Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File: 9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier: 7WFEmiXVLC7+Itskxpj9GZ2duACM5oh5CExxEWjpG2k=
Subject key identifier: E7:17:B1:00:5A:CE:5A:9B:21:F7:C1:4C:45:B5:8C:5E:79:70:C2:15
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer: /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number: 0111
Signing time: Sat 29 Mar 2025 04:19:03 +0000
Manifest this update: Sat 29 Mar 2025 04:19:03 +0000
Manifest next update: Sat 05 Apr 2025 04:19:03 +0000
Files and hashes: 1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: 1Xe7xtnNc3BnkXF2OOYAnVnUaHZvQYRF/y83x12JvE4=)
2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD55B
Validity
Not Before: Mar 29 04:19:03 2025 GMT
Not After : Apr 5 04:19:03 2025 GMT
Subject: CN=67e774b7-1bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:1a:75:85:95:ce:8d:b6:8e:68:cf:9a:71:
f4:20:30:17:25:6a:1f:87:e9:14:b2:b8:71:08:64:
7d:b1:4f:64:3e:7c:ad:34:e0:c0:b8:27:6a:69:84:
1f:51:e6:46:10:a3:99:9d:33:87:1a:80:11:0e:dd:
30:76:60:b3:72:9a:c1:4b:b2:c3:53:15:d1:94:e7:
70:d6:45:49:00:35:60:fb:db:81:5c:a9:1e:f4:fa:
94:05:90:f0:56:f0:2c:fe:fa:e6:9c:b9:b9:d6:82:
c8:e4:d3:ee:40:d2:a6:9c:35:4c:ce:8c:8f:79:13:
c1:67:55:a3:fc:a1:ad:8b:7d:ff:c3:94:56:78:54:
ab:ed:3b:e3:72:72:47:38:06:21:3a:6e:59:94:08:
38:22:11:39:d8:54:77:0d:5e:08:23:51:2b:d6:3a:
30:67:d3:ff:26:97:06:32:58:72:e3:e8:62:be:e0:
91:21:98:19:e2:b1:c0:0e:d1:68:34:b3:f4:a3:be:
18:58:82:21:79:1f:48:5e:c6:37:db:bc:28:c0:ba:
17:87:a5:2b:f3:bb:df:89:59:d7:57:d9:ff:6a:a3:
5f:22:73:30:ce:2b:17:52:ad:c1:0a:8b:88:70:71:
bc:e6:9f:04:a2:eb:77:13:bb:e2:71:df:29:b5:fa:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:B1:00:5A:CE:5A:9B:21:F7:C1:4C:45:B5:8C:5E:79:70:C2:15
X509v3 Authority Key Identifier:
keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:bb:d1:88:3f:ed:3f:39:6b:55:f6:21:84:bd:b1:ea:f0:3f:
e1:e1:68:6d:ea:32:1c:e0:e9:7e:5c:82:b0:48:9f:fd:0d:d9:
74:71:39:e4:3a:59:dc:e0:76:9b:cd:56:3b:3e:10:e7:c8:38:
76:92:fd:7c:58:0f:0a:a5:e6:e4:92:d5:ef:18:48:be:87:69:
2a:a3:0a:ea:28:77:d4:b9:0e:c9:25:1c:76:38:a3:f2:dd:80:
99:82:04:4f:07:e8:7a:73:85:ab:54:dd:d9:ee:a6:92:b1:43:
4d:5b:7c:0a:7c:a9:c4:f1:f3:86:22:f2:aa:44:d0:5c:ad:77:
0b:4e:49:ce:45:e8:a2:a9:ab:ea:5e:82:b0:29:a5:cb:a2:46:
89:bd:ed:82:6f:a9:40:9b:a2:73:e0:f8:9e:1a:c4:b5:05:a0:
d8:94:bb:be:4b:95:7f:cd:d2:57:54:d8:ce:97:34:75:b2:f7:
d8:92:ba:e4:ca:4d:a6:78:7e:7e:f6:19:5f:2f:59:c6:c4:23:
a4:17:d8:0a:94:05:8e:aa:20:77:51:ff:73:e8:4a:14:06:1a:
a8:4f:90:b3:2d:56:b0:3e:b6:fd:d4:63:02:1b:50:15:7c:d4:
d4:37:d5:5d:47:aa:33:7e:25:11:67:ea:2d:df:eb:7c:ea:8d:
4e:42:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:50:06 2025 by rpki-client