Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json)
Hash identifier: gAxdUnKWKgZCaqT4qYi8n5e1X7dqoSkbEfRClOzqXfA=
Subject key identifier: 4D:55:32:F1:B1:5C:2F:B9:98:D1:1A:C8:5C:60:F4:C8:6B:CE:2F:EC
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0ADE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
Manifest number: 0ACF
Signing time: Thu 30 Jan 2025 19:29:06 +0000
Manifest this update: Thu 30 Jan 2025 19:29:06 +0000
Manifest next update: Thu 06 Feb 2025 19:29:06 +0000
Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 2rVhWU49UijJdKEjAsjsI5uLgGt40VLhdo2ANeM7oQg=)
2: F8BCA17670C611EFBF64266FC4F9AE02.roa (hash: 0Xx+rkEjjbktgMFiX+FcjqqR+mXuZTeDGa2pOpO6Mfs=)
3: F7BA1FCE70C611EFBF64266FC4F9AE02.roa (hash: dfP5faa/Yw/V2aLs80Ju1Tmgf9Tm0S0758+0J53NO7M=)
4: 0C2E16A470C711EFBFC3326FC4F9AE02.roa (hash: DZwm66T5S6HqaQoftbBkQEQnSPQUH86bvRpL2sS6VKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Jan 30 19:29:06 2025 GMT
Not After : Feb 6 19:29:06 2025 GMT
Subject: CN=679bd302-f922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:ae:79:49:e2:c1:48:c9:b6:af:6e:39:22:
b7:b6:c5:80:cf:a7:a6:0a:4d:dc:9d:c7:f3:6c:42:
d9:d3:98:03:21:7d:17:a9:10:ff:62:09:f4:52:02:
24:d8:19:d5:85:54:b1:dd:b4:bc:e0:66:1c:58:3a:
1a:9f:9a:8f:a8:b7:c1:32:7f:fa:20:f9:41:64:db:
90:93:ac:ed:37:1d:55:d0:1d:65:48:01:89:62:28:
75:37:6d:92:d1:f5:f1:72:c0:88:f5:a0:bd:40:07:
a9:dd:ae:ab:1a:ff:2c:5a:ce:e2:78:c0:63:27:24:
dc:8a:42:6e:41:d1:71:50:b5:17:51:bb:ca:e2:17:
79:79:fb:52:c5:17:10:f2:03:9a:26:08:ca:b9:74:
04:59:33:1e:6f:69:d5:88:f0:3d:23:b8:e0:6a:bf:
3e:19:d7:cc:7b:6e:71:09:22:08:ac:c3:fa:a5:98:
e4:76:cd:27:fe:45:14:a9:9f:e0:39:45:00:4b:7c:
36:f2:c1:14:20:cd:b3:52:76:f9:17:7a:20:a6:d0:
3b:99:bc:f7:7f:49:81:1d:67:59:89:a7:aa:b8:4d:
42:e1:f8:76:41:f5:1a:81:cb:7e:25:48:1f:f4:61:
8a:45:49:b3:18:c5:ad:48:72:bf:a0:84:3a:54:c0:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:32:F1:B1:5C:2F:B9:98:D1:1A:C8:5C:60:F4:C8:6B:CE:2F:EC
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:e1:e7:6e:45:e2:3a:f0:70:1f:3f:4c:d2:80:ef:20:78:
84:69:9f:89:3f:a9:90:88:41:e7:41:02:a7:64:cd:fa:b0:91:
e7:cd:4f:42:48:69:37:fd:af:7c:4c:da:88:10:ff:d5:3f:6a:
15:15:d1:14:7f:d1:e6:8b:f0:8c:00:3e:2a:20:3f:ac:79:68:
dd:c1:5b:54:95:56:db:b9:68:4c:3e:62:68:ca:41:3a:a8:12:
24:41:88:3b:8b:55:47:05:0b:45:5d:73:0d:4d:1a:51:62:af:
0f:fe:39:34:d1:9d:d0:f8:22:56:09:5c:72:d7:07:8d:6a:dd:
ba:69:e6:90:59:81:1c:8d:17:85:72:be:81:8e:22:dc:d0:3d:
e1:6d:08:1a:0f:ed:3e:55:ae:4c:65:3a:75:41:c0:07:be:df:
7a:82:b0:00:07:8e:5f:a0:67:70:ac:64:c2:f7:43:af:a2:a8:
45:dc:bd:8d:cd:32:0b:e7:e5:8b:13:c9:02:a9:9e:8c:ad:dc:
7b:d5:36:fb:d3:f2:b9:c5:07:bd:5f:e8:3f:33:88:15:ba:ec:
e2:a1:f7:42:88:1c:5a:da:b8:3e:74:d0:c2:94:c0:fd:2d:cc:
20:5f:17:97:9a:a7:e4:df:9e:57:c4:cb:f6:4c:d2:5b:98:6a:
1c:5c:97:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:33 2025 by rpki-client