Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
File: OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json)
Hash identifier: 8KUTEbs6i86KRWIZTPfAH2vThPfqyzzZd0d1pzaP4DI=
Subject key identifier: DD:9F:4E:6E:ED:5D:43:54:F6:A4:2E:DD:A4:DF:02:A7:C3:BC:92:7B
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
Manifest number: 049D
Signing time: Fri 31 Jan 2025 00:34:16 +0000
Manifest this update: Fri 31 Jan 2025 00:34:15 +0000
Manifest next update: Fri 07 Feb 2025 00:34:15 +0000
Files and hashes: 1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: 7g8j8HN2WwNT8MVXk5vhdh9gA6L/LAtL5YAYOOzqnzs=)
2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: +baf+FBOvTO91WyGSxfLgP4c75Re+v5ehq0gcaeZq1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Validity
Not Before: Jan 31 00:34:15 2025 GMT
Not After : Feb 7 00:34:15 2025 GMT
Subject: CN=679c1a88-4a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ee:2b:66:d2:3b:df:2a:c5:23:97:a9:67:92:
48:c6:10:a3:21:6f:41:63:36:39:90:75:99:35:c4:
c3:ea:18:6d:ca:3e:8f:c5:5d:76:44:c4:85:de:34:
05:fe:42:5a:93:87:f5:ad:ca:7e:20:db:eb:5d:b9:
03:b9:ab:46:ed:45:b8:a4:2d:e6:ee:83:bc:7e:70:
e3:93:be:ef:da:47:77:c7:6d:85:f6:7a:4d:7d:b1:
81:30:7e:7a:a9:fb:0f:23:4c:63:18:38:e7:ae:25:
6c:8b:55:14:70:99:06:d9:d3:2e:fa:ae:67:be:d7:
ce:81:29:14:4c:95:6e:b4:89:6c:53:75:82:42:3c:
76:9f:65:06:17:7e:24:68:8f:b0:90:26:15:8c:4e:
5f:a6:9d:24:6a:81:9f:f3:95:b3:31:ec:4b:e2:2e:
cc:6f:97:d8:de:5b:18:80:a7:86:2e:23:b1:c4:35:
a7:a0:fa:1b:5f:d8:16:f4:3c:c7:db:11:88:be:67:
e1:7a:ee:37:c5:54:d7:0b:93:d3:79:3a:96:ea:be:
db:c0:a0:47:5b:28:bd:0e:ac:f2:59:c6:0d:79:37:
62:88:f2:91:ba:b4:a4:71:cd:34:d6:c2:c3:c9:3d:
20:60:fb:23:96:00:6e:ca:a2:63:e7:43:88:90:87:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9F:4E:6E:ED:5D:43:54:F6:A4:2E:DD:A4:DF:02:A7:C3:BC:92:7B
X509v3 Authority Key Identifier:
keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:7c:60:22:72:2f:06:2e:47:15:07:37:de:1f:b1:d8:2d:
58:e6:35:fd:f4:48:6b:8e:38:3a:54:2f:00:ba:29:dd:cd:07:
1a:aa:18:91:99:15:2f:c0:c3:fb:c1:7b:81:e3:30:08:49:c6:
17:91:0b:22:ae:b5:16:ab:0b:e7:d8:42:4e:98:37:da:27:76:
7c:8d:58:dc:77:b3:06:9c:d0:07:40:b6:1f:4e:35:68:02:fc:
26:22:e6:a5:15:56:bf:6b:de:04:77:07:e5:9a:69:f1:50:e2:
d9:8c:07:53:4e:94:6e:b6:5c:48:65:f0:3b:3c:68:e1:5d:97:
cd:e9:0e:74:22:0b:6e:56:91:c6:c8:50:ea:71:a5:77:60:72:
d4:d4:5c:66:a1:6c:02:87:31:21:9f:df:89:91:07:a1:46:f4:
37:41:9f:0b:0b:33:2f:33:0e:3c:62:29:bc:ef:53:98:e7:e1:
c9:a9:40:6e:c4:76:17:9b:70:b4:34:67:45:24:03:90:ee:3b:
8c:22:6b:22:51:d9:f0:7d:66:db:fd:bd:23:29:e9:dd:bc:13:
87:ec:5c:2f:b6:01:ba:9c:46:03:cb:71:56:31:be:76:6f:c2:
8e:75:52:e4:f9:85:a5:30:75:45:a9:0f:48:b8:27:50:d6:87:
5d:ff:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:26 2025 by rpki-client