Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json)
Hash identifier: KuWZEL3eRaRDJLh2aWZC7natINBKPUE4W+ZKFSi5zNo=
Subject key identifier: 57:14:EE:A2:D8:40:A8:BD:D5:45:19:78:8C:22:F7:26:BE:5A:3C:44
Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
Manifest number: 54
Signing time: Fri 31 Jan 2025 06:19:24 +0000
Manifest this update: Fri 31 Jan 2025 06:19:24 +0000
Manifest next update: Fri 07 Feb 2025 06:19:24 +0000
Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: mqlPMOA8DtDvaB41054pbw+V+pvnWxBtohqdifHgICQ=)
2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: r6mTJvt8SukGGtNb+WgynqBgaxV1KBCRpaFxjoCbFH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
Validity
Not Before: Jan 31 06:19:24 2025 GMT
Not After : Feb 7 06:19:24 2025 GMT
Subject: CN=679c6b6c-9b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:d4:a4:e2:0a:16:18:95:40:47:cf:a9:14:
bd:d6:99:11:e6:9c:a0:50:0a:01:e6:64:22:e5:3a:
ea:f0:ea:46:68:0d:de:3f:70:ca:05:9b:4d:c0:02:
f3:3e:10:65:6a:f0:c7:01:fa:fa:d3:4a:df:be:03:
c4:5f:52:0b:d0:ba:3f:c0:0e:5d:57:be:76:e6:13:
fa:2a:04:ec:27:8c:af:24:74:cc:97:86:4d:40:cc:
c0:41:be:42:99:a3:5a:8f:46:d4:e5:82:cc:c3:49:
9d:61:bc:12:e2:c8:00:3d:0f:ba:24:fb:d5:f0:7d:
ba:97:91:99:f9:23:6e:b9:43:1e:67:aa:d9:94:a5:
64:e6:d0:f0:e0:41:02:78:34:9e:81:ec:3c:32:d8:
d9:d9:59:fe:6f:e6:4c:00:0a:78:e4:a1:c7:90:b2:
ad:8d:e3:1c:47:cc:04:c1:d5:fc:85:c4:fc:72:49:
1a:2d:0a:50:83:6d:18:6b:9d:07:77:31:9a:5a:5b:
3a:05:af:90:70:aa:f1:19:f2:84:63:94:bc:1b:58:
16:f7:34:70:21:c4:86:33:77:eb:81:85:d4:9c:7d:
88:c8:aa:a9:51:4c:31:df:a1:8e:5e:fe:b9:af:ca:
4d:15:c7:33:ec:8c:50:80:ff:bd:f2:60:da:25:28:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:14:EE:A2:D8:40:A8:BD:D5:45:19:78:8C:22:F7:26:BE:5A:3C:44
X509v3 Authority Key Identifier:
keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:22:23:fc:4a:8d:d8:91:ef:b1:2e:96:80:33:e2:6e:2d:d6:
4d:68:90:26:f9:08:60:11:7e:40:f8:5b:68:c9:39:31:1e:88:
46:75:95:3e:b2:f0:b8:59:05:4b:21:8b:36:e1:5d:ac:d6:66:
bc:bf:34:09:f9:38:ed:ee:04:52:f0:14:7d:7f:2d:5e:0a:2b:
98:bc:57:4c:ac:a7:44:81:4a:d5:da:03:7b:e3:7a:55:a9:40:
1a:b6:ae:21:70:0c:c9:81:74:77:33:0c:90:9e:b8:ba:12:de:
88:23:db:e6:31:f6:38:ce:bd:7b:ec:82:da:b0:3b:fa:1f:31:
db:df:83:e3:e9:16:fb:79:ab:c3:52:f6:dd:a8:1b:82:ee:e7:
ea:98:b2:aa:98:c1:3c:f0:f1:20:f8:fe:53:07:17:14:a4:7d:
1e:12:5d:0f:70:3d:7d:c4:4b:26:2d:cc:9d:6f:09:65:d4:06:
2c:9e:de:34:3f:a6:7d:13:0c:eb:02:a7:12:0d:7d:d6:08:21:
7a:52:c6:47:6f:ab:27:c8:00:46:11:2c:e7:1a:93:1d:3e:4b:
a6:da:5c:a2:6b:a5:a1:83:76:32:6c:e4:f1:52:44:22:bb:bb:
19:97:6e:b7:fd:1c:69:99:e5:11:55:5c:f9:9e:9f:b2:0f:ec:
6f:ee:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:05:10 2025 by rpki-client