Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft
File: bOklSpy_oHBCJDc13OT79-VGEWY.mft (raw, json)
Hash identifier: aFdN1zFsaqILhgM2bjqzK8Pstz1dvVgm8f5umPXGdho=
Subject key identifier: 91:3E:29:35:CE:CD:46:63:6C:88:1F:88:AF:54:3B:0B:35:A8:B3:E6
Authority key identifier: 6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66
Certificate issuer: /CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166
Certificate serial: 0C06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft
Manifest number: 0C00
Signing time: Fri 31 Jan 2025 18:28:18 +0000
Manifest this update: Fri 31 Jan 2025 18:28:17 +0000
Manifest next update: Fri 07 Feb 2025 18:28:17 +0000
Files and hashes: 1: bOklSpy_oHBCJDc13OT79-VGEWY.crl (hash: 8CUd6Tf8xT5xwOtCMvaAhUOR/mtx+RrU3VVjQUf5ClY=)
2: 9DDA09EC05DC11EA9B6B0560C4F9AE02.roa (hash: tBcP96oatlX28aHZ2XCL2w+PP5ZPCSpD4OOUZWfI8Ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166
Validity
Not Before: Jan 31 18:28:17 2025 GMT
Not After : Feb 7 18:28:17 2025 GMT
Subject: CN=679d1641-c48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:27:b2:e0:98:41:34:ec:35:ea:ad:c1:f7:
32:3f:f3:66:f7:f3:c2:f4:98:45:87:85:21:26:bf:
04:39:42:9d:5b:b3:47:ca:a5:90:37:d7:3a:77:e4:
54:71:0c:e1:19:bb:3a:f7:bf:e3:f7:5e:8d:5f:b7:
47:a5:ce:98:2a:91:67:9a:94:c8:75:22:ac:03:6d:
9e:68:82:1b:9f:34:6a:f7:c4:69:3c:ea:48:aa:3f:
d4:42:1e:c1:7a:c9:31:68:f0:6c:51:9e:3b:a4:50:
8f:0c:6a:8c:be:15:ac:4a:5f:71:bf:0f:88:ca:8a:
9f:25:fa:d6:e9:ee:43:b7:bd:d0:5e:34:5e:9b:a5:
51:26:91:6b:90:30:d5:50:77:28:1f:b1:09:3b:73:
11:c6:e8:47:ed:63:9a:03:f8:64:00:9b:ee:b1:2c:
ab:b4:26:a9:10:e0:2c:cd:7e:0c:b8:68:01:47:f3:
62:13:e4:ac:c7:85:2b:e5:0a:e3:c7:8a:dd:4f:67:
3d:07:c5:ff:cf:57:fc:d6:6b:25:1c:f2:67:ff:b9:
0e:2e:18:d3:c9:37:2e:d0:eb:7a:51:0f:81:72:c8:
76:06:26:e0:49:0d:49:38:bb:99:f8:b9:0a:92:f4:
0c:e3:31:7b:ff:45:ec:08:9e:d6:06:ad:4a:38:ae:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:29:35:CE:CD:46:63:6C:88:1F:88:AF:54:3B:0B:35:A8:B3:E6
X509v3 Authority Key Identifier:
keyid:6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:72:02:50:b1:bb:0f:cc:d0:d1:f2:7d:07:d5:6a:5e:0b:0b:
7f:d6:95:6e:96:7f:3d:1f:6b:d5:c9:72:5c:f2:50:f0:1f:48:
74:16:e7:f0:c4:cc:c1:2c:32:c6:75:68:60:36:1b:10:d4:81:
5e:ac:52:13:99:f5:a0:6b:c1:de:68:26:d7:e1:8b:d4:76:0e:
68:91:a3:25:68:0b:de:c6:15:dd:74:3c:8f:34:f9:2d:d3:4a:
8e:03:dc:ed:fd:be:e6:a1:94:1a:19:cc:5d:fb:e8:50:07:4d:
6c:c2:9e:14:d9:43:35:25:35:3b:4a:ae:04:39:46:50:c0:fb:
0d:39:f2:d6:c4:6e:e9:0a:2b:21:a5:3f:72:b1:3d:ef:8b:11:
c0:cf:6d:62:99:76:a4:5b:86:d4:fd:f2:5e:37:7f:c5:89:c2:
2f:dd:f3:cb:11:90:51:70:e9:3e:c0:6e:2c:f3:fd:d0:06:5a:
ae:b0:2b:1b:0c:c3:a6:57:8c:2c:aa:b7:33:21:f9:26:34:80:
25:f4:c9:88:1e:04:67:a4:47:15:75:08:c6:17:80:40:a0:2a:
b7:12:da:91:0b:a3:73:58:0a:36:68:43:a2:19:d3:c0:fd:db:
3b:4f:af:03:bd:03:fa:45:1d:07:63:49:01:44:2d:f7:57:8d:
3e:d8:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:50 2025 by rpki-client