Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft (raw, json)
Hash identifier: WrmT0F8hkGWigGmJHDuVcbqHfwtN5TgmzV9pLK8cOCo=
Subject key identifier: 17:FE:3E:FE:7C:7E:AB:6E:67:4D:5C:1C:6B:64:CE:E1:22:36:2B:D0
Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Certificate serial: 05A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
Manifest number: 05A2
Signing time: Thu 30 Jan 2025 23:10:12 +0000
Manifest this update: Thu 30 Jan 2025 23:10:11 +0000
Manifest next update: Thu 06 Feb 2025 23:10:11 +0000
Files and hashes: 1: lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl (hash: MZ+l1N9ggLVcZd/Arw1bKUtt8bncxv9qEYg3xWH5u8w=)
2: A8086732B6DA11EBB7B67954C4F9AE02.roa (hash: ldWjzJ4l8BsIeHREFrvU51ElQcTYEq5MkB9HbZsC/bI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1448 (0x5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472
Validity
Not Before: Jan 30 23:10:11 2025 GMT
Not After : Feb 6 23:10:11 2025 GMT
Subject: CN=679c06d4-cb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:61:b6:8b:e3:bd:1f:89:f5:53:90:5a:b7:
a0:7b:5d:76:74:1d:1b:9c:98:e2:cb:a5:ad:9a:cc:
8b:c1:1d:f3:c9:d2:d4:71:86:0b:e5:8d:b4:75:0e:
d5:42:44:0b:ff:17:bd:4e:e9:d9:ff:fa:27:98:5f:
1d:dd:a8:be:44:4a:6c:8b:0f:3a:d4:b8:c3:4a:04:
83:00:3c:91:2f:55:1d:9a:14:1a:89:37:c3:95:49:
c4:aa:5f:51:42:bf:6b:4b:d1:4b:9d:61:fd:38:4c:
35:20:23:22:86:82:11:79:55:a5:55:f6:0a:b5:49:
07:05:01:93:cf:a7:98:ab:09:ed:4a:7c:dc:dd:ab:
81:ef:45:f0:22:72:a3:51:1f:0d:2d:b6:e7:52:e2:
39:64:55:fc:88:62:65:04:89:31:91:50:dd:35:08:
73:0e:2c:7f:d9:e8:0d:7a:a7:d7:2c:fd:13:04:d5:
f4:e2:7b:9c:ad:2f:a3:da:cf:62:20:da:94:b8:7d:
73:b5:f1:7f:be:5f:cb:93:0e:59:ef:7b:38:82:15:
d4:36:c7:c8:a8:d1:89:51:54:31:70:8a:c9:1e:1a:
fd:5c:2a:7c:1f:0d:dc:88:55:dd:95:04:b5:08:9f:
e6:d5:aa:96:68:53:ee:36:2c:1d:a5:4f:a6:ed:db:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:3E:FE:7C:7E:AB:6E:67:4D:5C:1C:6B:64:CE:E1:22:36:2B:D0
X509v3 Authority Key Identifier:
keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:3a:0e:7a:dd:66:96:33:87:89:18:8a:9d:d4:bc:cd:50:
40:f3:45:10:85:88:b8:0e:2f:5f:45:01:65:4c:7c:c6:15:dc:
86:06:67:51:c3:ce:9b:07:e6:48:e0:a8:3b:72:89:7d:b3:b6:
69:09:77:9d:e8:18:81:15:6d:ed:03:99:87:86:78:54:ca:d1:
c0:fc:59:45:a7:77:aa:c9:f5:ac:fe:18:ad:79:c3:02:67:0d:
76:40:82:aa:cf:ce:be:9a:fc:07:36:5a:e7:16:ec:a9:7e:19:
fd:57:3c:7a:34:a3:fe:b8:17:ef:73:22:b5:5d:ef:4a:8c:7f:
3a:e0:e9:3a:b0:ec:01:c2:1d:ff:c8:a4:34:ca:44:ab:11:7b:
9c:85:eb:06:f1:7b:de:46:54:24:26:ad:71:0d:7d:fd:e9:ed:
33:ad:cf:5e:13:18:9e:cf:09:94:75:ae:95:a7:bd:89:1e:6d:
89:cf:21:d9:ef:b9:ec:74:d1:11:a3:7c:66:be:74:e2:69:21:
77:1c:d7:24:b8:db:45:43:64:a3:67:54:1d:a1:81:66:ed:fc:
c7:59:a7:c8:98:b9:8b:0c:16:ea:12:8c:aa:d4:5b:75:ba:29:
03:24:cc:6a:85:01:16:bc:0f:79:39:56:20:7c:df:2d:81:0f:
db:81:0d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:42 2025 by rpki-client