Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
File: i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft (raw, json)
Hash identifier: EkuJG4a7k+JLaqp/CVRgkVHXy3ynxLziiICv2wL1Lxo=
Subject key identifier: B7:76:29:41:AD:B0:C5:F2:C5:4A:A4:2E:15:CA:E6:53:C9:19:A7:0C
Authority key identifier: 8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
Certificate issuer: /CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Certificate serial: 0C29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
Manifest number: 0C01
Signing time: Fri 31 Jan 2025 18:37:44 +0000
Manifest this update: Fri 31 Jan 2025 18:37:43 +0000
Manifest next update: Fri 07 Feb 2025 18:37:43 +0000
Files and hashes: 1: i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl (hash: ckzs2Tunp+lpN1zx2YECWtoC/O+f2YDMjoVHNoNodi8=)
2: 50AA91CAD70311EFB9BBC86DC4F9AE02.roa (hash: gdYeSr8OVfEXIHB8AE/R/OGyXt1CPyW6FryfjJbmXTw=)
3: 8577B1EAD1BF11ECA166E56FC4F9AE02.roa (hash: UKp0al5lwDctbpMZ4w91PmU9xh+b2uAj1qbyNOwUx6Q=)
4: FD1CA67AAD5511EDBA936539C4F9AE02.roa (hash: xNrMx2ykeoPHlp4OwjxlD2woswWyefyqLirhxUQ7v60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C21E/serialNumber=8BE3874546E90BA83237179EE8932013B2D9F840
Validity
Not Before: Jan 31 18:37:43 2025 GMT
Not After : Feb 7 18:37:43 2025 GMT
Subject: CN=679d1878-9c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:ba:ec:cb:da:c1:3c:04:ec:16:07:88:70:
1c:5c:db:a4:75:7a:d6:f4:49:d2:56:78:5b:1a:9f:
8c:df:bf:f9:7b:05:2a:5d:f5:8c:4b:32:e3:93:33:
31:5d:cd:bf:15:36:b3:6f:04:d4:f3:ed:c7:f1:c8:
73:78:2f:16:fb:78:47:4d:88:0f:f4:49:bf:e5:ca:
5a:76:e5:76:cc:81:24:17:26:f9:9a:87:a7:05:01:
5d:f5:e3:73:ad:f4:c8:9c:c6:e5:8c:eb:f9:f7:47:
df:a3:f5:ff:5b:f6:a5:8d:31:f8:d4:43:37:e6:c9:
76:6b:0b:95:64:2f:ee:9d:06:1e:40:05:a4:41:76:
6f:3e:53:56:2d:49:68:fd:a8:e4:67:60:97:78:65:
29:30:77:5a:83:89:b7:33:16:4c:3a:ca:76:32:f7:
49:03:7a:f2:ef:24:44:b2:11:2a:8e:18:ab:8c:ef:
0f:45:2a:b1:ca:10:13:c7:e0:1c:b8:fe:06:39:a6:
96:8f:33:a7:71:40:bf:7f:79:2a:03:6d:a0:c1:94:
40:a3:e4:9b:62:b6:2f:fe:4c:d9:c3:56:6f:7d:10:
68:c6:27:4e:6d:97:0a:c2:c2:f6:90:e4:74:f3:50:
f1:c8:8a:56:87:f9:a4:57:4b:5a:8d:40:52:8a:a5:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:29:41:AD:B0:C5:F2:C5:4A:A4:2E:15:CA:E6:53:C9:19:A7:0C
X509v3 Authority Key Identifier:
keyid:8B:E3:87:45:46:E9:0B:A8:32:37:17:9E:E8:93:20:13:B2:D9:F8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-OHRUbpC6gyNxee6JMgE7LZ-EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C21E/60C181540B8911EA8E5AB75FC4F9AE02/i-OHRUbpC6gyNxee6JMgE7LZ-EA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:86:4e:c4:7f:47:17:58:bd:44:52:50:a7:ca:a1:f8:21:
29:6e:a7:dc:d5:a5:40:62:4f:c0:cc:a7:63:f9:17:ef:52:8a:
4a:d9:d4:02:b0:0c:44:2c:2b:0e:1e:b8:ea:7c:9a:c5:42:c8:
08:aa:cc:5b:a6:8f:1a:39:83:80:e0:83:ca:53:3c:88:5f:0f:
28:b2:e9:eb:67:f2:db:a2:a2:3f:c4:27:23:fa:68:05:4b:93:
c5:f1:63:8e:4b:19:22:9b:90:48:80:c3:b0:54:f3:48:2b:25:
7b:a8:12:0d:3f:9f:15:0f:38:03:30:3c:ae:a6:4c:61:24:82:
b1:f6:ee:ed:1e:0d:48:d7:f5:21:56:de:e5:31:f6:3a:b3:d5:
ba:63:20:86:b1:4d:b7:3b:68:2e:60:24:1a:44:8e:6f:6f:1c:
fb:b5:39:9d:39:7d:de:73:64:71:82:fd:d1:84:00:04:eb:5c:
c5:b7:57:98:17:db:bf:7e:d3:61:52:03:80:4e:8f:c8:b5:bf:
eb:00:d3:75:d4:0a:ba:b9:df:fa:7e:66:f0:e1:4c:22:23:ee:
35:72:3a:6e:b0:61:e4:be:cc:5a:3d:31:4f:cd:b9:de:35:5b:
50:85:24:a7:aa:c6:2b:6e:d6:b1:39:66:9c:fc:74:d7:01:dc:
78:0d:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:09 2025 by rpki-client