Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
File: khO1BHpA8jx8YASA5tqnoc9_oug.mft (raw, json)
Hash identifier: o/uYDXPrqocjhHNiOktrE5aWzNG0X+kdCUTxP99DIg8=
Subject key identifier: EC:02:3A:4E:85:34:D3:FF:0F:74:3A:E5:6A:25:E6:F4:69:0E:97:29
Authority key identifier: 92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8
Certificate issuer: /CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
Manifest number: 0104
Signing time: Fri 31 Jan 2025 04:08:13 +0000
Manifest this update: Fri 31 Jan 2025 04:08:12 +0000
Manifest next update: Fri 07 Feb 2025 04:08:12 +0000
Files and hashes: 1: khO1BHpA8jx8YASA5tqnoc9_oug.crl (hash: LmfyXDBXkvSTXRx011Bfff3xnSPIzH5kql0QQncwesM=)
2: 4E18682450A911EEA39AAE41C4F9AE02.roa (hash: z3jylC3bOFS/QeMNqO6FEMdonfOGPmCY4+yy8XOk4xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91435F3/serialNumber=9213B5047A40F23C7C600480E6DAA7A1CF7FA2E8
Validity
Not Before: Jan 31 04:08:12 2025 GMT
Not After : Feb 7 04:08:12 2025 GMT
Subject: CN=679c4cad-e01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:18:dd:19:c1:a6:b5:ab:8d:41:eb:85:25:
a8:d0:bd:a7:3a:7f:6e:44:9d:75:e3:6b:75:d5:ff:
8e:50:48:43:90:16:60:94:3a:d9:06:3c:ed:7c:12:
aa:e9:4c:0a:b7:8a:5e:76:75:54:41:ee:34:33:2e:
ab:f0:e3:6c:73:fc:f8:e0:eb:3c:f2:3e:f7:9a:ac:
e4:a3:79:4a:00:33:8c:7e:63:b9:72:e7:8f:cc:0d:
2d:90:59:94:e7:af:c9:dc:66:7f:53:db:26:44:0a:
b2:91:44:6d:a4:64:d6:ec:f3:9b:5a:e7:e9:12:4a:
93:e1:78:f8:5b:cd:ea:d1:3a:ab:9a:0c:60:84:1d:
fd:ed:ae:9b:ad:90:92:5b:b6:cd:b3:57:e8:8e:a2:
16:ae:60:93:7e:40:55:28:d0:84:a8:71:70:39:8e:
39:f0:69:34:ff:91:09:ae:29:3f:1d:18:5d:26:8d:
dc:9f:4c:bd:a1:ef:bc:68:44:7f:dc:86:49:93:84:
77:63:02:04:82:f5:c3:90:31:ad:d6:4e:ad:01:e1:
46:e1:6f:49:89:96:70:49:1a:78:75:b9:a8:e1:7c:
d8:6b:0b:3e:bf:2a:83:f1:c6:98:f0:6d:6d:3d:18:
52:5e:48:a3:8c:17:fb:58:db:5f:14:22:20:46:bb:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:02:3A:4E:85:34:D3:FF:0F:74:3A:E5:6A:25:E6:F4:69:0E:97:29
X509v3 Authority Key Identifier:
keyid:92:13:B5:04:7A:40:F2:3C:7C:60:04:80:E6:DA:A7:A1:CF:7F:A2:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khO1BHpA8jx8YASA5tqnoc9_oug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91435F3/9B5DB5EA50A811EEB6DE093FC4F9AE02/khO1BHpA8jx8YASA5tqnoc9_oug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:17:d2:c1:5f:77:79:10:19:7a:b0:0e:87:f4:08:df:e7:52:
a8:2b:f1:62:3a:df:b4:f0:0f:d3:87:65:2e:5a:2e:96:ac:58:
1e:2a:2b:6b:1e:a1:99:60:83:b3:29:38:40:bd:cc:80:8b:49:
ea:1d:5c:2c:5f:30:ae:2a:2b:4e:6a:98:c0:69:26:7e:a7:85:
58:c8:8b:d7:c4:05:64:8e:17:ca:19:42:55:fc:01:08:d1:42:
31:2d:e6:84:94:7f:d8:c6:81:5a:a6:03:2a:28:48:64:55:80:
3c:13:3e:d1:d4:ec:6f:ca:45:2b:9f:d6:08:10:ce:b1:2d:4d:
30:4f:00:d4:48:2f:5d:6d:89:c6:3e:65:2b:78:c3:f6:d2:b1:
ef:e0:86:b6:91:48:1a:59:d8:85:5c:1e:3e:74:80:10:3e:68:
a7:29:a3:5c:9d:05:cd:2c:55:85:c0:eb:d8:3d:ce:3e:67:85:
e6:46:b0:c2:9c:42:0d:bf:11:8b:7b:d2:5a:97:af:a6:83:1b:
f6:c5:6a:27:52:78:11:17:f2:63:74:33:16:6e:82:c9:00:e7:
35:8b:73:5d:23:28:50:20:0f:a9:8f:be:b8:6f:8a:d6:37:77:
d0:bf:f9:01:b6:9a:4f:af:6e:fd:e1:ca:5f:83:b5:e3:7d:21:
62:7e:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:04 2025 by rpki-client