Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json)
Hash identifier: EqLj1Lzj/LaesYpXPCzzbiCqITl+zZeA59WwCY8cDI0=
Subject key identifier: 6E:D4:5F:CF:65:CD:5F:B1:EE:D5:47:5D:2A:02:E2:34:6A:A9:6D:C9
Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Certificate serial: 0554
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
Manifest number: 0550
Signing time: Thu 30 Jan 2025 23:26:27 +0000
Manifest this update: Thu 30 Jan 2025 23:26:27 +0000
Manifest next update: Thu 06 Feb 2025 23:26:27 +0000
Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: wTNN2Nu2ebMzr6q9IMucGBnFxUC25X958eZF9kaZm3Q=)
2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: YG0ZC8oIIxI+2G2v2VjdwVQ8+l6RciS4VjDR9GF+Pmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Validity
Not Before: Jan 30 23:26:27 2025 GMT
Not After : Feb 6 23:26:27 2025 GMT
Subject: CN=679c0aa3-3219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:21:22:3f:fa:52:b1:01:87:90:6d:62:a6:
a9:e8:16:e0:9b:61:1d:97:9d:e4:23:8c:72:18:2f:
85:75:50:80:85:72:7a:3d:37:e6:da:48:72:43:11:
5b:ea:44:c6:53:f1:f4:89:08:9f:c0:d2:7f:b4:15:
73:22:d3:ce:2b:ff:62:7a:fd:96:6e:df:43:64:14:
ba:93:d2:19:03:2e:b8:14:9e:fd:8d:59:46:bd:0d:
4b:45:60:d5:9d:4f:bd:88:b1:8b:4d:77:17:9c:31:
63:09:e4:d9:53:3f:d9:40:a5:cb:e2:54:58:3f:47:
88:0b:10:cb:cb:48:0e:54:f3:cc:0e:40:6a:2a:9f:
ce:93:45:10:05:be:dc:d6:df:df:6b:8f:c6:ee:a8:
53:39:65:17:66:f1:50:f6:42:ed:6d:70:5e:52:3b:
5d:e7:12:49:a6:f3:31:af:50:8f:eb:76:8b:fd:20:
5a:17:11:1f:27:bd:7d:53:e3:39:61:f6:7b:9b:41:
07:de:9c:6a:99:97:38:87:28:de:f6:d8:50:5d:f5:
94:92:f5:8e:40:8c:91:8f:19:1c:82:e0:81:7f:65:
3f:50:ad:eb:eb:26:43:85:3a:51:de:62:42:0e:a3:
2e:bb:9c:20:8a:11:1f:23:24:fa:31:ee:bb:30:1f:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D4:5F:CF:65:CD:5F:B1:EE:D5:47:5D:2A:02:E2:34:6A:A9:6D:C9
X509v3 Authority Key Identifier:
keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:b4:0e:4c:52:f1:d5:16:c7:38:d0:d3:8c:15:e5:ae:0c:
fb:63:6f:67:eb:a7:6b:47:9f:15:8c:85:d4:1c:99:30:9a:79:
ca:e4:54:39:ac:42:dd:81:a2:1f:56:59:9c:1f:13:5d:89:2b:
85:83:9c:0c:78:33:c0:2e:81:5c:fd:ce:76:67:d9:0d:42:87:
99:d8:39:d9:8f:c2:02:d5:77:b0:09:86:cd:81:db:57:60:93:
e1:4b:e4:22:54:dc:24:81:ca:5c:1a:60:15:9b:9a:41:80:e0:
41:27:80:fd:2c:41:da:b3:b2:22:1b:e8:ae:74:1f:ae:a2:44:
d7:27:04:6c:95:0a:f8:24:00:dc:11:48:db:e8:f0:7e:b8:94:
f3:e0:e5:c2:83:39:7e:1d:dc:71:95:0b:c3:cd:da:92:52:8d:
f0:a7:b6:48:56:f6:0e:e1:75:0f:1f:97:39:55:22:a7:4c:bc:
06:1b:48:92:6c:45:41:7a:8b:c6:89:d5:75:b1:71:b7:aa:cf:
4f:c0:41:d3:9b:2c:30:d5:44:21:56:5d:4c:75:72:2c:af:52:
53:6b:b1:53:13:b9:1c:bd:50:eb:65:cc:41:5a:32:9b:aa:8f:
17:06:65:2c:bf:4c:13:23:31:b5:c8:14:e9:96:da:44:ff:1f:
fe:9c:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:56 2025 by rpki-client