Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier: 3z3sYuc/RA6/4a/y11TKzsXeV95dIHU3crtmfZ8E6Xk=
Subject key identifier: 2F:B3:93:B7:1B:EB:02:27:C2:0C:A3:D7:89:2F:37:CD:5F:FA:22:5E
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number: D9
Signing time: Sat 29 Mar 2025 04:57:01 +0000
Manifest this update: Sat 29 Mar 2025 04:57:00 +0000
Manifest next update: Sat 05 Apr 2025 04:57:00 +0000
Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: eIQ3LhNC4ggiVUsTSr9i/Pch3l/SV23LO3PIxxmP3Zg=)
2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742
Validity
Not Before: Mar 29 04:57:00 2025 GMT
Not After : Apr 5 04:57:00 2025 GMT
Subject: CN=67e77d9d-13d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:60:81:26:7d:64:fc:24:72:d2:5f:8b:22:
5a:bb:7a:e9:c5:e3:a4:da:d6:93:2a:e3:6f:32:7a:
2f:c5:7d:f5:ce:d6:d2:d4:30:4f:e9:4f:cb:60:1f:
a2:95:b7:8f:d9:8b:62:44:92:c7:b3:e9:e1:62:9c:
96:e0:a7:80:61:ce:86:8f:1f:79:7c:b2:d8:98:aa:
4d:d7:ea:98:1c:b8:15:5b:31:fd:3e:32:1b:d3:84:
01:e8:29:56:10:d4:6a:ff:74:65:9f:2c:80:3c:4f:
71:8a:6f:99:52:2d:cf:7c:ba:62:82:af:10:59:f8:
ab:d6:e9:91:f5:b5:86:e1:57:8f:18:82:43:8a:a4:
56:39:83:07:3a:43:d5:94:4a:2b:48:7c:7a:3a:b1:
33:71:1f:1d:f9:48:83:4a:c3:f3:0b:42:6e:c1:0f:
96:d0:28:1e:8e:29:46:77:44:62:c1:a9:bf:8c:66:
7c:80:69:8a:17:18:bf:a8:51:5c:49:53:6c:a5:9e:
06:b9:e1:81:0b:fe:8b:e7:58:e9:ad:89:bd:41:3f:
a2:a9:08:db:98:c7:76:2e:ec:83:9b:83:d8:1c:53:
0d:0a:bc:4c:65:99:03:37:0b:55:4c:e5:ed:00:ed:
9a:9e:d9:de:c6:1b:42:39:cb:93:c0:37:9e:96:fa:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:93:B7:1B:EB:02:27:C2:0C:A3:D7:89:2F:37:CD:5F:FA:22:5E
X509v3 Authority Key Identifier:
keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:62:7e:f9:f0:19:6a:54:46:40:82:a4:7d:48:d2:73:0e:52:
33:ab:cd:12:76:a2:97:b9:cc:37:8a:a8:b3:45:3e:10:4a:3c:
5f:98:a1:65:71:0b:95:bd:1e:bf:0c:38:91:34:2e:90:ef:d2:
c9:2a:bc:83:21:9f:90:cf:2d:d7:bb:2c:78:67:7f:be:0f:c6:
71:0f:43:79:db:df:f0:ba:8e:5c:42:83:a3:02:5a:e3:08:7b:
ef:36:9b:25:25:aa:27:c4:44:ca:af:60:85:82:bd:98:62:08:
73:ac:c5:52:34:f1:1f:4d:53:2a:ac:34:5e:cd:09:b8:f6:1e:
77:64:96:7d:61:38:97:47:ba:cd:90:7a:e2:11:ef:88:b7:0d:
70:d9:aa:c2:fd:d8:4e:27:4a:a7:c6:23:b4:3e:27:9d:88:01:
4d:c2:86:17:c7:6d:b7:f0:a0:e0:83:63:8f:42:79:77:16:ca:
c8:65:ea:91:0d:e6:12:aa:ea:b0:c5:c3:c4:00:f3:1e:77:a0:
33:81:33:09:27:29:8a:e1:36:37:a9:19:c8:24:18:83:28:53:
83:82:52:1b:2a:82:87:8f:58:8b:92:d7:bf:17:95:f9:cb:f6:
92:6b:56:35:5a:74:e0:1f:fe:2c:59:53:fd:cf:0a:f0:85:ec:
33:df:38:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4
QUE5Mzg2MEIwHhcNMjUwMzI5MDQ1NzAwWhcNMjUwNDA1MDQ1NzAwWjAYMRYwFAYD
VQQDEw02N2U3N2Q5ZC0xM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxv1ggSZ9ZPwkctJfiyJau3rpxeOk2taTKuNvMnovxX31ztbS1DBP6U/LYB+i
lbeP2YtiRJLHs+nhYpyW4KeAYc6Gjx95fLLYmKpN1+qYHLgVWzH9PjIb04QB6ClW
ENRq/3RlnyyAPE9xim+ZUi3PfLpigq8QWfir1umR9bWG4VePGIJDiqRWOYMHOkPV
lEorSHx6OrEzcR8d+UiDSsPzC0JuwQ+W0CgejilGd0Riwam/jGZ8gGmKFxi/qFFc
SVNspZ4GueGBC/6L51jprYm9QT+iqQjbmMd2LuyDm4PYHFMNCrxMZZkDNwtVTOXt
AO2antnexhtCOcuTwDeelvp5QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+zk7cb
6wInwgyj14kvN81f+iJeMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw
NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv
a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsYn758BlqVEZAgqR9SNJzDlIzq80SdqKXucw3iqizRT4QSjxfmKFl
cQuVvR6/DDiRNC6Q79LJKryDIZ+Qzy3Xuyx4Z3++D8ZxD0N529/wuo5cQoOjAlrj
CHvvNpslJaonxETKr2CFgr2YYghzrMVSNPEfTVMqrDRezQm49h53ZJZ9YTiXR7rN
kHriEe+Itw1w2arC/dhOJ0qnxiO0PiediAFNwoYXx2238KDgg2OPQnl3FsrIZeqR
DeYSquqwxcPEAPMed6AzgTMJJymK4TY3qRnIJBiDKFODglIbKoKHj1iLkte/F5X5
y/aSa1Y1WnTgH/4sWVP9zwrwhewz3zjp
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:59 2025 by rpki-client