Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json)
Hash identifier: TRqVzaGJK0bppjApH1bMsfUYpfYdJHRCbMaSzXfhvKs=
Subject key identifier: 2E:F7:29:D0:8B:39:6B:59:C9:6E:18:6E:BE:83:B6:A8:91:41:17:17
Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03
Certificate serial: 0976
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
Manifest number: 0971
Signing time: Fri 28 Mar 2025 20:24:53 +0000
Manifest this update: Fri 28 Mar 2025 20:24:53 +0000
Manifest next update: Fri 04 Apr 2025 20:24:53 +0000
Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: APjcdqk/Nd/mkiUyMaGm9WK0TQl9YMkLqBef7/6KcW4=)
2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: N+jthyTGVjfvL/quxUMUol5Q7xnLJ/R/6L1JWE7fVrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422 (0x976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EC46
Validity
Not Before: Mar 28 20:24:53 2025 GMT
Not After : Apr 4 20:24:53 2025 GMT
Subject: CN=67e70595-29e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:12:81:04:9c:b1:40:31:4b:e3:b4:82:91:
2d:4c:05:a7:a8:d5:c9:a4:b9:15:0a:bf:eb:97:9a:
8d:80:65:ab:53:91:ec:59:ef:1a:f5:b8:a1:ce:9b:
92:1e:6b:6f:cb:75:d7:ab:1c:f9:c1:d1:4e:4e:4f:
ef:a2:5c:b8:71:d5:15:95:b3:17:8e:be:41:05:6d:
ea:46:1e:a9:7c:28:a0:ca:5e:97:68:97:97:6d:32:
e6:9b:52:0c:8e:7a:0b:6e:35:66:c7:9d:2f:f8:a6:
2e:69:b8:ba:b3:a5:74:9e:3c:27:6f:80:cc:c9:74:
46:a4:b8:01:e1:a5:4c:0d:c1:d6:53:e8:c4:9d:e6:
56:de:3b:07:03:c6:e6:04:1c:df:90:24:4d:f7:ac:
7a:91:e6:5f:45:9b:5b:85:ee:11:26:d9:50:26:5a:
02:bd:95:56:28:dd:a5:a3:49:39:bf:4d:6c:d6:19:
1d:13:a6:6f:3a:83:fd:a6:02:d4:fe:42:58:d4:0c:
7e:5c:02:91:57:23:b4:9a:12:4b:7d:60:fe:b8:45:
76:e6:41:5e:a1:a3:f5:ec:1d:68:c0:e0:b3:d4:0c:
0d:56:9e:9c:ee:c5:1c:1d:1e:2a:59:f7:a2:fd:00:
40:af:b4:8f:b4:96:47:20:48:ed:1d:49:56:f9:c6:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:29:D0:8B:39:6B:59:C9:6E:18:6E:BE:83:B6:A8:91:41:17:17
X509v3 Authority Key Identifier:
keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:cd:f6:f2:75:c4:a6:e2:06:05:7c:5c:f6:f5:1e:45:7a:
6b:2d:28:a7:c2:83:3a:cb:d2:81:c4:59:48:8c:a1:4c:d9:09:
09:5d:78:87:30:aa:d6:80:73:2e:6e:e7:6f:17:74:8d:69:69:
90:23:7a:a1:df:2f:d3:f3:43:0c:6e:88:57:0b:d5:8b:2b:ef:
7f:f3:cb:89:e8:c7:f5:af:a6:1e:ea:5c:36:c0:d2:86:7d:08:
11:23:86:d6:be:c5:47:2c:ab:99:95:04:f1:a4:47:f6:a1:a6:
a2:bd:30:8e:af:e6:03:d4:cf:be:30:12:4d:6b:06:f2:f2:4e:
12:37:23:26:99:85:75:0f:f5:60:1d:9e:a6:a7:78:5e:c6:43:
16:94:60:85:23:8a:9c:2b:6f:98:c5:27:88:25:7a:4d:86:db:
39:be:a1:df:bb:44:68:ce:6b:7a:69:99:30:0c:37:9b:ea:bd:
e0:90:0c:d2:16:c9:b2:f1:cd:f9:bd:f1:bb:7a:f3:30:d9:b1:
6a:82:d4:99:85:b1:cc:8c:76:36:37:7e:52:0e:18:26:aa:93:
15:cb:d8:96:8d:06:94:5e:dc:7f:f8:08:d8:c1:65:9a:1a:61:
69:f4:1e:24:09:4a:a6:9c:25:2a:b3:7d:ef:1a:0e:c0:18:fc:
15:2d:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:31 2025 by rpki-client