Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
File: lpDF1gn85ELDW5kW1WP58Ye2itQ.mft (raw, json)
Hash identifier: jIa0N9WiaZg0ioi9nmME0i/K2jg5iUATbeSLUgOyjs4=
Subject key identifier: C4:62:83:12:4F:21:4B:39:84:CC:9E:A4:DA:91:D5:7A:5E:FC:E4:17
Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Certificate serial: 0E00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
Manifest number: 0DF8
Signing time: Fri 31 Jan 2025 17:49:05 +0000
Manifest this update: Fri 31 Jan 2025 17:49:05 +0000
Manifest next update: Fri 07 Feb 2025 17:49:05 +0000
Files and hashes: 1: lpDF1gn85ELDW5kW1WP58Ye2itQ.crl (hash: o8VWomS1v5BP+Vic7OytkPGaPeoEDc39UjtfDDrgC0U=)
2: 6C153768CE5511EB9DD80C30C4F9AE02.roa (hash: 8FSx/7pmWfnqq5buFAKmXuNtb84bNl4hKWrDWfIfWSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4
Validity
Not Before: Jan 31 17:49:05 2025 GMT
Not After : Feb 7 17:49:05 2025 GMT
Subject: CN=679d0d11-76f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:8c:c5:8b:a4:dc:33:97:04:68:f1:b1:96:
a4:11:e0:33:4b:79:f5:78:45:8d:ff:1b:6e:a9:d5:
29:d5:f8:31:e4:5d:d8:57:be:45:b1:52:ab:bd:90:
ea:ac:cb:ca:df:54:32:f6:d6:ab:2e:65:b8:0e:dd:
0d:6c:55:53:29:d1:93:26:9d:ee:3c:cb:11:2f:67:
bd:d5:c5:42:c8:eb:90:7c:5c:bd:9b:64:59:8a:f4:
e1:f1:9c:b6:4d:83:88:41:34:5b:86:e5:94:1e:07:
84:88:c2:13:d0:2f:bf:20:ac:4e:9a:56:4a:aa:3a:
23:fa:7d:81:bf:49:27:9a:4f:0f:6a:12:9d:92:b6:
fc:f9:4b:62:e6:0c:e1:cf:a5:e3:40:66:9d:c1:11:
b3:92:7d:d7:70:b2:71:96:b7:6a:e4:53:43:b0:bc:
09:35:e0:4c:88:b1:cf:03:85:72:dc:1b:0c:e9:07:
db:05:40:33:f3:b7:e9:3b:7f:79:48:92:7d:a1:10:
b2:ee:75:3c:d7:6a:36:74:36:c6:24:2e:f5:f2:51:
1b:74:78:6b:74:f2:0e:19:4b:5c:53:dd:41:44:dd:
77:7a:62:5a:0a:d0:12:14:14:1f:7e:7c:da:c8:95:
a4:0e:33:df:b1:e9:21:e1:d0:90:38:7f:a5:ca:31:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:83:12:4F:21:4B:39:84:CC:9E:A4:DA:91:D5:7A:5E:FC:E4:17
X509v3 Authority Key Identifier:
keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:4b:22:59:aa:07:b1:83:a5:a1:90:09:82:de:31:e8:dc:
03:e7:87:f5:3e:ed:fa:56:26:42:3d:77:5c:55:36:c0:c9:af:
7a:c1:82:33:4d:59:14:19:c0:ed:5a:3b:fd:fb:72:5d:3d:2a:
1a:43:5b:e3:a9:fd:7c:2a:d0:72:7c:6d:7a:67:f7:04:b9:fe:
c2:5d:ab:f7:35:b1:52:e9:97:28:bf:6e:2c:33:67:7b:55:7c:
46:71:77:04:37:82:98:3c:36:c8:b8:76:a8:40:ae:b2:92:97:
80:1d:e2:2f:7d:4b:42:d8:c5:3f:1e:c9:55:c0:c8:b3:cd:42:
b7:a2:f0:9c:ba:11:c7:a9:26:74:77:8c:4a:06:48:7f:f2:00:
1c:62:fb:c8:15:bd:56:1a:67:1f:d7:c7:22:34:7e:9e:1d:d6:
9b:66:f7:ca:64:38:2d:94:ef:4a:f0:da:02:e3:5c:b1:ca:71:
49:a0:6b:eb:08:3d:58:f0:c5:89:1f:95:ba:d1:a0:6b:ce:8a:
fd:89:c1:1b:8f:8f:df:df:b5:64:36:4d:2c:cb:5e:fb:52:a4:
ed:60:bc:e6:cf:67:b9:01:a4:5b:64:e7:2e:bd:67:0a:e3:c1:
d1:ef:e5:f4:75:62:22:a1:fb:c6:91:48:7c:02:02:9c:1b:97:
86:c2:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:10 2025 by rpki-client