Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json)
Hash identifier: +4Muo44DJuXnR1js4syZG6HpNT9HS7pl1g+kh/6BmGc=
Subject key identifier: 49:63:76:D0:0E:80:47:50:BB:09:9A:69:65:BD:00:07:1B:7B:DA:F8
Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
Manifest number: 0217
Signing time: Fri 31 Jan 2025 02:08:21 +0000
Manifest this update: Fri 31 Jan 2025 02:08:20 +0000
Manifest next update: Fri 07 Feb 2025 02:08:20 +0000
Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: 3sLptvVhrlJWlJw6/MDt5roKL4skpjWFHr4aO1r0F8k=)
2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: Zxoh9Ofh0OWLZ5oXPc2RuTae5hFatyn/nJ6RPctUa3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA
Validity
Not Before: Jan 31 02:08:20 2025 GMT
Not After : Feb 7 02:08:20 2025 GMT
Subject: CN=679c3095-6e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:ec:5d:58:5c:86:ef:23:f8:ca:d1:a7:67:
65:97:b9:40:67:d4:fa:8d:ed:18:e3:9b:60:45:8f:
a3:4b:cd:37:76:43:71:22:aa:7a:1f:6c:32:a0:c0:
f9:2e:b4:34:fa:69:d4:ab:87:81:f4:a8:b2:ae:09:
f0:b4:48:61:e2:00:ce:5f:ee:04:ae:f2:e5:58:d7:
ca:cc:3d:76:02:8d:fc:24:6b:2e:6f:59:44:1d:2c:
f2:c7:a6:25:85:bb:6a:18:51:d2:a9:db:aa:dc:3b:
8b:a7:cf:d5:14:b5:0a:fe:c7:d7:ec:bd:06:05:1b:
e1:54:2c:0a:13:ca:71:19:24:ce:40:21:41:0e:78:
9b:d5:98:9c:79:d7:60:51:4b:c7:74:1a:a0:05:27:
3b:2d:dd:cb:7e:59:47:d5:ed:54:d5:66:0f:11:f6:
d6:fd:b4:c0:f6:5e:c3:ae:3a:c7:e9:b4:60:11:d1:
82:63:8e:5e:85:36:71:06:d1:64:ee:2f:64:78:9f:
63:e7:4d:83:06:85:6d:e3:56:8e:10:86:fa:95:86:
57:a4:26:01:a4:cd:e2:23:79:33:de:8c:df:1f:0e:
6d:66:ba:dd:f5:7b:7d:10:a1:ab:d8:71:0e:ea:81:
1c:5a:2a:5a:c2:7b:eb:80:61:24:8c:af:40:4d:2e:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:76:D0:0E:80:47:50:BB:09:9A:69:65:BD:00:07:1B:7B:DA:F8
X509v3 Authority Key Identifier:
keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:57:81:11:fe:93:20:bc:2d:9f:7e:0b:8e:3a:0d:a6:c5:f6:
7a:58:a7:d0:f7:d7:0e:4d:08:13:9a:e1:18:40:53:fb:f6:21:
d0:10:69:50:11:a5:5d:f4:0e:5f:19:a7:88:64:83:24:b0:59:
c5:96:df:01:3c:54:fe:a9:9e:35:4e:d1:70:40:57:c0:b3:ef:
08:ba:97:6d:10:4b:3a:18:3a:88:b1:10:86:1e:21:27:61:9f:
c0:34:22:91:84:0a:f6:6a:3a:aa:fc:c1:b5:5c:db:59:5f:ab:
55:bd:c8:06:17:2c:28:53:ac:ec:16:b2:21:08:65:a5:ef:e3:
7a:55:84:a5:a1:c0:71:9e:cb:32:f9:2c:76:0c:68:d9:42:71:
aa:ea:79:e0:3f:94:d8:84:15:07:53:e4:33:c0:53:ef:51:9a:
71:94:31:a4:3a:46:c5:3d:29:a0:b1:62:eb:8d:8e:eb:fa:90:
60:95:90:de:b1:6d:37:93:5d:56:fb:8e:65:bd:ba:fc:6a:5b:
f9:10:2e:43:62:9b:66:64:19:e6:87:62:58:c7:ba:24:15:fb:
8f:8f:f5:4c:16:9c:3d:b9:a2:34:72:a4:55:e3:21:c8:19:2c:
6b:aa:bf:c5:f4:81:e9:fa:02:da:61:a4:55:22:35:cb:fb:ca:
b3:4b:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:17:41 2025 by rpki-client