Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json)
Hash identifier: j3ix3zWlB396IBSSgznM8x8jJS1Fz/YD0RMBR0y41Vo=
Subject key identifier: 07:DC:4A:BB:EA:21:4A:3D:F1:5C:9C:E0:90:AD:A8:0A:96:00:48:32
Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
Manifest number: 34
Signing time: Fri 31 Jan 2025 06:43:21 +0000
Manifest this update: Fri 31 Jan 2025 06:43:21 +0000
Manifest next update: Fri 07 Feb 2025 06:43:21 +0000
Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: 5bE+XVNfBu/+k6MeLeLXEsoW7k3IlVOazCDXtGGfLI4=)
2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: rmLzWyNdWKY0XtIRa8zpHc0j9dgfJvXq9eWmRerS2EI=)
3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF
Validity
Not Before: Jan 31 06:43:21 2025 GMT
Not After : Feb 7 06:43:21 2025 GMT
Subject: CN=679c7109-8496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:38:19:bc:d2:fc:99:1b:73:fd:3b:1f:ea:
93:1e:a8:8b:4f:f1:8a:d9:94:83:df:e5:27:5b:c9:
7c:cc:18:37:d6:39:d4:dd:b1:d0:d5:e4:b5:bc:84:
0d:38:12:0a:3f:3f:55:d7:74:0b:09:aa:90:6b:2b:
19:e5:65:3c:2d:92:5e:3b:d0:fc:81:f3:d3:60:e7:
3f:04:f6:45:dc:43:3b:f5:94:2d:38:09:47:99:02:
3a:bb:e2:9e:42:fb:33:02:5c:9c:4b:c8:12:58:58:
21:e2:45:26:76:50:f4:ef:06:95:8f:69:c0:3b:ba:
6e:e2:b3:fe:42:b0:f1:b0:53:24:dd:45:03:09:bc:
84:da:21:dc:6f:47:25:bd:85:8a:a0:0a:bf:f6:cf:
e2:59:79:66:b1:64:cb:b4:0a:e3:d2:9b:c3:91:3c:
8a:63:b6:9e:3b:21:9e:e0:e9:95:28:a4:ae:5e:33:
2f:37:1f:57:1c:48:b9:7b:7a:7a:ef:54:a6:35:28:
86:cd:f2:25:fc:f5:fd:9a:fc:b9:50:ec:5c:bb:31:
50:e8:0f:69:a0:df:df:71:f0:8d:0e:26:3c:3a:a2:
93:d6:b8:e3:a3:43:9a:5f:21:1e:0f:dd:74:a2:43:
c7:10:eb:c4:9e:48:53:02:b3:b3:d9:a9:0a:09:ee:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:4A:BB:EA:21:4A:3D:F1:5C:9C:E0:90:AD:A8:0A:96:00:48:32
X509v3 Authority Key Identifier:
keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:41:69:0d:f4:22:58:e6:87:fa:80:72:dc:ea:bc:d0:a1:f6:
af:11:0a:29:67:84:2b:15:bc:73:75:1f:b5:c4:8e:48:e0:42:
95:17:b9:ef:f0:5a:00:fe:08:67:95:9a:8e:7b:ae:55:94:ac:
34:50:81:0f:42:cf:f5:2e:21:64:d3:43:fc:cb:b2:f1:04:e2:
9c:73:98:33:39:cb:67:50:bd:5a:f0:63:84:d2:4e:76:ff:7a:
85:e5:01:1e:7f:59:35:70:d6:84:e6:11:49:2e:57:92:bb:9c:
67:63:ce:5d:d8:d4:2f:5c:41:0d:40:7e:29:4c:f8:79:87:1f:
45:5f:48:9f:3c:fc:23:f5:75:f0:c0:ed:fb:35:57:5e:bd:8b:
22:4b:b2:cf:75:83:cd:68:31:ab:31:bb:8d:9b:5d:ff:95:67:
a2:62:ef:4d:ad:c4:8e:ec:6a:12:e6:a3:50:9d:d2:99:e2:bc:
c4:18:45:0a:ca:76:a0:3d:96:c1:ae:ec:2d:d4:81:d7:e9:86:
b5:81:9f:91:76:d2:bc:69:2b:9a:a1:fd:a3:df:0a:de:f9:c0:
b0:0e:34:ea:1e:c8:e2:95:09:f8:b8:5f:fd:2f:4c:48:0b:03:
24:07:95:b6:65:58:b2:80:14:b1:1b:82:d8:30:1b:58:3a:08:
8a:ce:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:04 2025 by rpki-client