Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File: oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier: SVCas22LDRtf8ABYZQOPJ1zO6uCuzIxatnXWbk0W93I=
Subject key identifier: 09:0E:03:B3:22:C0:B2:6E:19:B4:0F:1E:51:2C:87:74:1B:DD:D8:E7
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 03:20:47 +0000
Manifest this update: Fri 31 Jan 2025 03:20:46 +0000
Manifest next update: Fri 07 Feb 2025 03:20:46 +0000
Files and hashes: 1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: ++WX6uHqUO/5DB/VV08qTux5G//Z/JpG/ZkFmvqpSqs=)
2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: LK0ZOJt3bvu7IHmDVNJ+cUrmzRXOPpiZ1YyLnrDVzpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Validity
Not Before: Jan 31 03:20:46 2025 GMT
Not After : Feb 7 03:20:46 2025 GMT
Subject: CN=679c418f-057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:83:d0:73:09:1b:a1:3e:2a:cb:39:fd:96:
11:fe:c9:f6:3b:b8:74:3a:a1:bc:96:86:43:97:cd:
6d:88:ff:98:2a:69:08:59:c9:ef:2e:b9:1e:d8:5e:
4f:4a:b9:4f:b8:eb:89:1d:f0:19:2e:c7:72:e1:75:
80:77:8d:9d:dd:32:0d:2e:83:b0:72:37:27:20:c4:
09:bd:c1:97:6a:f3:41:61:0f:d5:fd:0a:f8:03:c7:
d3:ca:21:50:00:af:8e:73:d3:cd:e1:dd:f6:03:76:
e9:76:c3:5d:f5:f5:81:bb:35:72:3a:d5:51:ea:da:
0a:b2:85:0d:59:c5:95:49:bd:44:50:17:69:f6:f5:
f6:6d:a5:0e:b1:b5:95:08:1b:14:1c:2a:09:19:17:
14:ed:71:46:9f:c8:66:62:bc:0c:90:9d:bf:86:b1:
fc:cb:3c:81:3f:8e:84:03:d1:2e:e3:68:63:22:bb:
34:ee:6d:01:9f:99:bb:5b:78:45:20:57:ee:5c:11:
88:c7:91:af:31:8c:b0:ea:dd:6f:25:f8:5d:2f:df:
ed:c8:b0:86:34:af:0d:60:87:cb:2d:49:ec:6e:c3:
19:6c:fd:7f:67:39:12:03:76:1d:5f:b1:6d:11:ce:
7f:f3:63:c0:d0:2e:f5:81:89:f4:a5:60:79:71:ef:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:03:B3:22:C0:B2:6E:19:B4:0F:1E:51:2C:87:74:1B:DD:D8:E7
X509v3 Authority Key Identifier:
keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:28:0e:4c:b1:7a:e6:0d:d2:b6:32:f5:02:fb:90:ab:3e:86:
80:e9:79:db:9b:60:5f:b4:c6:77:6c:0e:63:fa:9a:a2:26:c1:
55:83:6b:75:46:68:74:4d:51:ba:47:f6:d9:4c:59:18:f6:08:
69:8a:a5:47:2d:32:43:ba:5b:fa:b2:a1:7a:56:ca:01:16:d3:
f1:ca:9e:c5:7d:39:8f:a2:93:79:ff:7e:b9:90:8b:fa:85:f8:
2c:01:1b:c8:ee:26:90:10:d2:91:9f:08:75:6c:0b:7b:4b:6c:
3d:e8:d3:9e:b4:91:fe:04:a3:0c:4e:60:1c:a9:c5:1b:ca:72:
88:99:03:39:7a:17:44:a1:c8:86:52:18:c1:58:56:a7:bd:1a:
88:db:ff:8c:cd:16:7b:4e:6b:9e:85:3c:3d:7d:95:af:58:17:
b8:d1:79:e4:1d:01:19:e9:56:c9:9b:c0:61:c9:92:24:ef:c7:
29:45:27:6f:6e:7d:b7:c0:68:00:6e:0e:1a:fc:22:5c:dc:8b:
f6:6c:38:94:b3:aa:09:ae:e3:b9:34:41:80:96:6a:bc:6d:53:
a8:c3:90:2a:78:25:a1:4e:f5:cc:59:39:fb:f7:fb:c4:6a:92:
b0:f3:9d:4d:13:32:cf:18:e0:dc:d5:45:cf:05:3c:8f:50:f7:
57:3e:5a:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD
MjlGMjAxNzMwHhcNMjUwMTMxMDMyMDQ2WhcNMjUwMjA3MDMyMDQ2WjAYMRYwFAYD
VQQDEw02NzljNDE4Zi0wNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnaD0HMJG6E+Kss5/ZYR/sn2O7h0OqG8loZDl81tiP+YKmkIWcnvLrke2F5P
SrlPuOuJHfAZLsdy4XWAd42d3TINLoOwcjcnIMQJvcGXavNBYQ/V/Qr4A8fTyiFQ
AK+Oc9PN4d32A3bpdsNd9fWBuzVyOtVR6toKsoUNWcWVSb1EUBdp9vX2baUOsbWV
CBsUHCoJGRcU7XFGn8hmYrwMkJ2/hrH8yzyBP46EA9Eu42hjIrs07m0Bn5m7W3hF
IFfuXBGIx5GvMYyw6t1vJfhdL9/tyLCGNK8NYIfLLUnsbsMZbP1/ZzkSA3YdX7Ft
Ec5/82PA0C71gYn0pWB5ce/yyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkOA7Mi
wLJuGbQPHlEsh3Qb3djnMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy
OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK
SzJoLXpHUU95RjNDbnlBWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsKA5MsXrmDdK2MvUC+5CrPoaA6Xnbm2BftMZ3bA5j+pqiJsFVg2t1
Rmh0TVG6R/bZTFkY9ghpiqVHLTJDulv6sqF6VsoBFtPxyp7FfTmPopN5/365kIv6
hfgsARvI7iaQENKRnwh1bAt7S2w96NOetJH+BKMMTmAcqcUbynKImQM5ehdEociG
UhjBWFanvRqI2/+MzRZ7TmuehTw9fZWvWBe40XnkHQEZ6VbJm8BhyZIk78cpRSdv
bn23wGgAbg4a/CJc3Iv2bDiUs6oJruO5NEGAlmq8bVOow5AqeCWhTvXMWTn79/vE
apKw851NEzLPGODc1UXPBTyPUPdXPlqE
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:20 2025 by rpki-client