Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
File: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft (raw, json)
Hash identifier: UikS63dLNnjk9r5X8byEZq3qVfy6ktMyKqKUl/coqcI=
Subject key identifier: B6:33:4B:28:A0:0D:A5:3B:98:21:E5:A5:C7:6C:10:0F:2D:63:1F:A2
Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
Manifest number: 02C1
Signing time: Fri 31 Jan 2025 01:11:18 +0000
Manifest this update: Fri 31 Jan 2025 01:11:17 +0000
Manifest next update: Fri 07 Feb 2025 01:11:17 +0000
Files and hashes: 1: Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl (hash: CHbQvXeqagYts69f2DZlHgkfXE8fupKZqmsfw0PZ4ro=)
2: 03C06766DC1211EC80AE816DC4F9AE02.roa (hash: mEEKH95d+OgwXbrm1P5n8VIPEc83nHxYRt6EH7spnqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C
Validity
Not Before: Jan 31 01:11:17 2025 GMT
Not After : Feb 7 01:11:17 2025 GMT
Subject: CN=679c2336-5483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:74:91:02:15:f7:44:1a:39:29:df:6f:4a:
3d:6e:a5:c3:92:15:03:d6:40:02:7e:a9:47:f9:7f:
6f:41:ce:3f:21:c0:5f:4b:33:3f:60:39:1b:bd:40:
c9:76:bc:07:90:db:73:dc:92:8a:c9:2e:24:ed:30:
3d:b7:22:60:ec:9e:94:d4:2d:96:82:9c:05:f3:62:
06:ef:c8:91:45:ff:09:b2:30:a6:f3:00:d1:54:98:
33:a6:90:a6:61:1e:f8:de:19:9b:20:02:63:47:be:
6a:e6:3f:ea:41:e9:96:8c:b6:72:7f:a0:57:cb:a0:
ff:f1:80:b2:61:62:9c:e6:7b:2f:12:e9:11:67:e6:
4c:d5:cf:d1:15:64:63:ef:c1:55:75:a1:e3:00:e8:
35:b6:66:df:5b:30:96:fb:f3:35:a9:90:c2:ef:f9:
c0:85:03:6b:db:fe:1c:86:e5:dc:e3:3f:70:b4:3a:
20:71:0b:56:4e:48:42:c4:c3:d0:d9:ca:dd:65:08:
40:18:e9:c4:a8:6d:76:98:00:53:f0:c3:3c:84:4d:
c8:5c:00:9e:e3:80:4d:98:6e:24:d1:3a:84:8e:7a:
61:2e:aa:a4:8b:58:a7:ad:3f:43:ab:ba:db:8f:8d:
b2:05:de:31:4c:05:2f:5d:90:90:1b:c8:a2:8f:44:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:33:4B:28:A0:0D:A5:3B:98:21:E5:A5:C7:6C:10:0F:2D:63:1F:A2
X509v3 Authority Key Identifier:
keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:95:6e:63:0d:10:3e:2e:fa:f3:ac:5b:63:09:1c:35:cb:3d:
aa:8a:94:2f:e3:11:a0:65:67:cb:47:02:6f:2c:35:fb:2d:15:
81:95:45:c6:c0:08:d9:d0:bf:8a:39:69:46:54:6b:5c:a2:d1:
aa:f7:c6:a6:79:95:b1:1d:af:68:21:74:f1:b0:e9:8e:95:ba:
84:41:86:64:91:84:9f:77:e1:46:50:0b:1b:7f:ac:fd:a9:3f:
64:e5:89:c3:fa:63:e7:ff:66:70:36:f7:4a:20:d5:6b:78:66:
55:fa:bc:f9:62:08:23:8e:9d:e1:09:af:ee:fb:e4:f0:ab:31:
4a:5f:5e:e1:a6:38:b1:ec:7f:ce:6d:31:87:4a:b9:2c:81:b0:
ce:9c:9b:5a:93:39:b5:be:b0:ee:a2:3e:e0:e2:33:e2:60:a9:
61:d7:64:4c:6c:a9:b3:b3:e2:67:46:27:30:9b:dd:f7:58:4d:
cc:4e:9c:a2:63:4d:fd:8d:27:57:99:7b:fc:42:c5:09:1d:5a:
eb:8a:e5:cd:bd:f3:b1:d8:1a:17:dd:e2:1c:28:9b:b3:8e:da:
ac:a9:c0:31:9b:2c:b6:d9:b5:4c:43:b7:ad:7d:ed:15:ef:85:
85:ea:1d:91:b9:ad:a2:5d:ee:80:75:36:1f:8b:e1:0e:98:01:
01:99:09:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3
RDQ1OUYwOUMwHhcNMjUwMTMxMDExMTE3WhcNMjUwMjA3MDExMTE3WjAYMRYwFAYD
VQQDEw02NzljMjMzNi01NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsy10kQIV90QaOSnfb0o9bqXDkhUD1kACfqlH+X9vQc4/IcBfSzM/YDkbvUDJ
drwHkNtz3JKKyS4k7TA9tyJg7J6U1C2WgpwF82IG78iRRf8JsjCm8wDRVJgzppCm
YR743hmbIAJjR75q5j/qQemWjLZyf6BXy6D/8YCyYWKc5nsvEukRZ+ZM1c/RFWRj
78FVdaHjAOg1tmbfWzCW+/M1qZDC7/nAhQNr2/4chuXc4z9wtDogcQtWTkhCxMPQ
2crdZQhAGOnEqG12mABT8MM8hE3IXACe44BNmG4k0TqEjnphLqqki1inrT9Dq7rb
j42yBd4xTAUvXZCQG8iij0T1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYzSyig
DaU7mCHlpcdsEA8tYx+iMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC
RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRFRC9CMzVFQjUwQ0RCRjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFr
cjZ2OUs2TU1pNFY5Ulo4SncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALlW5jDRA+LvrzrFtjCRw1yz2qipQv4xGgZWfLRwJvLDX7LRWBlUXG
wAjZ0L+KOWlGVGtcotGq98ameZWxHa9oIXTxsOmOlbqEQYZkkYSfd+FGUAsbf6z9
qT9k5YnD+mPn/2ZwNvdKINVreGZV+rz5Yggjjp3hCa/u++TwqzFKX17hpjix7H/O
bTGHSrksgbDOnJtakzm1vrDuoj7g4jPiYKlh12RMbKmzs+JnRicwm933WE3MTpyi
Y039jSdXmXv8QsUJHVrriuXNvfOx2BoX3eIcKJuzjtqsqcAxmyy22bVMQ7etfe0V
74WF6h2Rua2iXe6AdTYfi+EOmAEBmQmt
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:15 2025 by rpki-client