:
2b:0c:b5:ff:3d:9b:bf:68:93:36:60:08:5b:f6:3d:
a2:09:1f:9e:ae:04:12:d4:41:05:35:72:c3:65:9e:
8f:8e:98:1a:7e:7d:bc:dd:33:b8:22:ea:af:37:29:
52:7b:35:8a:44:6c:3d:54:a0:c3:73:b6:67:81:b9:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:5E:52:33:5D:10:72:0E:7A:FB:4E:E2:04:A6:19:FD:47:31:A9
X509v3 Authority Key Identifier:
keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:ff:43:31:2b:65:48:e2:4d:ac:8f:58:56:13:71:d1:c3:
83:55:15:29:66:f2:9a:e6:7d:92:2e:e6:9e:9a:7e:1b:cd:8d:
4c:ea:ba:d8:11:73:51:f4:49:d5:89:f6:89:a7:2d:db:ea:f2:
1b:d2:1f:7a:74:c7:94:7f:93:33:9c:96:c4:af:5a:93:cc:aa:
dc:79:22:f1:94:0f:30:f0:04:37:bd:94:1d:37:3b:db:db:9e:
10:4e:af:17:db:ce:2f:5f:f0:1c:26:f1:57:5e:bc:c9:56:8a:
fa:44:6b:9c:47:9c:4c:77:b2:d6:4b:08:51:a0:0d:1a:ea:e8:
86:65:79:71:42:c8:3e:a1:b0:ba:cd:3a:70:fd:b5:c6:3b:21:
2e:b5:28:e8:21:a5:43:e2:01:af:f9:f7:37:00:fb:7a:ca:3b:
bd:f8:b3:30:ea:cd:6e:ac:1d:24:78:65:a9:d9:22:97:e6:ad:
04:f2:b7:e5:ec:f9:0f:d0:14:f1:44:fd:b7:c0:ad:ab:22:f4:
f2:8b:a2:bb:33:e1:65:7e:a8:4c:81:43:c0:ba:9f:86:66:a6:
d2:47:37:56:fd:13:af:9c:26:c7:cc:f3:6b:18:c8:f1:5d:a6:
d2:fe:82:c7:ac:4a:fe:66:cc:7e:03:54:aa:51:c5:e1:fd:f4:
32:77:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:43 2025 by rpki-client