Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
File: oxVOxxr_DOw2jHltJXw6nAWJo_8.mft (raw, json)
Hash identifier: qXL2DGKtHnSkT46xCeBt1/nZXMxydrydBFcjf3Rnjmw=
Subject key identifier: 47:7F:57:D2:4F:54:73:AA:58:F6:A7:06:30:BE:8B:09:D5:5C:B6:6F
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 05:03:12 +0000
Manifest this update: Fri 31 Jan 2025 05:03:11 +0000
Manifest next update: Fri 07 Feb 2025 05:03:11 +0000
Files and hashes: 1: oxVOxxr_DOw2jHltJXw6nAWJo_8.crl (hash: GYdJwXmtF7FLj4lBoJCvV37B1WTyAVVJ+s6XtmOeRAQ=)
2: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (hash: IQwoPmbNS6EWj4SfGYbMHUkyg+0iQUeFh2X1891ay/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Validity
Not Before: Jan 31 05:03:11 2025 GMT
Not After : Feb 7 05:03:11 2025 GMT
Subject: CN=679c598f-992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:88:37:9d:7a:21:ff:49:6b:f9:63:ef:d2:
38:ba:46:24:05:f6:04:a8:4d:a3:4e:8c:05:3f:91:
43:54:5f:9a:f8:de:37:83:f4:3a:b8:3b:cc:e0:5a:
64:6d:06:d5:b2:e6:1a:67:4d:cc:e2:16:ae:02:ed:
96:f9:ae:b8:ff:25:14:29:db:cc:c2:35:20:0f:36:
15:c6:96:ea:39:85:3d:42:69:8a:7b:73:23:38:21:
0c:96:72:63:c4:56:fa:68:50:c3:b6:01:33:52:ac:
e0:cf:3c:ca:6b:c9:f9:70:2e:55:f3:27:ef:9b:55:
fb:2b:dc:30:dd:2d:a4:dc:62:b7:4a:7a:a3:fa:08:
0c:5e:b3:e8:aa:85:44:fe:90:31:df:e8:8b:0a:f0:
92:65:27:27:9b:e5:14:b4:74:32:4c:f3:80:ff:49:
d9:61:ea:11:06:88:47:6d:de:cb:57:41:18:0c:83:
53:01:66:0b:93:9d:8c:54:9a:2d:a1:04:93:2a:27:
94:a4:da:27:5e:b9:f9:bf:0a:ed:f1:6c:58:6d:e1:
ee:8f:8b:28:bc:03:5a:02:ae:68:97:56:d0:92:04:
2e:8b:d9:0b:e1:16:50:92:53:cd:fc:a8:be:62:89:
9c:b0:1d:5a:5c:6e:0d:51:5c:f6:36:86:96:d7:03:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:57:D2:4F:54:73:AA:58:F6:A7:06:30:BE:8B:09:D5:5C:B6:6F
X509v3 Authority Key Identifier:
keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:86:d5:5a:af:66:08:39:5f:22:90:bf:2d:67:f1:15:47:
92:d3:3c:0c:c5:de:3a:85:3c:bf:d4:ad:75:25:20:93:55:1d:
18:2c:bf:da:a8:e3:50:9f:05:fa:f0:d0:27:10:a3:cb:dd:e5:
64:bc:61:e5:52:7a:14:3c:80:a5:fd:b3:f2:00:47:2d:b2:42:
1d:c9:f3:e4:1f:86:32:3f:d7:32:f6:35:e7:c2:8b:be:a3:9c:
09:89:87:2d:a0:cc:0b:b9:b9:67:bb:35:8e:f2:0e:6f:b6:9d:
06:69:bb:7c:d3:2b:92:d4:89:0e:bd:42:ac:a2:3d:45:c5:87:
c6:fe:10:dc:89:07:63:6d:23:fb:49:fa:8a:28:8e:b5:f8:c6:
54:c9:ad:3c:8d:b8:7b:4f:f3:b9:a0:21:a5:d4:9e:ee:41:f2:
a0:77:e3:13:b3:d6:3f:03:f8:e8:77:07:48:f8:7e:48:4b:5d:
48:c4:fa:49:a2:f3:6e:73:87:97:ec:14:a8:34:c3:dc:89:06:
0c:92:e4:9a:ff:fd:6e:25:c1:23:63:24:37:0e:0e:c2:54:a8:
c4:55:8f:0f:fd:cd:f4:1c:1a:4e:83:e6:57:9f:36:41:2d:bd:
fd:bb:f4:1d:a7:f6:89:33:fb:37:38:06:ae:37:1c:17:ac:16:
3d:ab:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:58 2025 by rpki-client