Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json)
Hash identifier: 9Os4sFwNjK/pl8iW98+Wv06n8EQDjoU7tNMaAVV2sHo=
Subject key identifier: 81:9F:BF:25:D2:9D:01:10:39:40:FB:FB:E4:1F:0D:3E:84:A7:76:1C
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 05CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
Manifest number: 05B1
Signing time: Fri 28 Mar 2025 23:30:21 +0000
Manifest this update: Fri 28 Mar 2025 23:30:20 +0000
Manifest next update: Fri 04 Apr 2025 23:30:20 +0000
Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: C3KrOz0gtxVqUDzU+6N8AYdyKbHy8aeWFAx10g4iefM=)
2: 32B24F6425FD11EDA4097785C4F9AE02.roa (hash: 1DnKSzLoM0CTCgb09q8W/MqI67bjoZqKAzNGq6PC5cw=)
3: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: Cj1/piPyZE/JuRDwxvwSW+MueXSWf8zlHIF4b8CMXf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1482 (0x5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39
Validity
Not Before: Mar 28 23:30:20 2025 GMT
Not After : Apr 4 23:30:20 2025 GMT
Subject: CN=67e7310d-114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:50:6f:5e:23:37:75:28:2e:71:be:21:5e:
33:75:fa:ec:7c:cf:41:88:90:78:7e:b8:55:49:1f:
4f:7a:c3:e1:00:56:c2:0b:15:b7:5f:d6:ae:5d:aa:
0c:6f:32:af:37:4d:d4:ee:cf:18:1c:69:45:10:ca:
c9:72:8d:46:bb:4a:a7:63:45:7e:28:75:67:6a:b2:
dd:a0:4c:fc:78:a0:46:53:cf:ee:07:4f:fc:c1:2e:
dc:0c:2f:78:6f:ad:f8:ca:80:0e:18:c8:bb:47:bf:
a7:17:e7:1c:41:f6:7c:8d:76:4f:11:b5:9d:c7:75:
cf:c7:f8:3c:0f:de:c0:67:97:5f:b6:0c:92:05:95:
66:51:b9:f6:78:74:34:61:36:21:5d:ce:08:f7:2e:
26:16:dc:ef:de:f7:8d:a4:d2:1a:f0:4f:af:45:bf:
aa:2b:25:83:a1:6f:b1:79:d2:96:7e:7e:f1:a1:cf:
12:75:8f:1a:a6:96:fd:be:89:85:4e:50:17:53:c5:
42:c9:c3:8a:4b:0b:16:d4:46:33:e6:81:1d:b8:ad:
88:8a:bb:f7:44:e7:b5:c6:ae:48:a6:d8:7a:2b:dc:
62:bd:4a:3e:84:50:c6:cc:71:66:a3:f2:eb:44:6a:
c6:66:25:0b:de:b4:b1:ec:46:bf:ca:07:89:5e:db:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:BF:25:D2:9D:01:10:39:40:FB:FB:E4:1F:0D:3E:84:A7:76:1C
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0b:fe:df:21:2d:54:b5:5a:4f:ce:01:b1:fa:f7:38:1b:56:
88:df:c7:1e:9c:d8:70:bb:ab:15:eb:84:c8:70:9e:db:22:3a:
39:88:cf:7e:35:e5:83:fb:00:71:8d:71:e2:8d:99:f2:22:d5:
b7:ee:38:9c:a5:6c:9c:29:6d:4b:cc:bd:62:c9:a3:e5:d6:81:
54:3a:b5:1c:ef:32:1c:65:a2:5a:34:b7:7b:1e:5d:8c:8b:59:
9d:2e:9c:46:4f:56:cb:00:86:50:b2:cd:ba:4b:9b:25:6a:67:
6c:ab:c0:40:4f:ac:90:1b:7c:db:b7:c7:80:cd:f0:62:d0:be:
e0:88:a1:88:85:6c:05:00:4f:7d:0a:e0:79:a5:dd:71:00:34:
5a:18:2c:21:cf:1c:bb:b1:c2:49:2e:3d:19:35:22:bc:cd:1a:
ee:00:e7:73:d7:ab:10:90:a6:d5:2e:59:34:a6:ca:6d:16:1f:
ac:fb:1d:1c:63:fa:ff:38:4d:2b:c3:a7:8c:ef:46:55:b2:48:
c9:07:04:52:5a:57:56:07:20:84:12:a6:bb:a6:68:68:46:c6:
7c:8a:84:60:fc:b1:9f:31:27:17:2c:4e:da:60:a2:fb:b8:a3:
47:ed:8a:b6:cd:fd:9a:cb:78:aa:67:4d:0a:84:28:58:5c:4a:
eb:13:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:51 2025 by rpki-client