Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json)
Hash identifier: 7jdi0VLvQpMn4LRuYwQz2c/Pc/Si3FzvUSnJGJBeXwk=
Subject key identifier: DE:1C:28:D0:4F:12:8F:CC:B6:0A:0B:7E:39:C6:37:90:11:32:CC:92
Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3
Certificate serial: 0B71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
Manifest number: 0B68
Signing time: Fri 28 Mar 2025 19:16:16 +0000
Manifest this update: Fri 28 Mar 2025 19:16:15 +0000
Manifest next update: Fri 04 Apr 2025 19:16:15 +0000
Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: EGv4HkTuS0BcoFypkKaoa2jb+Q/Aq1d4pj2YbaGWRw0=)
2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2929 (0xb71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EBB
Validity
Not Before: Mar 28 19:16:15 2025 GMT
Not After : Apr 4 19:16:15 2025 GMT
Subject: CN=67e6f580-e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:61:20:6d:3f:53:9c:75:29:c2:6b:67:71:
3b:f7:04:f4:93:c2:80:a3:30:2d:7f:4c:e4:48:0d:
57:e1:3b:f3:62:85:c4:7a:10:16:da:fd:de:1a:82:
61:9d:e4:24:fa:ef:e8:9c:03:00:36:33:fe:60:34:
ad:72:ed:04:8d:fb:46:c3:80:23:97:0e:e8:c0:be:
19:5d:57:a5:a6:26:d7:59:0d:7a:20:14:6b:11:28:
9a:08:e8:be:27:0d:b7:89:6d:2d:88:e8:3b:2e:df:
be:97:ea:7a:33:a5:86:c8:5a:e6:b9:c9:24:3e:16:
59:cd:13:99:86:a9:dd:03:71:fe:1d:ba:1f:39:92:
b7:d0:39:37:24:2e:2b:7e:93:48:91:85:28:c6:92:
de:e1:c6:16:df:44:f5:30:17:2c:13:30:14:d7:35:
d7:80:cd:38:bd:04:c3:3d:ca:8b:e2:af:88:63:cf:
db:f0:22:9f:d1:3b:59:f7:98:1b:de:72:34:51:29:
eb:f4:34:3d:73:53:db:15:43:b2:c7:6f:78:1c:ff:
6c:8b:49:9f:61:2a:0f:7a:df:f6:09:1a:53:75:ff:
7c:a8:25:7c:e6:f9:c1:5f:3c:01:3c:26:29:6a:62:
39:3b:47:63:b8:7b:fc:1f:9e:57:a3:8b:d8:a4:2e:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:28:D0:4F:12:8F:CC:B6:0A:0B:7E:39:C6:37:90:11:32:CC:92
X509v3 Authority Key Identifier:
keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f9:7f:ab:e9:ca:a6:e7:e3:4e:26:78:0b:2d:f2:4c:95:3c:
ff:31:83:53:8a:a7:82:d6:65:2e:42:70:27:87:66:3e:ed:f5:
a9:b9:45:22:45:36:10:03:82:0b:19:29:09:21:5a:36:0e:56:
fb:b4:cb:bd:34:b9:ca:76:55:45:56:5d:6e:6b:ff:b4:9c:02:
3e:dd:c0:cd:f0:b7:3c:e1:70:b5:4e:c7:7e:cb:96:06:8c:58:
d4:9d:e0:ad:ee:27:b9:7b:cb:b2:c1:63:f7:d1:8f:ef:38:02:
96:b1:90:11:37:f8:e0:83:bf:97:7a:70:41:a7:3a:5f:8f:63:
23:b2:d5:8c:23:5d:bf:3f:d3:76:f4:3b:7c:c8:f9:e7:17:27:
e9:ca:8a:db:0c:8a:32:cb:f1:da:d1:02:eb:88:bf:5c:a9:cf:
14:05:c5:ad:c8:ed:fb:52:fb:3d:94:de:b8:89:72:bd:39:9a:
ec:54:f3:8d:d8:25:17:60:38:ed:d8:8a:46:ee:86:86:b5:d6:
48:14:79:1a:41:f8:1d:3e:61:e0:77:32:f4:65:a3:17:31:b4:
37:5e:be:e7:2e:da:8d:2c:69:dd:0f:73:1c:ff:27:3d:0f:ca:
da:c5:12:12:62:3c:29:db:8b:3d:eb:e1:8a:3f:e7:a1:d7:1c:
3f:ad:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:27:34 2025 by rpki-client