Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
File: OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json)
Hash identifier: tVGoJJ43h/bA4ou+dNG1C9Io3/a5r0UBenpAzhT5sgg=
Subject key identifier: E8:91:F5:54:01:25:E5:8D:B7:CB:FF:A3:20:56:65:18:1A:F0:09:31
Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Certificate serial: 09E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
Manifest number: 09D0
Signing time: Thu 30 Jan 2025 20:04:54 +0000
Manifest this update: Thu 30 Jan 2025 20:04:54 +0000
Manifest next update: Thu 06 Feb 2025 20:04:54 +0000
Files and hashes: 1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: guEgWOT8viCDArDItKg85VPwewlVVPPoY9zwTD0+hJA=)
2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: Xr0kUKQZvKHV+XXy5dNfpEHtkH4Lcw1pk0TaWeYnQ8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Validity
Not Before: Jan 30 20:04:54 2025 GMT
Not After : Feb 6 20:04:54 2025 GMT
Subject: CN=679bdb66-ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:f2:14:a5:41:1c:4f:f6:16:16:46:0b:8c:
4d:0d:9b:cf:3c:ef:4a:a8:83:cd:8a:20:46:c8:f3:
83:b7:24:c9:c4:ca:00:44:14:55:0f:e7:e5:4d:72:
27:7c:dc:a7:10:e8:ed:85:f6:88:cb:53:2f:c3:df:
6f:93:04:b9:fa:81:6c:78:68:ff:71:4b:3e:db:ad:
df:ec:b7:a2:d7:00:cb:7f:37:c3:f1:be:54:78:5f:
78:6e:23:88:95:a0:ec:68:a5:7f:34:a3:d5:7c:73:
7c:6d:40:d3:97:51:0f:86:93:a7:38:7f:9e:bb:91:
06:57:ee:41:ec:f2:7d:f1:55:0a:97:91:c6:83:2f:
b3:b4:80:c0:f0:71:1d:0a:1d:6b:44:e0:a1:f0:48:
9f:8f:c4:ff:8e:e9:3d:16:71:be:0a:74:63:4b:43:
c3:3b:d6:95:31:10:be:46:be:ea:73:19:7a:b0:c7:
69:f8:3c:44:a2:20:af:9a:0f:15:4b:97:7f:5b:7f:
cb:a8:ba:09:54:bc:d0:30:28:71:09:b1:1b:8b:aa:
20:77:50:28:50:2f:3f:4f:8f:6d:77:9b:65:b7:bc:
95:92:31:f8:98:dd:10:a1:47:30:05:b9:11:fe:28:
e2:01:97:99:f3:d4:25:18:18:f0:05:44:60:ee:3a:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:F5:54:01:25:E5:8D:B7:CB:FF:A3:20:56:65:18:1A:F0:09:31
X509v3 Authority Key Identifier:
keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:45:5a:32:64:c6:7a:26:a3:4d:c9:1b:1b:5a:b2:1c:7b:88:
82:5b:ae:b8:78:2b:1b:bc:63:11:75:79:00:0b:24:a5:35:64:
7f:8b:01:35:30:97:ed:29:7a:88:dc:81:ff:e4:88:3f:03:e8:
d5:7b:5e:8b:bb:34:49:18:c7:a4:27:a7:d1:b8:36:27:3f:ad:
a4:77:89:90:86:c0:db:87:52:fa:01:12:a3:8e:54:12:c5:86:
66:08:3e:b1:15:14:21:d7:58:d6:69:b7:8f:be:ce:42:29:6c:
f7:38:0a:08:96:56:35:96:14:21:c3:b0:b1:1a:e6:07:b0:b2:
34:2b:c7:82:24:e8:95:70:cc:5a:1d:44:3c:e8:11:39:1f:b8:
54:70:3c:84:17:36:24:88:18:e1:17:a1:40:10:e7:de:6c:5f:
81:33:69:f1:40:8d:e8:b5:09:e7:4a:d8:90:fd:41:1b:a5:54:
3f:92:75:d5:90:8a:68:d2:a9:33:ad:57:c9:15:6a:de:09:6d:
12:93:72:37:bf:7f:db:84:1e:a5:fe:d5:a7:81:6a:89:14:a0:
f2:ec:44:29:db:73:d7:cc:7b:f9:99:23:f8:ab:61:ba:36:fa:
ad:03:7c:c9:1c:24:75:57:cf:6e:d2:37:4c:1c:22:c5:63:c9:
e2:47:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:12 2025 by rpki-client