Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File: o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier: PZKDqM5pGAIa70BxmVk+E7wv+pZOtr96qOP8zBdvi0E=
Subject key identifier: 49:3F:D9:70:5F:A7:B9:DF:6E:52:22:35:88:A3:CD:D5:02:C0:4D:54
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer: /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 05:00:11 +0000
Manifest this update: Fri 31 Jan 2025 05:00:10 +0000
Manifest next update: Fri 07 Feb 2025 05:00:10 +0000
Files and hashes: 1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: 40RRZKZqTedi0M+5D/VAn0ppzZkzrfPdNuZeNq6JO+4=)
2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: VbbJAFeEANc5xpg56kqLWx6ph7v6NQjlCgiwAcE8S0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Validity
Not Before: Jan 31 05:00:10 2025 GMT
Not After : Feb 7 05:00:10 2025 GMT
Subject: CN=679c58da-f183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:df:dd:92:1c:46:50:e5:cf:1e:b0:5b:20:
94:93:eb:4a:ce:bf:be:88:90:3a:34:a3:df:3f:2b:
0d:fb:b5:21:d6:10:36:e4:da:c4:bd:50:bd:0c:a8:
42:5d:52:69:77:11:9e:7d:3c:1c:82:ba:18:dc:f0:
86:74:e4:a0:a7:f4:f7:1e:a4:f4:c3:88:c3:73:34:
d3:a9:85:f5:10:bf:2d:ee:4b:5f:4d:9a:a6:4a:78:
70:35:2c:3b:c0:e1:13:a8:42:f6:db:4f:fe:2f:b5:
09:42:07:a3:a4:3f:11:d9:4b:66:d1:3a:5d:67:9e:
26:2d:94:cf:47:ff:50:2d:e2:0b:26:4c:c4:b4:53:
8a:b9:2e:e4:93:9e:00:61:9d:2c:b6:5d:d6:b2:04:
df:c1:98:0c:2e:55:ec:46:dc:45:0b:a5:05:df:2a:
00:47:c7:89:6c:d5:e5:bc:bd:35:d7:9f:09:17:ba:
5a:e4:b3:d0:84:74:23:c7:79:db:5e:1b:95:1d:27:
df:eb:83:23:e8:91:d5:fb:20:08:c1:c4:81:76:7d:
27:17:fa:1a:d0:20:52:74:10:74:8b:a9:7d:8d:cd:
d9:21:66:6c:d5:b4:6a:16:3f:bb:6d:cf:eb:5a:ff:
a5:cc:46:66:c2:e6:28:93:a4:52:c3:88:7d:79:18:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:D9:70:5F:A7:B9:DF:6E:52:22:35:88:A3:CD:D5:02:C0:4D:54
X509v3 Authority Key Identifier:
keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:85:04:10:d7:65:fd:58:5e:2c:3c:3e:38:c0:28:b1:14:d1:
f9:e1:df:1d:16:10:2d:58:47:57:ee:30:ce:c5:0e:64:de:75:
8c:60:d9:fa:f5:62:ca:92:e8:f7:49:08:36:be:91:64:1d:77:
1e:15:77:39:4e:c1:bf:29:1e:7e:f0:a2:76:a8:82:61:f9:b1:
fa:d5:11:11:70:4c:8a:f3:a9:54:84:3a:ae:b6:3a:85:e9:61:
f2:0f:16:73:7b:b2:3a:73:49:ce:f5:4a:f2:3d:6a:ee:ba:45:
61:62:60:05:ac:6d:f5:5c:8b:a6:5a:3c:63:d0:f5:b6:f7:15:
0c:6e:05:bb:fe:f3:c8:f5:57:90:c4:6a:4e:0d:76:67:de:47:
a8:81:6a:fb:8e:3a:c9:bf:0b:37:8e:7a:c4:1b:40:84:a6:f3:
53:9c:82:a4:4e:1d:02:9a:35:01:d7:ac:69:9f:c1:9a:aa:4e:
c7:74:03:43:b8:49:95:57:e9:7b:b3:62:1c:17:6a:5c:42:71:
f4:73:8e:a1:fc:26:e6:91:80:e2:72:fe:e1:a7:9d:6c:da:af:
5e:50:0e:94:6a:32:db:0c:6f:28:5d:17:b4:95:79:32:00:1c:
41:71:3d:fb:fd:d9:ff:2e:17:18:eb:9b:c6:6a:26:a1:fe:6f:
d9:7c:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:03:15 2025 by rpki-client