Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier: XGt9OB3wwVUPcS9QpvRxuAykEgPm29AYepATsYIVmkg=
Subject key identifier: 01:D6:81:C0:5D:2C:32:55:BC:C0:91:9C:5F:A9:4D:55:15:1A:D1:2F
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number: 9A
Signing time: Fri 31 Jan 2025 05:29:07 +0000
Manifest this update: Fri 31 Jan 2025 05:29:07 +0000
Manifest next update: Fri 07 Feb 2025 05:29:07 +0000
Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: Ha6FvkS3aRlNxSOs78Cbzktv1lrHeTaEw/VSmi+wdV0=)
2: 6313E67C8D5711EFB5214A3AC4F9AE02.roa (hash: BxxzK7GYnNA6XmcJ/JSez9aRNvqpHtoWf05MXCUT/Bs=)
3: 9EE9468811FB11EFB73CB561C4F9AE02.roa (hash: pka10Uc6nzlxGkED9VZp9bJBwLv9g+b02qwlKzxKN2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Validity
Not Before: Jan 31 05:29:07 2025 GMT
Not After : Feb 7 05:29:07 2025 GMT
Subject: CN=679c5fa3-fe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:75:10:5a:9f:00:6b:7d:88:f3:97:0a:8c:
2c:d3:64:09:92:d3:d0:5f:84:68:fa:c7:4c:bf:12:
52:06:20:ca:55:e4:f7:73:91:01:c2:75:c3:e4:da:
1a:05:07:25:20:b1:26:1c:a5:b0:0b:c9:cd:0a:5a:
fd:ac:19:38:2e:c3:09:c0:25:6a:74:ca:b0:f9:bc:
87:0a:6b:38:98:50:1e:54:dd:81:b1:45:f4:37:39:
0e:1a:aa:55:8d:5b:fd:81:64:53:f0:a0:bd:06:c1:
68:61:99:da:ee:17:85:19:52:3d:38:20:4a:b0:be:
f2:13:79:53:63:b5:23:39:c4:28:62:d8:21:10:39:
8c:91:a0:9c:27:56:1a:b7:b9:d6:10:35:e2:bd:3e:
a7:3c:e5:be:0d:8f:4a:6e:0d:36:25:b4:53:c8:30:
a3:71:d4:cf:25:eb:e9:2d:2c:7f:2a:7f:8b:ef:ba:
fc:e9:4c:2c:77:3c:eb:af:4c:b4:26:6b:67:19:e7:
5e:1b:bb:3e:4c:d2:c2:fd:ce:cf:a9:63:39:fa:87:
2c:1e:49:03:2c:88:87:41:bb:87:8a:5a:b4:b6:20:
d0:a2:87:9b:fc:c1:2d:35:b9:b4:de:a9:84:cc:e0:
93:9e:43:5c:23:8a:d1:3c:99:29:0b:3c:5f:49:75:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D6:81:C0:5D:2C:32:55:BC:C0:91:9C:5F:A9:4D:55:15:1A:D1:2F
X509v3 Authority Key Identifier:
keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:47:86:77:65:b2:79:46:60:49:e9:16:90:6f:cf:1b:f0:07:
8b:22:c2:ef:d4:75:1f:db:d7:d4:47:d0:41:bf:22:ab:79:32:
91:33:2b:d3:8f:b9:51:e6:0e:7c:18:18:c9:e9:1c:dc:8e:02:
36:e9:2c:c2:28:11:2a:83:25:66:b1:13:40:95:ff:4b:d3:b9:
3a:76:40:fc:5e:74:6c:16:41:a1:4a:00:92:cc:07:b5:3e:4f:
c6:ee:81:fc:56:1f:98:85:0e:09:95:b7:28:4a:b1:ab:ce:37:
9a:b8:e4:9a:f1:34:67:e3:dc:08:1f:8d:b9:0c:27:e2:65:d1:
27:d8:80:06:fa:3c:6e:d4:17:ec:44:a1:6e:f5:dc:54:84:cf:
c8:a1:ad:e0:fd:c0:1f:83:63:6c:d8:64:64:12:95:87:04:d0:
69:41:bc:3f:da:b9:02:a2:5c:e5:bf:17:42:ae:bc:6d:2a:a8:
f9:fe:25:c8:e1:2e:a3:5f:8e:2d:36:63:ea:d2:33:bd:45:98:
91:a4:a8:0b:92:99:af:73:95:80:65:78:58:c4:e9:9b:7f:f9:
89:fd:c6:67:83:dc:8b:c6:4c:84:0f:2e:8f:1a:32:a1:73:2a:
c5:10:a7:1e:38:0a:b1:17:f1:ab:5a:7f:fc:97:b6:17:74:0f:
2a:4d:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:26 2025 by rpki-client