Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
File: o3Aww1ljBAWOL5lPP9FHGjooPrM.mft (raw, json)
Hash identifier: mgMl3BAUD/IV/GCLYy22zE/rHakFpWRKAeuT8Fplf6o=
Subject key identifier: 53:C3:52:BD:06:FC:0D:10:D4:5D:BB:D4:82:E8:40:0C:46:78:A2:4D
Authority key identifier: A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
Certificate issuer: /CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
Manifest number: 0152
Signing time: Fri 31 Jan 2025 03:23:51 +0000
Manifest this update: Fri 31 Jan 2025 03:23:51 +0000
Manifest next update: Fri 07 Feb 2025 03:23:51 +0000
Files and hashes: 1: o3Aww1ljBAWOL5lPP9FHGjooPrM.crl (hash: Wu8XvQDnWFbGU17vRai179HWGmFNdrdwSU+wX4zak7E=)
2: A8006A74DA9511ED8DC28C24C4F9AE02.roa (hash: XonPHnI9n9dqc1tom7Es5BpnOeOt7wPnQuvQZ6j9Tf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163695/serialNumber=A37030C3596304058E2F994F3FD1471A3A283EB3
Validity
Not Before: Jan 31 03:23:51 2025 GMT
Not After : Feb 7 03:23:51 2025 GMT
Subject: CN=679c4247-9df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:77:ed:e0:c0:3e:8d:9b:0b:98:ec:98:7e:0c:
0d:0f:2e:33:9b:3e:36:0e:6b:7b:a1:57:61:61:bd:
d7:77:20:ba:84:05:c7:64:b7:99:00:12:74:e2:e3:
fb:3f:e0:dc:eb:b3:d4:26:78:99:50:26:b0:30:8f:
d8:41:2d:1d:e6:c2:30:06:8c:0e:5e:95:dc:f5:47:
06:c2:18:67:c6:20:d5:7c:dd:8f:63:30:69:74:57:
74:4c:26:f6:89:32:48:00:dd:1b:7f:10:a7:77:f7:
02:0d:f9:4b:07:a3:65:f2:a6:e0:94:2c:d6:3f:7d:
36:a1:1e:1c:fc:95:dc:c6:6f:cd:2c:a9:bd:5d:9b:
93:58:ab:e5:67:4d:1a:43:8e:b8:90:68:15:80:19:
f7:ff:59:9b:45:11:9a:15:38:a9:51:32:8a:ea:32:
da:16:06:6d:e0:f2:fa:e4:78:36:eb:b9:26:01:9c:
7b:c1:f7:d3:74:9f:ac:db:06:36:32:72:59:7c:25:
4a:de:a0:d1:1d:7f:31:6b:49:5b:22:97:b4:c4:e8:
23:da:20:ac:9c:a9:3e:0a:33:df:a7:2e:ff:fb:88:
b9:a4:ab:4a:51:8e:30:16:9f:49:60:c1:9f:5c:c5:
65:76:c7:e0:d8:ca:94:62:91:b4:f3:0e:1f:25:66:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C3:52:BD:06:FC:0D:10:D4:5D:BB:D4:82:E8:40:0C:46:78:A2:4D
X509v3 Authority Key Identifier:
keyid:A3:70:30:C3:59:63:04:05:8E:2F:99:4F:3F:D1:47:1A:3A:28:3E:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o3Aww1ljBAWOL5lPP9FHGjooPrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163695/873A6800DA8E11EDBACFCA24C4F9AE02/o3Aww1ljBAWOL5lPP9FHGjooPrM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:3e:ea:b2:7d:3b:7d:d1:22:eb:5c:73:ef:24:3e:68:39:
d5:22:92:5f:81:40:3e:21:84:3f:d4:9c:78:c8:36:3e:1e:3c:
20:35:ea:71:91:00:f7:98:05:cb:d6:3e:1c:63:56:e7:cf:4c:
bc:87:df:51:cb:57:06:e1:7f:9b:82:3c:b8:84:3e:f7:6e:a0:
be:72:b9:0b:88:04:79:31:9e:18:60:23:e8:43:fa:07:9a:bb:
f1:2c:00:87:6c:1c:5e:97:5e:d2:00:62:5d:c5:75:83:49:43:
25:c5:2c:24:fd:11:a8:d4:1f:a0:97:e7:e9:0c:e6:af:49:34:
d4:9b:93:e2:ba:38:80:25:d3:d3:b0:48:f7:a3:d6:ea:a0:dd:
2a:c7:00:fd:e6:83:09:17:5f:cc:d6:e0:ee:f6:d0:fe:26:15:
4c:3c:92:1e:41:17:d0:4f:61:85:79:4b:0a:61:c8:9a:ae:d9:
17:b0:45:5b:22:35:4a:b4:d6:a8:86:d0:19:29:10:40:1c:46:
f4:3e:4d:68:da:26:23:7a:fd:68:fe:ef:1e:3c:14:2f:12:ee:
69:59:57:bf:a7:36:3e:dc:e4:af:43:f7:0d:e6:06:81:c1:66:
d4:07:60:b6:c5:cf:86:59:ed:53:d1:9b:10:4f:92:fe:ee:04:
7f:d4:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:36:07 2025 by rpki-client