Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json)
Hash identifier: s4kjh27wGGaAo30p0/hk6KGzGPgmbTYgJ03SG3VEKUw=
Subject key identifier: 76:B0:2A:CB:83:A1:46:1B:81:A6:A4:D4:3D:15:E9:D6:26:3D:58:85
Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA
Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA
Certificate serial: 1D03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
Manifest number: 1CF6
Signing time: Fri 31 Jan 2025 16:09:42 +0000
Manifest this update: Fri 31 Jan 2025 16:09:42 +0000
Manifest next update: Fri 07 Feb 2025 16:09:42 +0000
Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: dvKbxLqyfIv2C825WKoURjSidHjTFcRAAcWjRn6Tb3c=)
2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: jfTk7qLtFGzciF3MjfSmzCLIXIS5E+uoDhIbl0HSies=)
3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: gqOrlTvQP7NE8QcpWskAg9stXohxZ5iMQQauxzl2p0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7427 (0x1d03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA
Validity
Not Before: Jan 31 16:09:42 2025 GMT
Not After : Feb 7 16:09:42 2025 GMT
Subject: CN=679cf5c6-add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:e0:2a:92:a2:f3:ce:6c:a2:33:82:d4:51:
c4:9e:88:52:8c:b5:1d:67:57:f4:2b:7f:c2:95:a6:
db:0c:fc:2e:ce:59:de:5d:97:d8:d8:9b:ea:e2:c1:
b0:36:41:2b:ab:6b:33:d4:b4:94:b3:4d:10:38:cf:
27:04:00:eb:5a:6a:f1:a4:c1:5e:20:a0:af:e8:46:
88:1b:77:32:67:74:09:e1:55:c7:7a:2d:4e:43:85:
60:f6:3d:03:b5:98:6b:97:9d:79:a0:81:8f:52:c6:
01:5f:e4:d1:b2:f5:02:f1:7a:55:03:31:1e:eb:67:
c9:71:d5:49:01:9c:1e:90:9a:26:5b:07:e5:d5:5c:
72:65:37:85:d0:cc:0d:7b:56:f1:e2:37:53:30:4e:
2a:44:82:6c:ac:c7:f7:03:19:5c:d7:3a:95:8b:0c:
f1:67:69:d7:da:29:80:89:71:e5:88:4f:d5:38:c9:
68:43:66:eb:f4:74:e3:6c:0f:03:d9:0a:f0:36:79:
6d:d0:4c:98:d3:f8:cf:18:32:4a:ed:27:1a:06:fe:
4c:05:a8:6a:06:ac:80:3f:e5:6e:81:d1:34:68:e6:
30:d7:74:37:21:ee:dc:3f:ba:bb:69:a7:5e:96:02:
90:fd:7e:cf:c8:bf:eb:e2:41:eb:08:ab:90:5a:a9:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:2A:CB:83:A1:46:1B:81:A6:A4:D4:3D:15:E9:D6:26:3D:58:85
X509v3 Authority Key Identifier:
keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:0f:4c:e6:9a:d2:85:1b:55:c8:b9:c8:9b:91:a1:31:f7:
27:2f:69:e6:ac:ad:91:01:d1:9e:c9:4f:8b:09:8a:06:ea:10:
40:41:d5:42:7a:5d:5c:5a:ed:58:52:3c:18:23:02:f0:8f:02:
98:43:6a:34:38:1c:f6:14:05:30:1f:6d:60:51:3d:26:83:ae:
fb:f4:ec:d0:1d:43:98:0a:dc:13:8d:53:62:0e:67:69:50:89:
b9:1b:e7:5c:92:9e:d9:64:31:6d:b2:a8:19:bf:d0:04:40:fe:
5d:a9:94:8d:b8:b7:9c:c7:43:f7:cd:bb:5c:0d:65:a6:e9:6b:
fd:fe:65:23:2d:38:8e:91:d2:d3:48:33:e4:58:a9:c3:92:ab:
92:d6:22:52:66:90:5c:bf:ae:e1:8a:ae:84:44:e8:07:f1:37:
ba:74:76:62:58:da:fe:ff:37:a4:f0:58:01:e7:34:b9:5b:ed:
de:97:1f:c3:45:34:80:54:0b:ad:d7:f7:22:a7:76:1c:09:43:
89:07:93:19:ef:94:9c:33:52:24:dc:78:a5:21:c0:7f:11:15:
2c:be:05:a4:5d:c4:c5:cc:a3:84:03:8a:f6:96:ee:91:f1:c0:
dc:c7:e3:c5:a2:7a:24:d8:4c:92:19:dc:02:31:98:9d:96:12:
ff:d1:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:39 2025 by rpki-client