Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json)
Hash identifier: tkgQpw4YuzR7ULZnAUMkvBFIkQMtfslfPW+3o8Bn6UI=
Subject key identifier: 85:96:1E:AB:40:E9:E2:45:67:1A:5B:15:BC:73:B7:86:C2:19:0D:E1
Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
Manifest number: 69
Signing time: Sat 29 Mar 2025 06:17:29 +0000
Manifest this update: Sat 29 Mar 2025 06:17:28 +0000
Manifest next update: Sat 05 Apr 2025 06:17:28 +0000
Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: E6U9lwCvoJdUPjS8Epc7JfL2GUHOf4co/iof9cKzVKM=)
2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144391
Validity
Not Before: Mar 29 06:17:28 2025 GMT
Not After : Apr 5 06:17:28 2025 GMT
Subject: CN=67e79078-751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:8f:61:8b:af:29:6a:7a:07:d7:3d:c5:72:
b4:8d:05:9e:83:4f:e5:66:73:f8:a6:cf:0f:b5:d4:
10:d3:c8:00:36:10:f2:c6:a3:39:e7:ad:d7:95:71:
d7:fc:eb:13:d0:30:2d:67:06:92:07:89:53:3a:24:
67:60:6c:12:38:97:ae:f4:05:20:94:5b:62:9a:52:
4d:16:cf:66:ea:2e:36:8e:ed:0a:87:67:18:43:3d:
73:de:dc:c9:67:b7:55:9f:a0:11:62:4a:de:b7:fb:
24:ce:06:95:60:cb:53:21:21:8d:e3:a1:f7:e5:5a:
59:27:66:7b:72:a4:4b:ae:9a:78:0b:46:b1:d7:48:
a0:70:b2:07:63:41:dd:0a:eb:10:2f:e1:26:2c:f3:
f8:d8:7a:89:3a:1a:66:90:ef:27:3c:2b:24:a7:40:
a2:53:34:e6:4e:57:5e:08:72:ba:d9:04:a3:2a:42:
09:a9:fe:2b:13:13:c9:09:a6:40:46:0b:e3:7b:1c:
cc:e1:bd:aa:a8:1d:5a:01:2b:88:65:74:98:1e:30:
d5:31:c3:de:98:ef:f3:6a:ef:1c:9e:d1:b1:67:00:
c4:82:ec:17:6b:26:ed:95:07:e7:58:1f:8e:8e:b2:
6b:ad:c7:46:41:72:07:7c:8a:4f:ab:86:ac:ba:51:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:1E:AB:40:E9:E2:45:67:1A:5B:15:BC:73:B7:86:C2:19:0D:E1
X509v3 Authority Key Identifier:
keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:1e:3a:c3:19:67:71:a5:25:7f:ae:f2:f5:40:db:46:a1:9c:
e5:ba:58:aa:79:7c:29:31:42:d5:9d:42:57:3b:ca:96:35:b9:
a0:61:38:3d:0f:86:b7:e5:4e:0c:12:81:53:08:b7:5d:d5:83:
cc:1e:05:24:53:b4:c4:c1:54:f4:7d:f8:5d:a5:c2:32:cb:5d:
ea:43:98:29:c1:7d:43:a8:2f:a9:80:e7:25:e2:c8:ca:fe:0a:
a9:57:ea:f8:9c:26:cb:c0:61:7f:68:ed:62:10:47:51:f3:46:
44:70:23:05:5d:39:98:79:99:57:c4:d7:f4:f2:f5:ff:0c:94:
e4:59:c4:7f:9e:2a:5e:17:6a:26:2a:46:82:00:c9:6f:a1:97:
b7:7d:59:da:80:f1:6e:55:78:09:7a:1b:49:37:6e:8e:33:da:
24:5c:8c:0e:ae:f4:a1:e1:af:91:af:a8:18:6d:29:b5:43:ba:
82:42:59:85:91:e2:8e:48:bf:61:ba:1f:d9:5a:7a:88:ba:1e:
d1:ba:d6:8b:f4:c7:4e:83:f2:c2:ea:8e:d5:ed:71:09:b0:cd:
81:ca:8f:7a:2d:2c:14:05:0e:0d:d4:24:5d:4d:ee:f3:5b:9e:
32:fd:37:fd:45:01:14:97:53:a9:84:70:09:ad:09:44:6c:14:
7d:93:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:00:57 2025 by rpki-client