Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json)
Hash identifier: tp0nxdEDjBS/sCU3K676F0BQR1XeYIN9GXQ1BCHDSHE=
Subject key identifier: 60:C1:6E:7C:6D:20:09:DE:BD:99:42:8C:34:84:DD:AB:1B:C8:15:63
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 03:52:36 +0000
Manifest this update: Fri 31 Jan 2025 03:52:36 +0000
Manifest next update: Fri 07 Feb 2025 03:52:36 +0000
Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: QtsNwDPL5Ybpf9chBPAVEZ7zdJPrzK372BfAx+IZgP4=)
2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=)
3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Validity
Not Before: Jan 31 03:52:36 2025 GMT
Not After : Feb 7 03:52:36 2025 GMT
Subject: CN=679c4904-b49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:9f:32:81:c9:91:fc:a2:52:14:ab:37:5e:
d4:65:46:57:5f:e7:71:a3:33:06:4e:42:50:b8:d2:
2c:d3:de:23:df:83:28:c1:f0:37:14:d9:2a:43:e8:
99:90:c4:b0:68:86:96:1d:89:69:14:13:5e:16:43:
a7:e2:c0:62:97:56:0e:d1:6d:60:73:d5:f4:1e:b0:
b5:a0:eb:08:37:11:e4:94:f6:f9:bf:38:7a:3e:81:
dc:7d:7a:20:af:3d:1c:00:5a:05:e5:c0:94:35:73:
97:a4:92:3c:0d:bd:4a:d0:c8:c4:9d:40:68:29:08:
1d:85:8f:6f:f9:60:6d:db:ae:22:8d:73:b2:a8:ea:
54:36:29:3b:aa:3e:8f:05:d2:47:a2:36:9d:b0:fb:
c1:b0:7e:a8:b5:c4:16:29:67:da:b4:cc:30:91:7d:
fa:5d:31:4e:b4:89:31:3f:be:49:3a:17:20:b5:4f:
9c:cf:60:f0:fd:be:64:ba:c8:1f:6b:26:55:26:60:
a1:e8:7a:00:90:bf:bf:38:08:96:0d:90:ad:5b:17:
85:3c:54:d7:45:68:9d:d9:b0:f7:b6:e4:7b:94:22:
4e:0a:2a:e2:d0:6c:93:c7:7b:31:91:47:4e:59:e9:
5f:63:a0:81:8f:41:6c:6e:fb:34:04:1e:33:49:04:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:6E:7C:6D:20:09:DE:BD:99:42:8C:34:84:DD:AB:1B:C8:15:63
X509v3 Authority Key Identifier:
keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cb:1e:39:b3:8f:1d:d0:0a:43:38:e9:3f:ee:f5:27:a6:ea:
4d:2e:09:31:38:56:7e:93:e2:51:ab:e6:fb:36:ed:f5:33:08:
37:97:71:eb:1d:0c:b5:74:24:df:32:2d:9a:b2:d1:ce:cc:62:
60:04:7e:82:9c:83:f8:97:0b:66:10:59:a8:be:f4:c9:3e:22:
3f:af:a8:4b:cb:bc:8f:f4:92:ee:d0:6d:53:95:88:80:d0:30:
27:40:4c:06:e9:0b:86:d2:6d:a4:fb:35:b5:57:be:1b:f4:1e:
22:b7:d6:69:d4:21:5f:4e:a1:37:a7:85:77:54:b6:f7:78:86:
4a:69:b1:93:c1:84:f8:65:e9:6d:db:1b:15:50:17:93:a4:ea:
ba:70:1c:f0:df:9c:0d:d8:df:82:51:0c:d4:1b:35:2a:26:76:
2f:f9:02:3b:ba:87:bf:17:ce:fb:f2:d0:ec:30:a8:42:2a:71:
7c:7a:4d:27:cc:0e:06:2c:76:e1:1c:89:c3:fc:ab:0b:aa:2f:
30:76:da:3e:e4:b2:50:83:67:51:3c:44:ba:15:38:49:e3:97:
f5:9a:5b:ea:7a:ea:2e:27:43:cb:bc:56:40:b4:f1:d5:05:04:
a1:2a:42:cf:c2:7a:d5:9b:bb:f5:ad:df:6b:3e:30:6d:a4:03:
a7:c7:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:21 2025 by rpki-client