Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft
File: lUYNFYUCHTnq191bsrVTv0dKyUM.mft (raw, json)
Hash identifier: gXEW+z9U0taDo1e1R2u0l+zwg4hB14n6gFDlRiNbmNE=
Subject key identifier: 64:35:75:CB:DA:7C:E9:A4:54:5F:2F:86:F4:9D:24:A9:AC:32:5C:C9
Authority key identifier: 95:46:0D:15:85:02:1D:39:EA:D7:DD:5B:B2:B5:53:BF:47:4A:C9:43
Certificate issuer: /CN=A91F1ADD/serialNumber=95460D1585021D39EAD7DD5BB2B553BF474AC943
Certificate serial: 0530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft
Manifest number: 0524
Signing time: Thu 06 Feb 2025 23:02:37 +0000
Manifest this update: Thu 06 Feb 2025 23:02:37 +0000
Manifest next update: Thu 13 Feb 2025 23:02:37 +0000
Files and hashes: 1: lUYNFYUCHTnq191bsrVTv0dKyUM.crl (hash: sKV//8ki3VIMlP57qGPBLXDe0URVi6WXLv0iWhwycvc=)
2: 06729B36D8B011EEB5C9AD7AC4F9AE02.roa (hash: vGFpyIR+FctWSVZ2x3BmT8PC0ToC6sSkN4h2IswPXyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1ADD
Validity
Not Before: Feb 6 23:02:37 2025 GMT
Not After : Feb 13 23:02:37 2025 GMT
Subject: CN=67a53f8d-a318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:bd:4b:6f:39:d3:b6:11:9d:a1:1e:eb:d5:
5a:b7:d1:45:42:4d:2b:ef:e6:f9:2a:6c:9e:c6:93:
d5:22:e9:f8:f6:2b:c1:db:93:fb:a4:63:a3:96:d1:
97:0e:96:e0:30:df:f5:13:59:36:bc:dd:b2:38:e6:
77:e1:60:c9:06:02:56:ee:6f:04:d8:b1:81:b9:f6:
0a:d3:5d:8f:eb:7d:d2:62:f7:30:f2:19:67:9d:68:
f3:aa:2f:d6:c4:00:6d:1b:d6:b2:be:11:07:1e:3e:
d0:de:6e:49:7c:ca:14:e2:29:f4:46:8f:01:db:84:
5e:65:b0:19:bb:d3:5e:89:18:50:34:29:aa:e5:c1:
81:7a:d7:52:7d:4b:a2:2b:cd:8f:bd:72:e0:e7:66:
84:8a:5f:70:99:a2:27:71:f5:72:57:39:b5:18:2c:
6b:dd:d8:e7:31:75:be:af:57:6d:ff:ac:8c:71:ee:
23:a1:a4:a5:ed:0c:3e:49:ca:31:34:25:82:6b:8e:
58:9c:16:5f:6d:fa:ec:76:50:5c:f0:3b:e4:60:d7:
3b:2d:fa:f1:c4:7b:16:44:0c:ed:be:9f:b1:d7:5c:
11:69:78:28:6b:96:b3:bc:f3:33:bc:b7:50:64:6c:
03:a7:f9:08:91:d3:a1:d8:6f:7b:9e:c5:e2:3b:7b:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:75:CB:DA:7C:E9:A4:54:5F:2F:86:F4:9D:24:A9:AC:32:5C:C9
X509v3 Authority Key Identifier:
keyid:95:46:0D:15:85:02:1D:39:EA:D7:DD:5B:B2:B5:53:BF:47:4A:C9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:b1:09:03:3a:b0:ba:01:c5:3f:61:ae:4d:75:fe:3c:4b:c5:
d3:7f:69:bd:9b:57:8f:73:1d:13:b3:ad:d2:33:aa:4b:91:57:
80:10:4d:ec:0a:1d:be:6f:df:89:8d:23:df:2b:e7:09:ca:d7:
7e:81:45:8a:47:dd:b7:e3:63:d1:19:fb:50:58:48:d6:02:7d:
cd:f3:d7:db:19:ad:09:11:d1:be:14:69:4d:c0:62:a9:94:5f:
73:19:61:d7:2d:a5:31:06:b1:cf:1d:f6:1c:12:6f:bf:1e:5c:
9d:81:26:5a:19:59:ac:2d:cd:4f:99:ec:03:c2:46:43:b0:af:
ea:a9:2d:7e:db:0f:23:6f:83:10:65:68:7a:b0:c8:0a:05:3c:
cf:1b:90:82:13:eb:81:36:9f:09:4a:04:c2:5e:4a:54:31:3d:
fe:37:6b:c4:8e:c4:5a:c5:c5:de:d2:02:7b:cb:41:36:3d:97:
27:65:d3:68:16:97:5f:1c:76:31:8a:27:75:d4:dd:0f:b2:3a:
bd:5a:04:28:fe:0d:6f:bb:6a:1f:a3:5c:db:6e:00:60:2b:eb:
7e:b4:19:e4:65:6b:ad:bd:e3:3d:dd:3b:af:f3:73:57:f7:b2:
06:1a:40:17:a1:15:47:a7:47:29:67:1a:a7:31:e7:c8:c3:c9:
3b:bd:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:53 2025 by rpki-client