Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft
File: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft (raw, json)
Hash identifier: rEOqaBw11ezZxAIqPBJx/FdKg2rPT4YKrexn0qQUZgI=
Subject key identifier: BA:C3:44:26:70:42:85:38:C7:48:20:73:72:38:B4:DD:80:A6:81:25
Authority key identifier: 3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1
Certificate issuer: /CN=A91498A4/serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1
Certificate serial: 0606
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft
Manifest number: 0601
Signing time: Thu 30 Jan 2025 22:49:55 +0000
Manifest this update: Thu 30 Jan 2025 22:49:53 +0000
Manifest next update: Thu 06 Feb 2025 22:49:53 +0000
Files and hashes: 1: OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl (hash: PoctsnDPJ8o18XEXnb7kea+eQg4xOvDyaFXdngGfHDU=)
2: A7A77B96911111EBA69D2641C4F9AE02.roa (hash: GeZswpwVwmpN5JkYUADU3m9LKzzMiHleESILy/kILG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91498A4/serialNumber=3A33A5DADC373726417DDD56E46790FF84BBCED1
Validity
Not Before: Jan 30 22:49:53 2025 GMT
Not After : Feb 6 22:49:53 2025 GMT
Subject: CN=679c0212-f016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:4c:49:3f:5e:68:b3:f1:91:ee:be:52:a2:
1c:88:8b:ac:3c:d9:56:a6:02:30:0b:04:4d:5c:2c:
64:6f:81:24:9d:1a:03:95:fc:50:43:23:b3:0a:44:
27:74:3f:b0:fe:62:5e:01:be:22:e7:b3:51:b5:2e:
68:b7:c0:ad:56:ef:de:e8:28:d7:2c:e1:d7:8c:f5:
cb:e5:4d:5e:bb:f5:80:66:66:c8:09:73:bc:b5:24:
3d:04:ab:08:f2:4d:6b:a9:4b:27:4b:ad:68:8a:90:
8c:40:ac:b8:a4:0b:cf:69:c3:30:14:7d:6e:58:aa:
02:1f:a4:6b:30:b9:fd:e3:aa:c6:da:57:35:5f:86:
1d:18:12:96:97:67:a2:e2:0a:83:9e:6b:66:78:54:
35:7d:6a:68:cc:ef:d1:3e:96:2e:2a:c9:ed:96:dc:
ae:fe:80:10:cb:58:6b:f2:19:f1:3c:b2:95:57:3e:
3c:6a:72:3f:3c:c6:3b:bc:0f:cc:11:dc:05:9a:55:
43:04:cc:5c:2f:ef:cc:83:d6:49:ae:31:c8:24:f0:
57:a1:7c:5d:6c:f7:f1:54:71:14:36:52:1e:72:f8:
37:2c:ed:37:a3:8f:1f:3f:7c:2f:34:3e:50:31:f0:
af:d9:0e:a0:4d:69:21:94:7a:30:48:48:bf:e4:e0:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:44:26:70:42:85:38:C7:48:20:73:72:38:B4:DD:80:A6:81:25
X509v3 Authority Key Identifier:
keyid:3A:33:A5:DA:DC:37:37:26:41:7D:DD:56:E4:67:90:FF:84:BB:CE:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91498A4/ECF30A9E905311EB9CA8721DC4F9AE02/OjOl2tw3NyZBfd1W5GeQ_4S7ztE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:76:ef:9a:68:5c:b8:a3:66:b2:08:f5:d8:7a:4c:11:1c:aa:
61:b9:a6:b6:38:7f:76:66:b3:6b:57:2d:75:3c:cb:f5:2f:b8:
56:d8:68:66:8a:c7:e0:06:14:88:4a:ce:1b:af:ec:31:93:63:
37:de:a9:c0:59:eb:46:11:c8:9e:b3:28:8e:51:c0:a1:15:29:
02:86:5c:49:31:d9:67:52:aa:12:81:32:7a:fb:ef:16:14:29:
5c:7f:a7:66:c2:c0:27:a4:ea:cb:3a:93:6a:73:77:91:c4:54:
ba:53:1b:0a:14:25:dc:d8:1d:9b:06:3b:c9:b0:57:a0:aa:13:
af:e2:54:05:f5:6a:55:0b:0a:88:cf:94:81:0e:07:f5:8b:fe:
80:6e:9f:9c:2e:54:9c:da:45:4e:e0:37:ac:c7:4c:1f:c9:4e:
b6:c9:49:b9:88:f3:ef:68:21:78:ae:58:27:ce:ca:f9:49:8e:
85:11:d6:84:d2:ed:38:70:d4:b0:c1:40:9f:0b:6b:83:82:da:
5e:35:6a:52:be:80:57:3b:86:ec:1f:7b:df:79:b6:c8:33:48:
17:51:e2:95:e9:70:fd:fb:a6:4f:fa:fa:7f:f4:99:b3:56:ed:
7e:24:f0:19:56:ec:e3:bd:c6:00:6b:f3:20:78:c8:a2:f7:67:
40:a4:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:26 2025 by rpki-client