Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier: LTXk6M+lsrJJWkmd9dJTfvwRnNVLG2WzlAo2gDC3ap4=
Subject key identifier: EB:1D:3F:05:16:FE:02:38:20:6F:D9:D3:B6:9B:94:CB:B9:D5:1D:CF
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number: 59
Signing time: Sat 29 Mar 2025 06:31:50 +0000
Manifest this update: Sat 29 Mar 2025 06:31:49 +0000
Manifest next update: Sat 05 Apr 2025 06:31:49 +0000
Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: xvo7840vsU1dy0vMyz0RikJKsOo5A8DH3+43x/Tb8xc=)
2: B3DA6A52A96511EFB3EB6721C4F9AE02.roa (hash: FFio9OtmebaEzCJyFXTCLhGivXqzWOQVgzKrbso6U2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EAE
Validity
Not Before: Mar 29 06:31:49 2025 GMT
Not After : Apr 5 06:31:49 2025 GMT
Subject: CN=67e793d6-691c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:96:c0:c4:42:f9:f8:6b:ae:0c:f9:ae:40:
76:be:34:53:72:de:45:56:32:42:b5:36:ef:c9:dd:
e3:97:6a:0c:f7:e9:a4:af:40:13:0c:bc:51:15:78:
1e:4e:9b:f3:08:a5:29:6b:74:20:2c:9d:3a:be:8f:
15:86:9a:7a:89:29:d3:66:8f:d1:10:96:50:86:ec:
5b:f5:96:b2:49:c7:22:76:a4:fc:19:21:cd:03:f7:
2e:58:2a:d3:8d:86:83:d2:2c:2c:be:15:94:dc:59:
9a:78:75:6d:0a:e8:69:61:ef:ed:40:f3:79:25:62:
7a:c1:34:db:b4:23:68:6c:13:9c:ed:31:ca:18:d3:
28:7e:bf:e8:0a:da:28:09:b5:af:f9:09:e9:99:6d:
bc:56:97:c7:48:26:69:b4:5b:34:f2:c6:f0:37:c0:
ca:05:4a:14:c1:51:36:48:05:f4:a7:62:98:62:71:
08:28:60:d8:64:8b:80:60:7a:32:c8:82:64:27:cb:
ba:38:5e:32:30:53:29:1d:cd:76:36:3f:fc:c1:a7:
a5:14:f5:a3:73:68:3a:13:08:b0:c6:54:13:9f:fd:
0d:51:de:0d:79:2d:59:53:1c:d6:f5:1a:8f:c7:cb:
cf:a3:e2:2b:a3:af:59:aa:e3:4a:21:0a:86:a6:ca:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1D:3F:05:16:FE:02:38:20:6F:D9:D3:B6:9B:94:CB:B9:D5:1D:CF
X509v3 Authority Key Identifier:
keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:68:2a:b9:41:10:70:6b:84:7e:2d:93:45:5b:59:c3:25:4d:
42:1f:75:e7:7f:5d:ca:ff:05:44:cb:43:26:63:a0:3e:f3:9b:
52:6b:c9:e4:0a:c8:6c:07:3b:7f:82:93:cf:cf:25:43:86:6a:
b1:d1:09:b3:f9:df:2d:1a:0b:dc:24:ec:18:93:f0:12:86:54:
48:67:d9:e5:a3:a0:7d:c2:c8:ac:25:cf:b8:f3:bc:94:71:2a:
2b:66:96:99:73:06:94:0a:68:f2:4d:99:7d:dc:81:96:0e:2a:
51:7b:06:ec:26:94:2f:d0:1f:eb:15:c5:36:4b:8e:9f:dc:e0:
29:ec:a8:38:b9:11:fc:51:b5:d5:8b:a7:8e:ba:6e:4a:2d:f8:
c5:df:d7:4e:b9:19:19:23:72:c7:e9:20:96:59:7b:94:f9:aa:
2e:76:d0:fa:83:ee:38:89:cb:d7:fa:b2:0d:ad:86:8f:43:2a:
c8:1b:8e:54:3b:44:5f:b7:d6:e2:be:78:50:b9:49:90:b4:c7:
cb:c1:86:b2:61:e1:7b:91:3c:35:72:10:75:7f:77:c2:02:29:
40:67:59:8f:e0:20:f5:20:17:e7:f6:f2:34:58:43:e8:3f:9f:
1d:1e:97:66:d8:61:b9:e6:7d:6d:a5:1d:2a:2e:f1:06:cd:57:
1c:48:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:14 2025 by rpki-client