Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
File: OHvc-OlHoaBOL0OH-99wZUpE0b0.mft (raw, json)
Hash identifier: 7YGc8cVdk+f3f0Zt1xEmAgR5O8S8KjbgR47f0V17VCs=
Subject key identifier: 43:88:F0:60:99:A1:63:EE:3D:6A:71:B6:9F:1A:F8:CB:9C:07:FD:5E
Authority key identifier: 38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD
Certificate issuer: /CN=A913ACF4/serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD
Certificate serial: 0913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
Manifest number: 090C
Signing time: Thu 30 Jan 2025 20:25:31 +0000
Manifest this update: Thu 30 Jan 2025 20:25:31 +0000
Manifest next update: Thu 06 Feb 2025 20:25:31 +0000
Files and hashes: 1: OHvc-OlHoaBOL0OH-99wZUpE0b0.crl (hash: qVo65LhPR3KHuRn63QZvb7APAZDAxiejqSpCDM73aHA=)
2: 25E6E72899FE11EAB3E30513C4F9AE02.roa (hash: Z6vRCcxL1bmdrItPmj7qCyzvetl7oMIALv4P0w4CxB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ACF4/serialNumber=387BDCF8E947A1A04E2F4387FBDF70654A44D1BD
Validity
Not Before: Jan 30 20:25:31 2025 GMT
Not After : Feb 6 20:25:31 2025 GMT
Subject: CN=679be03b-4a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:21:1c:c5:26:8b:10:dc:81:c7:a8:83:66:
ca:da:db:cd:f4:1e:2e:94:9d:d2:e8:78:66:89:ef:
ae:54:4f:e3:f5:47:8a:8f:5f:29:3a:1c:36:72:38:
1f:2f:bc:c0:51:c2:97:0f:5d:9a:ae:64:a8:0b:99:
4b:b4:2c:bb:87:50:63:f0:52:57:6e:74:2c:83:40:
bb:5f:77:0e:ae:a2:ca:e7:24:46:e6:d9:31:a4:26:
fe:81:08:61:da:98:7d:95:dd:b0:27:96:77:c2:42:
15:5e:0e:89:55:e7:40:5d:47:5b:c6:62:ea:0b:f3:
b9:68:70:35:de:e2:f4:82:bc:db:80:e6:f1:6e:4f:
62:13:52:cf:76:af:49:26:14:eb:c8:68:1e:11:a7:
df:da:83:3c:1b:12:c9:29:a8:e4:e7:cc:3d:53:b2:
e9:0a:32:14:c4:23:94:8d:bb:aa:ef:7b:72:ef:55:
78:d6:91:58:54:35:0b:ae:be:5c:ad:21:c6:b7:e1:
03:49:a2:18:b7:c6:8c:ff:8a:8b:17:3e:6b:10:35:
06:82:b4:87:0e:08:2d:51:bb:4f:30:90:73:91:e2:
ca:ce:70:49:60:05:a8:d5:75:20:f7:21:64:51:fd:
ef:d2:1a:b2:eb:91:61:36:36:98:62:a8:c6:00:af:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:F0:60:99:A1:63:EE:3D:6A:71:B6:9F:1A:F8:CB:9C:07:FD:5E
X509v3 Authority Key Identifier:
keyid:38:7B:DC:F8:E9:47:A1:A0:4E:2F:43:87:FB:DF:70:65:4A:44:D1:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OHvc-OlHoaBOL0OH-99wZUpE0b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ACF4/70E3036C99FC11EA96554510C4F9AE02/OHvc-OlHoaBOL0OH-99wZUpE0b0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:59:62:5d:79:d3:ac:0c:a7:21:df:76:26:99:a1:20:e6:5c:
c6:1a:74:22:55:15:75:af:7a:63:4c:07:cb:54:25:c8:5e:44:
c1:2a:b1:cc:32:6c:5b:1e:5f:1e:bb:24:93:aa:a8:b4:2a:7c:
ab:d3:2a:f1:ac:0c:ee:cb:62:4f:a0:22:aa:57:f2:c5:66:71:
20:27:6f:a7:23:b0:a8:f3:f5:8d:c2:8a:7a:83:b4:81:82:d9:
1a:2e:72:65:64:3a:90:43:54:6c:61:b1:1f:e5:c8:e9:7e:63:
1f:fa:f8:31:bf:71:28:b1:94:0c:4f:9d:8e:1c:e8:ce:7c:31:
57:41:d8:5a:e0:df:b5:a0:f7:0d:ad:11:2e:e0:fb:59:16:0f:
b5:89:85:e1:30:5e:b1:6a:fd:a8:48:c3:3c:7c:a1:7c:dc:95:
73:8f:13:ba:65:39:b1:da:4e:00:9c:b0:f7:78:dd:a6:cf:4b:
74:5b:99:00:b4:8c:86:40:6e:81:35:d4:11:60:72:6d:b5:57:
af:c3:95:8a:0a:cf:ec:1e:df:2c:69:42:67:b0:af:60:bb:3a:
6d:46:6c:07:29:38:77:b0:ee:f0:6d:8d:81:fc:13:2f:47:e9:
2e:37:b2:99:64:eb:8f:dd:d2:3c:f9:e7:95:d4:b0:c1:04:e2:
29:b9:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:23:32 2025 by rpki-client