Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json)
Hash identifier: 1Xu4EC5ILHpZkno+zYNELsAYEOpEogR251+i3aO65S0=
Subject key identifier: 27:80:65:2E:08:AC:CF:B8:3E:22:24:A9:B7:2A:4B:19:54:DD:D6:AB
Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Certificate serial: 14A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
Manifest number: 14A0
Signing time: Fri 31 Jan 2025 16:51:23 +0000
Manifest this update: Fri 31 Jan 2025 16:51:22 +0000
Manifest next update: Fri 07 Feb 2025 16:51:22 +0000
Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: DZPMCowj/RL5wSaK+F2IXmpFqOVvtDZk/Y7MJoWrZP8=)
2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: XC7zxbxHdlAL0s8scJjof6sYByPifHkXs75rsYmLs/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5288 (0x14a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Validity
Not Before: Jan 31 16:51:22 2025 GMT
Not After : Feb 7 16:51:22 2025 GMT
Subject: CN=679cff8b-aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:b3:18:17:44:dd:90:a1:ed:91:c5:52:3a:
b3:2d:52:e6:a4:b1:ef:ff:72:db:0f:42:85:bb:88:
55:cf:02:e5:ce:b5:59:11:da:79:ec:42:12:a3:7d:
55:28:9a:73:fc:36:7e:b1:16:95:20:8b:a9:79:10:
e0:15:a8:2d:f6:9d:4e:88:02:4e:07:35:64:f4:c7:
ea:4c:14:46:c3:fb:e9:69:ca:59:d5:72:eb:f3:46:
1d:b8:51:d0:cc:58:24:41:27:bb:a5:d7:27:9c:94:
ea:97:9f:99:26:cc:d0:6b:d9:75:da:69:3c:74:f3:
59:bc:05:43:08:0b:fb:71:f7:95:8a:f3:7b:97:72:
61:48:7d:93:81:58:91:32:99:c4:91:5a:e8:d9:a5:
a9:a8:a9:ab:f0:f3:65:c9:62:f8:3a:04:de:50:fe:
ac:fc:cc:8a:cd:e4:f8:2d:b0:e9:4b:e1:05:54:74:
0e:c0:2f:b4:2d:78:4f:77:31:42:6c:a8:fb:9e:1e:
b9:46:7e:19:2a:1a:a2:47:a2:3c:0c:ad:10:f9:28:
2a:39:fe:e1:86:a7:32:44:cc:cd:f1:a6:23:da:d7:
60:2b:bb:e5:ea:5c:25:8c:86:1e:76:7f:c4:9d:c6:
aa:24:89:46:15:b5:e2:4a:16:97:9d:5b:a1:3c:f4:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:65:2E:08:AC:CF:B8:3E:22:24:A9:B7:2A:4B:19:54:DD:D6:AB
X509v3 Authority Key Identifier:
keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:ef:34:2c:84:fe:be:b6:7d:70:ff:f5:7e:b1:07:e5:00:
5a:70:e6:a1:99:e9:f9:8c:ce:a2:18:f6:f3:03:b5:1c:19:fc:
b9:1d:3c:4c:23:ce:d0:45:bf:65:ce:7a:b2:b5:9b:f4:28:b9:
dd:67:6f:4b:9b:85:6b:17:13:32:65:ec:f0:29:05:76:9a:dc:
1f:f4:19:bc:2e:a2:af:82:ae:80:ef:08:44:02:64:98:4c:2c:
73:ad:f3:0f:a3:39:3a:30:30:d0:c5:0c:03:21:01:17:bf:fc:
37:6a:ba:39:4b:c8:ac:0c:98:2b:e1:a0:d1:af:dd:9a:92:b5:
46:aa:51:1d:56:80:2e:3c:d5:96:59:48:bf:c6:79:29:e9:19:
1a:fc:4a:d3:7b:47:49:47:0e:ec:e0:f2:94:23:7e:23:83:5e:
53:18:ca:60:ce:49:73:52:2a:9c:54:ab:44:a2:91:32:83:db:
63:5a:d3:40:bc:b5:be:1e:d5:b5:bb:22:4d:68:8f:3e:59:5a:
87:f5:ba:ac:f7:a0:83:2b:03:d5:86:b7:e1:64:c1:5a:e5:2d:
bd:01:0f:4d:a4:4e:ed:b6:10:35:7a:c0:84:6e:99:11:93:c2:
7e:26:0c:7e:59:df:f8:0c:6f:8b:18:b1:f5:b0:97:7b:3e:14:
7d:70:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:52 2025 by rpki-client