Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json)
Hash identifier: uQ3MLdMO6XefYqn3fDnkXLM0cFcjFdZIs9C+cSwyWwI=
Subject key identifier: AE:A3:D3:9B:51:15:4C:3A:4C:CB:1F:FD:29:38:78:1A:8C:FE:8A:35
Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
Manifest number: 6D
Signing time: Fri 31 Jan 2025 05:54:49 +0000
Manifest this update: Fri 31 Jan 2025 05:54:48 +0000
Manifest next update: Fri 07 Feb 2025 05:54:48 +0000
Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: 18VM6q0KXkMscwgZ0+2KhHUCD6z0++aBxRtQAKhHdUA=)
2: ACCFC92C38E111EF99DA0575C4F9AE02.roa (hash: IQkb9vrLkHbIT0l31y7TiaLX4Y+rsb5o734kaa0aCok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C
Validity
Not Before: Jan 31 05:54:48 2025 GMT
Not After : Feb 7 05:54:48 2025 GMT
Subject: CN=679c65a9-fc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:b6:56:24:ee:90:a8:e6:08:20:8b:87:cd:
ba:bb:87:47:ee:f8:8b:82:48:0f:cd:33:24:8e:3e:
52:e9:33:a9:86:88:db:4b:03:d4:f3:44:9e:ce:d1:
14:d4:29:4a:08:b2:26:fe:38:49:4f:be:50:d3:05:
24:6d:5d:88:50:10:17:c8:05:74:8d:c2:1e:56:26:
7b:50:97:de:2a:7a:25:ab:49:51:21:82:56:4d:f1:
ed:e9:40:4b:f5:50:0f:e7:db:cf:b4:b1:f0:ad:68:
6f:6d:c4:50:24:f3:a0:ef:da:51:bd:46:53:8d:93:
2c:1e:0a:2d:4b:90:ca:53:c2:91:ff:cf:0a:60:46:
88:62:ed:56:55:25:11:5f:5c:e1:c8:74:06:c0:47:
66:37:63:8f:6a:ca:0a:17:d9:0b:1a:81:49:e9:67:
90:51:eb:56:a3:56:ed:7d:07:f7:3e:c1:c9:95:14:
1e:be:66:1d:c0:e9:04:84:62:b9:16:0b:4f:fb:ea:
c5:00:66:93:5f:f7:db:84:59:f9:88:45:7e:16:6b:
35:28:9e:6c:3f:91:63:17:4f:0b:13:54:15:5e:cb:
46:be:88:24:cb:ab:42:9c:bf:1f:72:08:a9:17:ab:
cd:b0:6b:15:bb:66:f1:0b:85:46:88:f8:40:67:42:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:D3:9B:51:15:4C:3A:4C:CB:1F:FD:29:38:78:1A:8C:FE:8A:35
X509v3 Authority Key Identifier:
keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b4:22:92:21:46:02:02:8d:aa:ee:50:80:a8:32:43:18:0b:
be:4e:f5:0f:b7:a2:3e:88:3f:95:bf:46:a4:53:a2:93:80:b1:
d2:4e:11:be:b8:11:ac:f7:37:6d:ff:c7:09:13:a1:f7:92:7b:
0a:e5:d2:ca:74:c0:f6:b7:fc:f6:3e:b1:9e:69:19:85:34:27:
e0:25:5a:2b:1e:1a:b7:d6:94:87:37:0a:89:e6:7b:44:97:03:
76:3d:e1:c5:13:60:d0:e0:78:2a:6c:85:c3:6a:5e:7d:fa:c6:
79:a5:8a:25:2a:37:71:1c:ce:1b:dc:ff:d0:7c:b7:99:d5:c8:
26:60:7f:45:b5:71:b2:42:f3:b2:25:71:3c:af:12:c0:f0:aa:
a1:93:02:d2:25:ef:d9:cf:4c:25:b1:fe:69:ab:51:43:40:27:
be:ec:4c:2d:56:6d:12:5f:9b:a1:27:61:e4:4a:f5:f9:47:b9:
11:60:3c:b4:6f:7b:46:e4:fe:1e:d0:c0:92:ab:d0:a1:d3:5d:
9f:07:db:ca:b0:34:de:ae:10:cf:ea:c6:a1:a3:5f:a8:69:b4:
ed:14:77:e9:a5:36:6e:45:0f:7b:1b:b0:8e:ea:89:9a:85:48:
0a:9f:c7:79:c4:5d:3f:df:4d:c5:c0:ba:ad:2c:48:8c:8f:36:
70:c6:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:19:06 2025 by rpki-client