Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json)
Hash identifier: lGPX7rfsU2B4XMc2d3XVEcZjH3pcLvWseT+5XRFn6Xo=
Subject key identifier: 23:12:3A:40:D8:7C:28:54:A0:9B:42:52:8A:2D:41:5C:74:20:E5:71
Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65
Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
Manifest number: 0120
Signing time: Fri 31 Jan 2025 03:53:14 +0000
Manifest this update: Fri 31 Jan 2025 03:53:14 +0000
Manifest next update: Fri 07 Feb 2025 03:53:14 +0000
Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: 0gGBi2axHize1T4oTyUtAAwk2ntHxBJY0DU3m0b3Py8=)
2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465
Validity
Not Before: Jan 31 03:53:14 2025 GMT
Not After : Feb 7 03:53:14 2025 GMT
Subject: CN=679c492a-08b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fc:39:68:b7:65:47:ce:d3:02:2c:bc:70:cf:
85:bb:2e:99:0d:3c:ae:d1:95:09:95:3f:eb:6f:21:
f8:da:94:4a:e4:ae:f4:b7:fc:61:9d:b8:71:2b:49:
63:12:ef:77:94:12:9e:76:db:30:15:92:7c:38:88:
6d:7c:89:cf:f9:38:17:5b:ff:9e:64:fb:2b:d3:92:
91:98:b1:5b:e8:24:1f:d2:bd:ed:0f:7e:54:9e:2c:
b0:64:23:79:13:22:a9:9c:af:1e:40:b4:94:1e:c8:
26:51:55:a3:0b:6d:f6:94:b9:5c:b8:3c:7b:48:32:
8a:5d:c9:17:12:81:43:f7:f9:65:60:33:80:2f:e2:
6f:58:13:a9:e9:0f:4b:5d:0c:81:0b:33:ba:b0:0a:
de:9a:b6:29:a1:5b:ef:bb:36:b8:5c:7a:13:e9:c3:
02:f1:12:bf:db:bc:c6:46:9d:5c:c4:94:4e:c0:0a:
0e:5c:d5:92:c4:c6:85:aa:59:b4:d7:e0:15:0a:67:
fa:4f:35:94:91:b3:f0:7d:77:a5:d2:f4:e1:f8:12:
76:1f:d3:27:41:7e:74:f0:3c:63:78:15:1e:d4:aa:
22:11:3a:03:c3:0e:0e:c5:ce:5b:77:e9:cc:b8:65:
ae:95:4d:70:39:ee:7e:8e:cd:1f:71:09:ee:f4:66:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:3A:40:D8:7C:28:54:A0:9B:42:52:8A:2D:41:5C:74:20:E5:71
X509v3 Authority Key Identifier:
keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:bf:25:08:20:a9:8a:6f:21:56:d1:6e:8c:2c:79:5e:1b:
f1:1c:ba:94:11:20:14:db:48:5a:18:65:f2:31:dd:b1:7c:67:
db:74:29:a2:6b:4f:39:2a:39:e7:2c:2a:c2:07:6f:14:82:2b:
e3:1a:10:e2:f4:49:38:a2:6a:bb:aa:c8:bf:c0:d5:a3:ba:c6:
b8:41:8e:5c:78:72:8c:cf:af:a1:a9:d4:b4:a4:1a:2d:09:57:
31:0f:85:c3:36:58:0c:c8:65:30:7f:84:cd:03:58:8f:92:41:
1b:2a:d6:6a:73:79:0e:f6:90:1e:6a:1f:38:47:21:75:a0:40:
2e:eb:da:a7:a9:92:3f:78:2d:ab:e0:5c:93:8a:d1:aa:8a:25:
ab:11:e8:ca:33:63:7e:95:ce:6b:1b:b9:97:2f:58:b2:c1:fc:
82:6a:b0:5d:e1:0f:85:af:d3:a1:4e:4f:40:5d:08:0f:bc:03:
fd:d2:52:55:e3:b2:e1:7f:80:fa:d8:e4:62:31:62:5e:f0:24:
3a:40:8c:c2:20:4a:e0:38:8f:a2:1b:58:5b:e4:a9:bf:43:ba:
98:ff:4b:7f:08:93:83:ff:8e:a7:2e:a0:e1:54:cd:22:03:78:
6d:af:55:31:ef:44:6e:87:89:6e:ec:40:07:38:b3:80:51:0c:
ce:93:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:34 2025 by rpki-client