Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json)
Hash identifier: n9sIRmOn/cTh1gTOu8o1EJYXeXnYgul3WePcfUcXgG0=
Subject key identifier: 72:18:97:4F:A7:59:4D:AE:7C:8A:D5:E6:68:24:EB:96:1B:2A:EA:2F
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial: 059D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
Manifest number: 0596
Signing time: Fri 28 Mar 2025 23:29:13 +0000
Manifest this update: Fri 28 Mar 2025 23:29:12 +0000
Manifest next update: Fri 04 Apr 2025 23:29:12 +0000
Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: dNbA/XNHbzioxIJvzl4x1YzzzlpMx29fhIFVcDQ7B6c=)
2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1437 (0x59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D8C3
Validity
Not Before: Mar 28 23:29:12 2025 GMT
Not After : Apr 4 23:29:12 2025 GMT
Subject: CN=67e730c8-7f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:4a:80:cc:df:5b:67:af:e1:ae:a7:ba:32:
ea:08:52:67:94:40:6d:3d:81:af:b0:0f:4a:f2:d6:
bd:43:89:34:d3:8d:26:fa:ae:ab:a8:c2:87:e9:07:
cc:d5:57:98:03:61:eb:a7:e5:2b:ca:9c:05:69:ba:
5d:51:92:88:7b:62:fb:8f:94:ff:3f:54:48:67:9b:
7f:7d:c9:78:79:42:26:c5:f2:df:81:93:6c:d2:cd:
a8:f8:47:da:a3:b3:66:e6:d4:59:69:7c:51:26:3b:
0f:56:55:70:ed:59:62:be:e4:53:0f:5a:2d:8a:09:
35:f9:e7:77:3b:35:ed:c7:3a:68:a2:74:90:0b:c6:
22:5a:6d:97:74:bc:9a:d1:8d:88:2b:4a:d7:d4:dd:
16:fa:31:25:68:fa:0d:46:a0:35:2d:0f:53:34:97:
98:a1:cf:37:d4:70:c9:7d:71:57:f0:57:88:5c:c0:
d2:11:ed:c7:fe:67:63:1b:17:2d:5a:61:fc:f4:97:
8b:6a:5f:db:b2:32:9c:b2:85:f8:52:08:ff:c0:6b:
4c:85:64:cc:d5:08:fe:3d:dc:9e:27:51:7d:1d:20:
d3:22:0b:1f:64:4a:8e:9b:3e:63:f5:56:7d:09:74:
8c:5a:b1:ce:cf:ae:2f:03:64:f3:be:86:83:39:90:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:97:4F:A7:59:4D:AE:7C:8A:D5:E6:68:24:EB:96:1B:2A:EA:2F
X509v3 Authority Key Identifier:
keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d6:26:12:01:7a:f5:8b:56:7c:13:43:73:37:02:f0:d4:48:
65:6b:a7:56:ea:fc:11:ce:3f:07:6b:20:25:c5:63:72:64:ce:
8f:cf:4d:d3:83:41:01:f5:40:29:ef:a8:81:1a:da:28:92:80:
c7:56:90:bc:0b:dc:b2:4c:fc:17:ab:48:af:20:57:ec:43:ca:
89:6e:86:60:53:93:dc:9e:61:8d:4a:02:88:9e:e8:d6:fc:a5:
4f:23:34:95:3f:08:35:f4:d4:e1:15:af:b5:30:68:31:18:13:
a6:52:dd:5d:e4:b3:74:23:c5:17:e8:77:1d:1c:a9:bd:e8:45:
40:b4:4e:f8:63:a7:c1:15:2b:28:4f:10:a1:78:97:ad:00:78:
4b:dd:c8:ac:ed:18:94:fa:d7:51:c1:cf:ec:16:7a:e7:ad:3c:
b7:b4:8a:66:e3:ce:fd:cd:27:d1:4b:fe:31:4e:ae:f6:22:43:
17:c7:d0:4f:6d:1b:51:b4:93:26:e1:1c:d6:f0:1a:cf:90:25:
18:33:b6:fc:b2:24:f0:b2:33:3f:24:00:f5:ad:82:13:c1:1e:
1d:b3:5e:bc:a0:db:c9:45:d7:5a:54:16:74:d9:b6:39:4e:89:
ad:4e:7a:0a:a8:a4:f5:98:fa:41:f5:6b:82:f6:93:3a:2b:1b:
8b:02:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:33:06 2025 by rpki-client