Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: imKD0EizN4ZzMHO53hO4oAJ44JoUurmIZJ8Nulhx3CM=
Subject key identifier: C4:94:F3:C1:F7:B9:58:24:09:41:3C:11:EC:9C:61:1A:BE:CD:DA:F1
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 016E
Signing time: Fri 31 Jan 2025 03:09:01 +0000
Manifest this update: Fri 31 Jan 2025 03:09:00 +0000
Manifest next update: Fri 07 Feb 2025 03:09:00 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: gsrivGDDzSSW8J1R+9TRgsw6AoTKKAMEqmC/q8DxpYo=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: GAnumIiRmCLh007aW5B9KGyssfw0NgLo3NksPvf73Us=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Validity
Not Before: Jan 31 03:09:00 2025 GMT
Not After : Feb 7 03:09:00 2025 GMT
Subject: CN=679c3ecc-a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:a1:be:10:f2:8c:1d:fe:63:14:64:ea:2b:
1f:4a:f5:5b:3c:7b:34:be:c4:cf:8d:fe:1a:b6:82:
ca:1f:9e:fa:1a:de:3c:b4:b7:4f:3a:be:4d:58:ea:
10:ad:63:25:f9:c3:5d:42:32:64:d5:8f:31:33:cd:
c2:31:28:70:e5:95:a5:a9:f5:2a:c8:bd:8e:c5:e0:
82:85:8e:b5:81:07:c7:d7:be:8c:72:6b:ff:44:74:
bf:17:88:2a:6d:86:d2:ab:9a:ba:23:cc:13:3d:72:
7e:e5:3c:36:6d:27:a1:40:66:c4:c6:cd:83:c9:9e:
04:58:be:0a:e0:64:0f:6a:98:12:05:6e:64:d2:8b:
8b:c2:2a:25:59:38:9d:cb:b3:6d:1d:e0:81:a3:5f:
51:57:ba:da:ff:61:f5:d9:af:3c:5b:d7:89:86:56:
f2:cb:c4:ed:b1:55:b2:a3:3e:d3:9d:bd:f0:eb:98:
8b:e1:d3:62:de:7f:75:cc:77:cc:df:d1:74:0c:09:
6e:c4:88:e0:8d:94:04:81:6a:bb:51:35:16:0a:e8:
da:0b:5e:0d:ff:66:f8:26:9b:e6:51:f1:0a:f1:f5:
ab:94:d8:1c:6c:f2:36:9f:d4:92:33:19:6d:c4:aa:
af:f8:11:81:4c:0e:b7:d3:e9:7d:db:5b:52:50:30:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:F3:C1:F7:B9:58:24:09:41:3C:11:EC:9C:61:1A:BE:CD:DA:F1
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:30:2b:57:eb:0b:51:c0:32:f5:6e:f6:8e:ef:b1:36:e3:c8:
ad:e9:f2:f6:88:ca:8a:80:4a:3f:1f:c3:2a:de:65:1e:eb:0e:
fc:8a:21:ea:b8:86:37:28:f2:f0:d0:df:29:c9:90:d0:92:92:
83:6b:6c:c2:01:c4:7c:e2:94:b1:46:55:c5:9a:af:1f:a2:d5:
25:32:c8:14:ac:8c:79:2b:16:7d:1d:5a:9c:c2:8d:29:a7:0c:
06:39:94:98:fc:cb:a5:48:87:85:d7:f7:0b:d2:06:e4:57:06:
5e:61:14:81:ae:b5:03:25:fc:e5:f0:38:6f:d8:16:80:fb:99:
20:55:f2:16:df:6e:57:bf:f1:4c:9b:42:cd:1a:73:0c:47:82:
42:45:b1:05:52:fd:de:52:ef:98:20:a3:b2:f6:47:42:de:aa:
a9:40:1e:23:e4:48:bc:3f:4a:63:af:f6:21:c9:41:00:52:f4:
63:ec:e0:58:d6:5f:82:c9:f0:46:9c:52:e7:79:79:ef:82:6c:
52:61:3d:e4:4a:3f:2e:db:cb:e5:b2:a7:0a:cf:8f:71:67:cc:
90:65:e1:0d:85:53:71:b5:88:f0:40:29:1f:15:03:83:c0:db:
3d:fb:07:3a:e1:e5:c4:12:b9:e1:55:e9:db:a2:09:b0:c4:a3:
74:bc:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:13 2025 by rpki-client