Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
File: odoVuis7tmKheOJtlmgVoiouRpk.mft (raw, json)
Hash identifier: sXUDPWsOO+e0DifHtDLmA8X+ozi2ZSuyCp4Ayt2xZRY=
Subject key identifier: B0:72:30:A7:B0:07:E4:0C:73:A1:F3:A3:91:66:46:B1:95:64:53:33
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Certificate issuer: /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
Manifest number: 027D
Signing time: Fri 31 Jan 2025 01:44:06 +0000
Manifest this update: Fri 31 Jan 2025 01:44:05 +0000
Manifest next update: Fri 07 Feb 2025 01:44:05 +0000
Files and hashes: 1: odoVuis7tmKheOJtlmgVoiouRpk.crl (hash: CyIRl0WfzltF5HBVIoyK05zNrYMdUSK/K0JJNl3jKvg=)
2: 692F8290AF1D11EFA7108387C4F9AE02.roa (hash: WDaHtMQWTwJWQkeIMiJU8NUrdki0tCHjoldLxpeTYvo=)
3: 57BB8E50AF1D11EF9CB35387C4F9AE02.roa (hash: bzAyLuYRUMBSf4vl6Z05UJcWg+7dmLiTXnPYXge8oFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Validity
Not Before: Jan 31 01:44:05 2025 GMT
Not After : Feb 7 01:44:05 2025 GMT
Subject: CN=679c2ae5-51f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:f4:0d:86:b2:9b:48:b8:2e:b1:68:cc:ff:
17:50:57:71:c1:e5:fc:4d:0a:bc:3c:35:63:54:7e:
11:ce:2c:da:60:7e:b2:ae:40:41:8b:14:3f:cb:ae:
f4:6f:67:4f:ba:62:35:02:6f:63:37:28:bd:61:88:
a6:c8:21:13:4a:77:db:d2:b1:6c:25:66:a4:47:7a:
48:34:01:d0:e9:2a:c1:55:74:8d:0b:63:c2:68:b8:
21:aa:d8:10:63:6a:59:e1:a2:af:2f:4b:b6:40:97:
56:ea:0b:5e:c8:64:0b:8d:88:fb:2f:70:62:c6:f0:
f8:68:a2:5b:0d:a0:92:44:50:c4:0c:f5:cf:a3:63:
ba:4f:0f:a9:70:04:53:6d:49:02:5d:ed:6a:c6:0d:
50:98:69:b5:d4:f8:58:d1:a7:28:97:07:47:1e:6e:
92:95:23:6c:78:2d:2b:56:96:40:1b:4b:28:b7:a6:
a8:04:09:72:65:7b:75:ff:f3:33:cb:39:b4:fb:cc:
a5:b0:e6:24:4d:4d:2c:ee:43:aa:c1:2b:45:15:fd:
da:ed:d7:c6:95:8f:98:58:9c:9d:d8:c0:9c:d4:d4:
d4:d9:83:16:96:dc:36:51:d2:ae:27:49:c1:66:aa:
4f:1e:83:85:45:75:5b:51:f2:f6:fc:79:85:d1:a2:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:30:A7:B0:07:E4:0C:73:A1:F3:A3:91:66:46:B1:95:64:53:33
X509v3 Authority Key Identifier:
keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:2b:4a:19:b3:f7:23:6c:c8:9d:eb:ec:ad:e6:1f:09:ff:
e5:e4:33:8d:cc:51:bc:63:a5:11:ed:aa:c7:cd:b3:38:3c:b3:
40:83:65:c8:f2:49:87:b9:3c:31:52:76:62:51:92:8b:4c:8d:
8a:6e:73:7d:d1:89:d4:cd:0b:2b:83:ba:2a:a7:22:27:51:e3:
dd:5c:b7:3a:2a:94:76:5a:4f:01:7d:8d:e5:7f:4c:3c:86:bf:
1e:51:3e:55:71:87:4f:0a:a4:2b:6f:9f:cb:8b:96:e0:f5:8c:
27:0f:b7:31:42:e5:f4:93:2e:43:d7:49:c8:b8:26:9d:cf:e1:
9c:82:03:0a:c4:f3:34:8b:5f:62:f1:d2:f3:7b:ee:a8:a8:ea:
f6:70:91:95:cf:de:95:f3:a9:10:81:75:4e:6f:9f:87:be:00:
84:13:c7:e3:76:81:7b:e9:c2:0c:23:dd:ba:a2:91:64:29:c6:
8d:68:4f:35:05:7f:c1:76:22:c7:8e:20:fd:81:87:0d:af:7c:
e2:91:c9:7f:24:17:4e:dc:83:e2:95:58:cf:e3:d9:9b:d8:f7:
74:c0:3e:91:4f:df:82:33:92:84:97:3f:78:7f:4d:3b:e0:82:
e4:38:06:6e:02:d2:3d:5a:65:8d:e5:d6:7c:cc:51:19:4e:0d:
85:58:5d:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1NUMxMTAvBgNVBAUTKEExREExNUJBMkIzQkI2NjJBMTc4RTI2RDk2NjgxNUEy
MkEyRTQ2OTkwHhcNMjUwMTMxMDE0NDA1WhcNMjUwMjA3MDE0NDA1WjAYMRYwFAYD
VQQDEw02NzljMmFlNS01MWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzo70DYaym0i4LrFozP8XUFdxweX8TQq8PDVjVH4RzizaYH6yrkBBixQ/y670
b2dPumI1Am9jNyi9YYimyCETSnfb0rFsJWakR3pINAHQ6SrBVXSNC2PCaLghqtgQ
Y2pZ4aKvL0u2QJdW6gteyGQLjYj7L3BixvD4aKJbDaCSRFDEDPXPo2O6Tw+pcART
bUkCXe1qxg1QmGm11PhY0acolwdHHm6SlSNseC0rVpZAG0sot6aoBAlyZXt1//Mz
yzm0+8ylsOYkTU0s7kOqwStFFf3a7dfGlY+YWJyd2MCc1NTU2YMWltw2UdKuJ0nB
ZqpPHoOFRXVbUfL2/HmF0aKTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLByMKew
B+QMc6Hzo5FmRrGVZFMzMB8GA1UdIwQYMBaAFKHaFborO7ZioXjibZZoFaIqLkaZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjU1Qy9FOTE2RDJFRUY4
NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3RtS2hlT0p0bG1nVm9pb3VS
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29kb1Z1aXM3dG1LaGVPSnRsbWdWb2lvdVJway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjU1Qy9FOTE2RDJFRUY4NUMxMUVDQUI2RTJFNjVDNEY5QUUwMi9vZG9WdWlzN3Rt
S2hlT0p0bG1nVm9pb3VScGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeTCtKGbP3I2zInevsreYfCf/l5DONzFG8Y6UR7arHzbM4PLNAg2XI
8kmHuTwxUnZiUZKLTI2KbnN90YnUzQsrg7oqpyInUePdXLc6KpR2Wk8BfY3lf0w8
hr8eUT5VcYdPCqQrb5/Li5bg9YwnD7cxQuX0ky5D10nIuCadz+GcggMKxPM0i19i
8dLze+6oqOr2cJGVz96V86kQgXVOb5+HvgCEE8fjdoF76cIMI926opFkKcaNaE81
BX/BdiLHjiD9gYcNr3zikcl/JBdO3IPilVjP49mb2Pd0wD6RT9+CM5KElz94f007
4ILkOAZuAtI9WmWN5dZ8zFEZTg2FWF0x
-----END CERTIFICATE-----
Generated at Sun May 11 02:07:08 2025 by rpki-client