Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier: auOfiUWYiqpTGrR/Vhjag6mVm7cmuWMS9SX8rZXANHo=
Subject key identifier: DB:35:17:EF:98:AF:CC:F7:7B:0E:7A:06:1F:2C:27:CC:C1:5E:2B:FF
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number: 0287
Signing time: Fri 31 Jan 2025 01:41:17 +0000
Manifest this update: Fri 31 Jan 2025 01:41:17 +0000
Manifest next update: Fri 07 Feb 2025 01:41:17 +0000
Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: EuYzNQYYDqm2q2AdvEw/mHWs33q8Cvj6gleVdtxIkhw=)
2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: lNppuM2/IdxAAhctCe7rRBT4xZtGXRvN8aRrKBnWfmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Validity
Not Before: Jan 31 01:41:17 2025 GMT
Not After : Feb 7 01:41:17 2025 GMT
Subject: CN=679c2a3d-bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:bd:bb:ea:50:9c:91:8d:3d:5b:be:e8:17:
f6:b3:63:f4:46:01:20:56:dc:6c:32:45:32:ac:cd:
67:c7:c3:53:04:74:42:78:cf:de:5f:f5:11:c2:35:
4f:d8:17:07:df:c7:08:e4:40:12:ba:d4:6c:a1:13:
3f:4f:12:1a:bf:cb:2f:26:e6:2e:a2:01:2b:7a:c9:
4d:89:7e:8b:6e:64:07:05:c1:6a:78:54:42:38:ba:
2e:2d:79:45:73:02:10:e9:d2:21:4f:48:90:f1:a8:
bc:99:e4:13:92:98:3e:f8:6f:c3:d1:8b:b3:a7:e7:
c3:b1:40:9f:64:d7:1e:b1:fd:84:da:ce:e4:60:05:
74:4b:d0:d7:c6:8c:07:99:0e:ff:5f:21:6e:6d:f2:
1c:3c:33:4c:4d:3f:1b:f9:27:b3:b5:c2:15:12:46:
cf:f7:1f:67:f5:12:1a:72:4b:ec:51:a8:20:8b:00:
9a:2d:a2:04:5c:f8:98:32:09:47:98:69:46:9b:e5:
a2:fd:f0:77:9d:c5:18:2e:88:e5:df:90:15:99:06:
07:b1:91:dd:fc:d6:ca:93:17:a7:7a:ed:d4:3a:67:
55:23:46:2f:82:00:91:54:fa:94:c3:eb:8f:df:ba:
a3:4f:a9:62:52:c7:da:e0:f3:05:5b:56:52:ce:a2:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:17:EF:98:AF:CC:F7:7B:0E:7A:06:1F:2C:27:CC:C1:5E:2B:FF
X509v3 Authority Key Identifier:
keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:06:73:b9:cd:30:c6:74:18:25:52:42:cd:95:70:96:bf:4a:
35:03:02:e7:65:97:68:0a:3d:50:57:00:af:37:99:c7:69:f6:
bc:e4:0a:75:c5:78:96:c6:b8:a4:3a:a5:65:9d:07:f2:ca:56:
63:c1:13:55:bf:55:a4:bb:19:9c:1b:2a:b1:7c:ef:9c:14:dc:
64:09:bd:d5:78:96:2d:5a:00:73:f5:c3:4c:fb:4f:27:05:46:
69:64:a1:85:de:45:d2:1b:2e:6e:bd:e8:1c:42:c4:89:d9:7c:
e4:31:32:45:ce:bc:03:b0:73:da:e2:ba:7c:b1:d7:29:69:d1:
0c:3a:8a:59:f7:80:b0:79:a2:87:25:57:4d:61:0e:56:e0:0a:
db:b3:73:54:fe:f3:ad:19:78:70:bf:ec:55:16:24:b7:e0:fc:
d3:20:7c:72:71:06:ea:ac:be:46:8f:fa:d2:b3:41:00:5a:b8:
52:41:fb:2f:bc:63:99:bb:7e:da:2b:1c:70:3f:7e:87:75:72:
3b:a8:8c:bb:c8:1c:4b:9c:e5:07:17:a0:aa:2a:cd:79:4e:5b:
9c:a0:b0:59:cf:6b:c1:81:c1:bd:4f:4f:9e:90:c4:62:cb:3c:
c3:e3:31:3b:7c:e4:f0:8e:62:99:77:63:c3:dc:34:df:a4:ac:
1c:43:cc:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE
OTZCQzQ5OTgwHhcNMjUwMTMxMDE0MTE3WhcNMjUwMjA3MDE0MTE3WjAYMRYwFAYD
VQQDEw02NzljMmEzZC1iYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsU+9u+pQnJGNPVu+6Bf2s2P0RgEgVtxsMkUyrM1nx8NTBHRCeM/eX/URwjVP
2BcH38cI5EASutRsoRM/TxIav8svJuYuogEreslNiX6LbmQHBcFqeFRCOLouLXlF
cwIQ6dIhT0iQ8ai8meQTkpg++G/D0Yuzp+fDsUCfZNcesf2E2s7kYAV0S9DXxowH
mQ7/XyFubfIcPDNMTT8b+SeztcIVEkbP9x9n9RIackvsUaggiwCaLaIEXPiYMglH
mGlGm+Wi/fB3ncUYLojl35AVmQYHsZHd/NbKkxeneu3UOmdVI0YvggCRVPqUw+uP
37qjT6liUsfa4PMFW1ZSzqIgmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs1F++Y
r8z3ew56Bh8sJ8zBXiv/MB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx
MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM
Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeBnO5zTDGdBglUkLNlXCWv0o1AwLnZZdoCj1QVwCvN5nHafa85Ap1
xXiWxrikOqVlnQfyylZjwRNVv1WkuxmcGyqxfO+cFNxkCb3VeJYtWgBz9cNM+08n
BUZpZKGF3kXSGy5uvegcQsSJ2XzkMTJFzrwDsHPa4rp8sdcpadEMOopZ94CweaKH
JVdNYQ5W4Arbs3NU/vOtGXhwv+xVFiS34PzTIHxycQbqrL5Gj/rSs0EAWrhSQfsv
vGOZu37aKxxwP36HdXI7qIy7yBxLnOUHF6CqKs15TlucoLBZz2vBgcG9T0+ekMRi
yzzD4zE7fOTwjmKZd2PD3DTfpKwcQ8wS
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:05 2025 by rpki-client