Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier: QswmakjOeYtgISJhs7Sr/KAyTWcuEDzOgi7LU0mJ4ZA=
Subject key identifier: 91:44:7C:14:03:87:4D:09:30:38:78:13:E3:BA:C2:A1:D2:77:9D:B8
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number: F4
Signing time: Fri 31 Jan 2025 04:23:08 +0000
Manifest this update: Fri 31 Jan 2025 04:23:07 +0000
Manifest next update: Fri 07 Feb 2025 04:23:07 +0000
Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: 44qTLtnOAC8m1vG7LyuCC6S231Kqofpg63v9+jS2TVM=)
2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Validity
Not Before: Jan 31 04:23:07 2025 GMT
Not After : Feb 7 04:23:07 2025 GMT
Subject: CN=679c502b-2f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:16:e5:6a:cb:3f:14:30:d5:e7:5c:85:3b:21:
92:4c:b1:92:10:17:a6:7a:9a:e8:5c:a1:cc:55:aa:
3d:2e:96:e0:27:2f:f8:4b:43:1e:5c:0c:8d:33:78:
79:db:b0:f2:e9:de:9e:84:ee:d3:e5:87:b1:7e:ee:
b9:2f:1c:01:21:9c:4a:cd:94:39:fb:03:eb:a8:1b:
a5:39:e5:b8:3f:f0:ff:60:b1:36:2a:1c:07:4d:12:
26:0c:a8:77:68:8b:12:68:0e:12:5d:a5:b9:7d:e5:
c0:a2:9a:15:03:4d:26:be:5b:2a:70:ff:13:a9:d7:
fb:4f:50:59:20:0f:2f:23:5e:ed:6d:f5:c7:f4:76:
78:82:62:f9:3a:2e:01:b1:ae:90:37:9c:2e:c2:15:
d6:1c:2b:28:fb:0f:06:23:ba:08:c8:98:98:93:1d:
7c:36:95:0f:3f:3e:66:2f:85:ca:94:27:1c:9a:c3:
68:a6:5a:21:1b:a3:48:6e:f6:b4:a0:c1:2c:38:c6:
56:7e:3d:be:3e:a0:32:8f:6f:3b:7c:e7:d0:84:94:
f1:6f:0a:bf:6f:cf:70:a7:04:89:0d:a9:ec:3f:c7:
f1:65:45:b1:42:71:14:79:8a:0a:25:55:11:d1:24:
08:92:b3:5f:d8:b7:4b:00:a9:0f:fb:1e:49:f0:09:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:7C:14:03:87:4D:09:30:38:78:13:E3:BA:C2:A1:D2:77:9D:B8
X509v3 Authority Key Identifier:
keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:38:ae:c2:a1:75:9f:c0:bd:ea:74:41:1a:68:79:8c:59:32:
de:b4:f9:a4:b2:ea:f3:0d:45:87:fe:4a:df:b9:15:c3:5f:72:
1a:34:47:45:c1:6e:a9:c5:67:09:dc:09:49:ff:9a:15:31:ba:
be:c0:5a:f3:90:99:6f:2d:e3:07:89:a2:17:91:9d:6b:95:14:
2c:50:ed:2b:48:ae:8e:26:cc:10:0b:d5:12:e1:47:2a:ca:0d:
17:a4:9c:d5:26:1b:d8:45:9a:10:b6:86:1d:49:b3:4d:20:bb:
9e:03:54:95:fc:46:80:84:60:ce:2e:07:7a:92:0b:07:30:f1:
98:fa:18:d9:33:cd:2f:8a:6a:0d:d5:26:54:6f:97:d5:9b:2b:
15:28:df:f8:14:1c:37:58:7c:6f:64:f1:bd:82:f9:00:a0:8f:
9c:48:f5:d9:78:e3:cd:af:3d:1f:d2:2d:0b:55:b9:01:0f:04:
33:7f:ca:6b:fe:6d:be:d2:25:df:01:50:f7:ad:50:fd:bd:ec:
2f:b3:5e:48:ae:97:73:e2:1f:65:6d:c8:53:d2:ec:80:46:68:
bf:5c:cd:09:c6:9a:ca:24:82:5f:16:c9:af:25:f8:68:75:2a:
0c:79:ce:05:36:da:3c:38:65:b0:31:61:91:4f:16:f4:cf:26:
a1:10:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:29 2025 by rpki-client