Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier: Uhe7K2LVeG2OXN1B+yaJX54u6ybfSSP9tbqxDzVcARM=
Subject key identifier: C4:17:8E:79:FE:58:06:BB:74:61:DB:D0:49:C4:96:81:0F:08:4C:F5
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial: 056B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number: 056B
Signing time: Thu 30 Jan 2025 23:20:39 +0000
Manifest this update: Thu 30 Jan 2025 23:20:39 +0000
Manifest next update: Thu 06 Feb 2025 23:20:39 +0000
Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: Q7EXaIge0MyBTSYdE7kqp9LC4Sb1fBBaWJ4LeyDpI0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Validity
Not Before: Jan 30 23:20:39 2025 GMT
Not After : Feb 6 23:20:39 2025 GMT
Subject: CN=679c0947-d0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:f2:df:8b:3c:db:12:5a:4b:38:f9:72:4e:
84:ae:52:bb:71:05:66:ef:bf:ba:a8:e8:cd:db:87:
9c:cc:a1:f9:58:9f:f6:bd:03:35:a3:74:09:89:ea:
07:0f:0f:91:18:54:9c:91:8e:42:72:6d:a2:03:bd:
14:9a:7d:43:4e:4a:c0:4c:c2:ee:e8:6c:a6:de:fb:
10:01:1e:55:a9:37:df:bb:5a:80:07:04:6a:af:54:
9c:d1:1f:ee:8c:95:b2:e2:8c:2b:86:15:b0:49:0d:
2d:a8:51:ec:f4:21:63:be:da:b8:6f:75:1e:6a:64:
52:6c:ab:c6:cc:d2:a3:58:47:92:4e:5f:f4:57:04:
bd:b5:58:2f:61:55:4c:5a:4e:44:8e:e4:72:c1:43:
aa:8d:1f:79:c2:9e:27:20:e6:f6:12:56:a0:73:00:
65:15:d6:15:38:bb:57:87:31:8d:5c:b9:d5:de:a9:
ec:8b:b8:52:35:79:4d:45:60:b1:90:a7:b4:bd:6d:
8b:5a:e3:6d:2e:c4:d7:44:5c:9a:64:11:48:8f:91:
e4:2e:8d:a8:0d:82:6b:4d:af:9e:f5:e6:82:9a:1d:
94:12:cf:f5:8a:5b:a4:26:83:c7:6a:cd:ad:42:81:
9d:78:70:d1:c9:dc:1b:2a:5c:3c:44:dc:6a:29:d2:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:8E:79:FE:58:06:BB:74:61:DB:D0:49:C4:96:81:0F:08:4C:F5
X509v3 Authority Key Identifier:
keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ec:30:84:95:73:d5:1c:38:50:62:a3:43:5e:a8:5c:c0:7d:
13:0e:55:43:f3:05:7e:11:78:df:56:fa:9b:43:3e:ce:d1:d8:
74:51:fb:b7:e4:0d:f9:2a:fc:ae:39:88:41:d0:c7:52:30:af:
fc:e3:b1:66:62:3f:cd:42:f1:83:af:b8:20:9e:d1:a8:49:0e:
a4:dd:d6:b9:db:b2:af:4c:13:6d:a4:4d:ce:2a:49:a4:7e:9d:
fb:6c:4f:39:b8:fa:3b:c9:ac:dc:4b:40:7f:52:68:be:d2:ed:
16:7f:fd:95:78:37:ca:84:91:fa:b5:34:d0:49:fc:2f:f6:ef:
ca:36:5f:74:d0:e1:bd:93:29:58:5d:1a:d8:a6:a4:3a:bd:ab:
d7:af:34:7b:33:fe:9e:38:95:3a:c1:44:85:e5:26:7c:39:6c:
56:80:6b:6c:0b:c8:6a:5a:55:62:96:5a:d9:fd:0a:79:ca:39:
55:c6:f1:ae:39:ac:09:1e:46:09:22:74:47:9f:13:60:79:63:
d8:d7:10:91:8f:7f:23:c6:e9:ef:e7:e0:10:a2:b5:bb:b4:f9:
6b:7f:de:c0:83:a5:22:bd:04:b2:5b:ec:43:48:cd:43:70:3b:
54:30:40:4c:0d:b8:89:ff:a3:44:c4:55:9e:6e:85:f6:f0:2f:
f1:c5:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:22 2025 by rpki-client