Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft
File: OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft (raw, json)
Hash identifier: 52AMTkEd+wp/xD/noU79Bn5GPZ0YVz50+AvVVT9vzng=
Subject key identifier: F0:F5:BC:A1:F8:78:B7:09:5D:98:2F:8D:EB:C4:8A:3F:84:BE:A7:04
Authority key identifier: 38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4
Certificate issuer: /CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4
Certificate serial: 043C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft
Manifest number: 0437
Signing time: Fri 31 Jan 2025 00:21:29 +0000
Manifest this update: Fri 31 Jan 2025 00:21:29 +0000
Manifest next update: Fri 07 Feb 2025 00:21:29 +0000
Files and hashes: 1: OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl (hash: oZVW/i/QvkNb4JqBSLv59AMyx2qRoppGPEe5gmSVKog=)
2: 2404BA68477011EC8A31B762C4F9AE02.roa (hash: w9FaGj3sY61MFEZzIunRrfWZ3OYXoXaJ/HX3XZ5M44M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4
Validity
Not Before: Jan 31 00:21:29 2025 GMT
Not After : Feb 7 00:21:29 2025 GMT
Subject: CN=679c1789-8ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:15:de:27:d6:9e:7c:71:8f:55:54:7a:91:
c1:72:cd:66:e5:91:dd:64:df:31:53:5f:7c:75:a9:
34:e1:05:09:c0:05:bd:18:43:a4:51:33:27:e7:f8:
3e:22:c5:64:61:2a:9a:4e:17:22:09:fb:cb:32:98:
bb:16:2d:6d:1f:c6:9f:33:c6:bd:de:9e:94:e6:7a:
2a:07:8b:90:35:d9:e5:98:a9:82:e1:d8:e4:a2:41:
a9:77:8f:5f:ac:2e:e5:c1:84:0f:d0:2a:a1:a5:20:
96:ec:cf:45:ad:ca:ef:ca:75:a5:6a:f5:3e:57:1c:
ce:0a:94:6e:7f:8d:b7:be:ca:2e:12:42:71:37:e0:
ac:22:67:fc:48:57:0e:98:41:ea:a1:f5:16:36:58:
e7:6a:e3:f4:05:0b:f5:7b:be:b5:8d:ca:34:1e:28:
a6:78:bd:01:3e:89:31:65:a6:bd:20:b0:d1:89:b4:
f3:1b:f2:20:56:3e:2a:a8:7b:52:6b:8f:1e:da:63:
fd:e4:1d:fa:b1:ed:b4:23:6a:aa:53:05:8d:11:9c:
61:8d:75:5e:7b:90:27:7c:29:f9:a7:b5:b3:61:4d:
24:f8:3b:ab:4b:0c:6a:58:5c:fa:38:d4:c7:3c:cd:
ff:7f:52:f4:09:78:75:da:b5:38:af:89:16:0c:40:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:BC:A1:F8:78:B7:09:5D:98:2F:8D:EB:C4:8A:3F:84:BE:A7:04
X509v3 Authority Key Identifier:
keyid:38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:f2:bc:78:33:7a:f0:12:cd:16:ca:81:4b:3e:7a:89:c3:04:
2e:5d:0e:92:78:f3:49:05:89:10:1a:6f:02:8f:07:7b:6f:7d:
5b:c6:e3:39:a2:e8:9f:6b:7c:d0:05:0a:e4:45:6d:c1:11:7a:
ad:3d:6a:66:85:d0:f9:33:b6:7c:8f:e0:25:9e:a1:ba:6a:9e:
d1:b3:90:98:e0:8f:05:c3:36:03:5a:1e:63:cc:52:5c:b3:87:
06:13:31:80:26:f3:82:6f:7a:a4:8b:44:32:e2:da:8e:bb:26:
13:3a:34:e1:95:95:f2:6d:07:58:2f:9e:76:c3:79:8a:d2:c9:
93:6f:ae:35:b7:18:dd:24:b0:9f:a7:8d:ea:60:06:bd:ee:9e:
37:59:16:62:a3:a7:2b:10:18:75:91:4e:0e:6c:94:0c:f4:04:
ea:7e:05:20:e9:59:df:c6:a8:fe:2b:1f:7d:fe:02:13:c0:b5:
24:a5:c1:17:e1:dd:91:2e:d4:a6:c4:82:c6:54:9c:02:45:85:
51:f0:4e:ce:63:6f:a4:02:aa:92:e3:9e:cb:bc:56:8c:b0:bf:
b5:9a:6e:28:95:f1:cc:fe:bb:8e:70:c5:8b:f3:d4:a8:37:39:
d9:eb:7c:c4:70:4e:ce:3c:f1:e4:74:de:36:67:c3:b5:18:58:
33:24:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:20 2025 by rpki-client