Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
File: owkQUxBPCE11ymUhc2bq35hJE8E.mft (raw, json)
Hash identifier: 5bM8O2mMbpiY5p/ERvh3z7sn9t12Y4cAT1c2nSEASg8=
Subject key identifier: F7:39:A0:7C:8D:E6:68:58:EC:CC:0F:94:4C:2A:F3:CA:0C:27:B7:3B
Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Certificate serial: 0C30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
Manifest number: 0C27
Signing time: Fri 31 Jan 2025 18:18:16 +0000
Manifest this update: Fri 31 Jan 2025 18:18:16 +0000
Manifest next update: Fri 07 Feb 2025 18:18:16 +0000
Files and hashes: 1: owkQUxBPCE11ymUhc2bq35hJE8E.crl (hash: hrJX6+/O5uo60lONLXh+iLDr11ItY0/CV8RqfZeAMA4=)
2: 38D7B616768D11EB94573712C4F9AE02.roa (hash: yJ7JJ57X7acJRxSqEFCo5C/DFSHfzNjQxukB2Lk3KGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1
Validity
Not Before: Jan 31 18:18:16 2025 GMT
Not After : Feb 7 18:18:16 2025 GMT
Subject: CN=679d13e8-0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:01:6a:5e:ca:df:7e:2b:d9:ee:6b:25:4d:
4a:fc:2f:9c:c8:cb:ba:02:7f:e6:ad:ba:46:50:2f:
e0:28:3f:8a:bf:a6:be:56:b5:2f:b1:e6:8e:08:63:
7c:a2:f5:b8:3f:82:c3:2d:e9:b7:59:04:f4:68:c0:
82:10:cc:56:29:f1:95:70:1f:02:ab:e4:d0:d0:5d:
d0:52:cd:17:87:e5:26:b3:e3:1f:f2:f3:54:45:ed:
99:f8:b0:43:1d:bf:10:42:2c:64:98:f6:ca:fa:4a:
aa:25:49:9a:03:cd:07:7f:93:e8:18:be:37:64:ce:
80:94:8c:a5:de:28:da:04:bf:e0:d3:77:93:ef:21:
a9:d4:cd:62:57:8e:b4:d4:0e:d0:e6:8a:d7:bc:df:
4a:c4:69:97:43:92:88:1e:34:11:56:fd:c5:02:95:
56:c5:58:4f:10:02:b1:c0:70:7d:fc:0a:0b:3a:8a:
6e:fa:0d:33:cb:85:14:53:03:93:93:9a:76:60:8c:
88:ab:ea:4b:95:4d:07:86:12:a5:d2:9e:25:5e:7a:
a8:03:c1:b3:93:c8:31:e6:47:f6:1f:d5:2c:36:20:
0a:d4:a8:83:d5:82:fc:40:99:1d:23:43:1b:5e:c2:
a4:0f:4c:d0:0e:e5:1b:10:69:eb:ba:4e:65:21:8f:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:A0:7C:8D:E6:68:58:EC:CC:0F:94:4C:2A:F3:CA:0C:27:B7:3B
X509v3 Authority Key Identifier:
keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:3a:de:20:be:dd:d3:d7:9d:53:c4:4b:d2:e7:f6:a1:d9:
13:7c:cd:02:f0:fc:f1:3f:e5:8b:cd:5e:ea:bf:cd:e5:ba:5f:
07:bf:89:dd:53:50:72:1f:99:da:a1:5b:0a:2a:cb:4c:7f:5c:
84:d4:3c:fc:1f:0e:28:1e:5b:80:f8:87:75:03:aa:bd:96:8c:
91:e8:ff:77:77:63:e8:e4:6a:f5:00:75:99:0f:8a:92:b5:75:
42:a8:f5:87:38:b3:76:d0:bd:90:27:62:e9:11:67:d9:92:51:
de:91:57:0c:00:eb:b3:b8:2a:99:cf:06:d1:4e:76:0d:e2:43:
1c:de:00:4e:84:f0:70:80:5b:77:c3:1a:33:54:96:aa:52:c4:
e0:54:f7:a1:14:e1:4d:cc:d8:cb:f8:1a:5b:40:85:e0:8d:21:
11:bc:93:37:98:44:38:d2:08:1f:4d:13:84:7a:e8:11:ff:17:
75:43:36:24:7e:ae:9b:b5:6b:51:dd:24:0e:8c:97:d5:0f:63:
47:91:58:83:4a:d0:a9:63:eb:f8:17:16:c4:9c:ff:4f:fa:8d:
5b:ee:af:4f:b2:39:52:3f:af:0f:d5:0d:f8:6e:f2:72:f6:2e:
56:cc:08:42:34:fa:78:12:78:8e:bb:10:cb:f6:07:5a:71:49:
f3:a7:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:04 2025 by rpki-client