Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
File: OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft (raw, json)
Hash identifier: IB4vQlhTquERm9bL3Em7L2vSCEL2Feq94ojT+l7JWMQ=
Subject key identifier: F4:C8:31:B4:1F:25:F2:B6:62:C2:EF:68:98:83:1F:08:49:79:09:0D
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial: 0597
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
Manifest number: 0592
Signing time: Thu 30 Jan 2025 23:14:08 +0000
Manifest this update: Thu 30 Jan 2025 23:14:07 +0000
Manifest next update: Thu 06 Feb 2025 23:14:07 +0000
Files and hashes: 1: OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl (hash: zYNkwCXJnrkgm1bFUT5pxmm1i7DNNxBDo4KoDOHVqZ0=)
2: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (hash: fabeHirzSfMRjgTkSzBs+NINgYgVd5ARAuZRjwIHiWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Validity
Not Before: Jan 30 23:14:07 2025 GMT
Not After : Feb 6 23:14:07 2025 GMT
Subject: CN=679c07c0-d617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:23:43:b4:e6:6a:06:d7:5c:89:25:58:3e:
31:1f:1d:18:38:7e:e1:be:36:e8:a3:2a:20:33:bb:
0b:b4:62:81:dd:c6:9a:0b:d5:03:9e:4f:c8:92:12:
95:34:44:f7:49:8e:b2:32:1c:a1:76:b2:b1:69:f3:
8d:1c:2c:ba:30:28:99:ae:73:1b:5c:45:80:ae:ad:
cd:ab:a4:0c:0f:59:ca:55:cf:67:5a:61:99:13:ad:
2d:72:31:81:5d:56:43:21:f3:6c:b5:b1:64:8f:76:
1c:d5:96:31:b8:66:d6:90:c0:aa:e2:36:71:f1:ec:
9c:13:35:87:23:d3:0a:17:c6:01:1d:c5:37:a7:85:
26:1c:fd:f1:8e:9a:6c:d2:0c:9b:15:3e:05:ee:4e:
8e:f0:2c:12:6c:b2:5a:39:29:37:a1:33:04:68:58:
c3:7e:fb:14:f0:04:ba:8e:af:a4:9a:d2:ca:82:a7:
30:88:8a:bf:9c:ac:38:8b:bb:5a:49:bb:bc:04:1a:
17:3c:f5:80:9b:a0:1c:84:a2:e0:7e:4d:67:17:19:
c5:03:79:e4:3d:83:e0:4f:fe:8f:9f:63:75:9d:9f:
6a:b7:29:09:00:a0:e8:01:a5:3c:b0:ad:03:9d:22:
0c:7c:82:c3:20:2f:95:85:0e:ea:7d:3f:ea:f2:70:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:31:B4:1F:25:F2:B6:62:C2:EF:68:98:83:1F:08:49:79:09:0D
X509v3 Authority Key Identifier:
keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:46:f4:c4:b0:9f:20:c0:62:46:e8:80:04:77:d0:73:89:ed:
df:7c:e6:52:5f:68:17:e4:1b:87:67:51:4a:0d:ca:1a:b9:58:
9a:60:66:a5:ca:05:e3:09:1c:f9:e8:2a:ee:af:0f:96:de:eb:
db:26:63:f1:92:88:c8:92:95:a8:55:89:03:92:90:87:63:73:
3b:16:b9:1b:bb:75:e9:f7:16:5f:17:f2:97:84:46:a3:af:21:
8f:9a:01:fd:a2:d3:50:24:c1:6f:bf:d2:34:2e:06:77:3e:d6:
ae:b0:e3:64:96:d6:21:df:f9:de:18:6b:fb:5b:48:4b:58:8a:
b9:61:e7:c3:9d:d1:23:3e:e9:61:d6:27:b3:b3:7e:db:62:15:
25:57:a7:1a:6e:9b:00:a6:75:3b:06:22:d1:ad:ec:2c:12:f2:
95:57:9c:5d:32:93:91:60:5a:6e:45:be:fd:56:4c:05:6b:60:
6e:fa:de:d4:82:9a:54:21:a2:25:f9:56:7b:4b:b1:3e:75:f8:
c2:a6:29:7c:b4:10:7b:11:60:2b:10:e6:e1:e0:5e:a7:d9:37:
0a:24:02:a4:8c:1b:e8:d3:97:69:56:93:ec:23:f4:14:09:34:
ae:cb:06:56:f1:f9:a0:23:9a:74:d6:e3:e2:15:71:c6:36:9f:
1b:d5:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:07:47 2025 by rpki-client