Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json)
Hash identifier: wll8CZLViXv7eyBLE8watqr3riiD39UJgkWb1cBzq6E=
Subject key identifier: 0A:9C:22:0E:44:88:06:8D:EB:3B:32:C6:B4:79:07:68:33:AA:EF:FD
Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
Manifest number: 0183
Signing time: Sat 29 Mar 2025 03:08:54 +0000
Manifest this update: Sat 29 Mar 2025 03:08:53 +0000
Manifest next update: Sat 05 Apr 2025 03:08:53 +0000
Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 5hUIaitctzidHrnUaGnXeP72CLy1Cvyc8xgoAy+33fQ=)
2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B31D
Validity
Not Before: Mar 29 03:08:53 2025 GMT
Not After : Apr 5 03:08:53 2025 GMT
Subject: CN=67e76446-71eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:15:6c:2f:c0:8a:d2:4c:58:79:52:1b:92:
77:a0:a1:1b:ab:76:45:4c:28:7d:58:2a:29:ba:4b:
ea:17:0b:cf:97:39:ce:a9:70:19:42:c5:9d:b9:e5:
93:22:e4:6b:7f:da:0c:d2:ff:b8:a4:cc:ff:b5:aa:
b8:b6:bf:64:90:ec:bc:bf:a8:2d:3b:1f:28:7b:f8:
75:b1:0f:92:5a:09:cb:ef:b7:49:0c:ec:39:4f:b9:
04:65:d9:3f:97:64:aa:02:c8:92:e7:23:7e:6c:4b:
17:53:7c:18:5e:f3:66:22:d9:62:ca:e0:1f:56:2b:
b2:75:55:86:da:60:5d:8e:2b:e9:f6:a1:d5:97:29:
4d:ae:fa:b6:15:63:3c:ef:6b:fc:28:eb:05:ee:e7:
fd:97:b1:a1:12:05:23:70:d2:90:f6:98:7a:fd:80:
8a:ef:8a:b9:26:4d:19:dc:59:6e:d8:fa:e7:67:29:
fa:52:46:8a:9e:c3:5f:89:7a:a2:42:fe:44:02:aa:
28:dc:a8:c1:34:cd:29:61:37:a6:e7:76:95:ed:51:
f8:40:02:4d:c6:07:62:99:88:5b:01:0d:0a:76:e7:
8c:b8:e1:96:db:5d:bd:3a:3d:c6:29:de:e7:a3:2e:
3b:0f:7f:a3:34:db:3f:56:94:05:6a:23:97:17:f6:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:22:0E:44:88:06:8D:EB:3B:32:C6:B4:79:07:68:33:AA:EF:FD
X509v3 Authority Key Identifier:
keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:a7:d7:9a:d6:86:ff:cd:a2:2e:95:49:2c:1d:58:34:29:ed:
51:99:77:3e:5b:8d:1c:cd:3e:16:6b:da:86:29:ad:89:c5:fc:
1d:ec:b1:9f:ef:c7:33:72:68:9d:8d:9a:05:c8:aa:6f:d3:ef:
4f:e3:62:89:0e:f9:9f:31:fd:66:4e:f6:f6:bb:43:bb:b6:05:
1b:85:a2:18:13:d7:a7:5e:2a:c2:ae:43:00:9d:60:96:0e:f2:
c4:25:12:60:e2:ae:84:7c:74:b0:9f:af:67:bd:c7:48:7d:05:
e8:19:c3:10:26:7b:13:8e:ad:3f:fb:79:e5:56:c9:e0:42:cd:
9f:5a:4a:02:6d:7c:29:e4:9f:8b:c6:27:64:51:ba:63:a1:a3:
f3:0c:b3:9a:03:42:03:44:ea:a9:f9:96:d2:48:15:52:0e:89:
15:ba:49:86:90:95:f8:1a:9a:86:e2:0c:cd:02:27:5a:4b:c9:
0f:81:74:16:35:c9:44:39:37:42:bd:1c:51:a2:2a:47:f0:db:
e9:63:1f:d8:29:99:02:be:17:cd:ae:2f:c7:d9:19:11:ec:fe:
72:a0:69:71:be:60:35:8d:72:ed:0f:8b:74:da:e8:a4:8a:9e:
16:c9:e3:96:37:0d:48:78:97:ac:6d:8f:29:57:2f:d6:be:b3:
59:47:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:10 2025 by rpki-client