Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File: OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier: 2JqpX9i213JVY8TP0IbzALAErZeo5GZYUNfwUufD4dM=
Subject key identifier: E9:D8:27:8D:E1:34:99:D1:B5:E5:B1:A9:3D:28:54:7D:83:53:94:5C
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer: /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial: 063F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number: 0633
Signing time: Thu 30 Jan 2025 22:34:36 +0000
Manifest this update: Thu 30 Jan 2025 22:34:35 +0000
Manifest next update: Thu 06 Feb 2025 22:34:35 +0000
Files and hashes: 1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: OIeAcjdvaWXcVuTH5gc4tIuQCSnNYO10JHdq3s80kkI=)
2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: 4wWkALarNhzIV0d1ZybqQK8tC375NaVcRuBFdReJXsc=)
3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: ST3w5Tj88jMoz75b41w1YKAqx3Mmc8bfoi4qnLujj8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Validity
Not Before: Jan 30 22:34:35 2025 GMT
Not After : Feb 6 22:34:35 2025 GMT
Subject: CN=679bfe7b-855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:08:b2:53:16:b6:02:c8:97:51:b1:99:25:
66:89:92:61:a0:52:18:93:29:e4:8a:3a:ee:99:5c:
17:6b:41:fb:89:7a:cb:ea:81:4b:c3:46:64:17:e6:
37:93:03:22:f2:ab:99:a7:f7:78:c2:1c:73:98:c9:
4d:a4:67:92:18:9c:b3:b8:8b:48:93:d8:f9:d4:a0:
5f:59:57:6a:5f:d2:ee:cb:70:b4:6d:02:a6:75:01:
91:eb:75:c1:f7:c6:94:e1:89:8a:e4:9c:b3:23:85:
d3:21:03:29:7b:b9:ba:3b:10:05:41:b9:be:79:96:
09:e7:a8:52:1c:97:f7:a4:76:03:d3:9c:67:a3:e0:
8c:aa:fb:74:ae:8a:ca:6c:cf:90:c1:09:44:0f:fe:
00:d3:74:6c:fc:a1:40:45:19:33:2e:08:39:dc:35:
d4:55:67:67:66:1a:e6:13:12:7d:af:2e:7c:32:d8:
11:3c:d0:b4:93:f2:e9:35:c8:b2:5e:f6:5a:e6:79:
50:f9:fd:e9:8f:b2:83:cf:90:5e:3a:62:b7:f3:f5:
be:e4:01:e6:b6:ed:96:83:c5:a8:05:21:02:7d:62:
5d:64:b3:f0:bc:cd:0a:48:7d:f4:a8:2e:75:c1:59:
91:31:1a:3f:95:a0:91:02:07:f9:4d:c4:11:e1:ec:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D8:27:8D:E1:34:99:D1:B5:E5:B1:A9:3D:28:54:7D:83:53:94:5C
X509v3 Authority Key Identifier:
keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:12:c4:f4:e5:9f:33:73:e1:03:72:f3:d6:d9:5d:42:87:d5:
b6:46:63:fb:e1:1c:21:bb:34:b0:2d:81:47:7f:23:33:e5:34:
51:b6:a3:f7:ae:ff:a8:6d:22:1e:ab:4d:db:24:14:40:3f:97:
8c:ab:22:43:19:98:76:22:be:00:cf:e2:9d:d1:a4:9e:8d:2b:
1b:fe:91:c1:d9:d8:b6:19:65:3d:19:11:48:cd:e4:41:a2:4e:
2a:61:5b:c7:20:af:0d:48:7d:66:ca:06:81:d0:bf:90:91:27:
11:7f:b3:a8:f1:38:90:25:82:5c:26:b2:48:e4:69:3a:e1:9f:
94:3e:37:c9:cc:6d:1c:a5:64:94:26:a6:6d:7a:d7:84:cf:52:
17:0c:2f:1b:c3:c7:46:5d:ac:67:46:55:5a:5a:31:21:b5:da:
c6:13:36:04:ad:31:e9:9f:55:77:41:98:31:52:46:45:fb:09:
bb:43:0e:de:52:85:7d:64:ae:3a:93:e2:90:5b:21:fc:0f:d5:
53:0a:75:eb:05:02:2b:e6:95:46:d6:7e:19:68:2d:20:be:c2:
b9:90:b1:98:4c:55:76:a5:1e:ca:2b:f6:11:9e:74:f8:82:d7:
9c:9e:22:1f:40:d2:d2:29:a5:b9:86:c3:fe:e0:e4:ab:a4:fc:
e5:f5:83:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjczRUQxMTAvBgNVBAUTKDM5MzU2NkY0NDE3ODZEOTU4RDhBNzkxMThFOEVGNTZG
Qzg3MkU1QzUwHhcNMjUwMTMwMjIzNDM1WhcNMjUwMjA2MjIzNDM1WjAYMRYwFAYD
VQQDEw02NzliZmU3Yi04NTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0MIslMWtgLIl1GxmSVmiZJhoFIYkynkijrumVwXa0H7iXrL6oFLw0ZkF+Y3
kwMi8quZp/d4whxzmMlNpGeSGJyzuItIk9j51KBfWVdqX9Luy3C0bQKmdQGR63XB
98aU4YmK5JyzI4XTIQMpe7m6OxAFQbm+eZYJ56hSHJf3pHYD05xno+CMqvt0rorK
bM+QwQlED/4A03Rs/KFARRkzLgg53DXUVWdnZhrmExJ9ry58MtgRPNC0k/LpNciy
XvZa5nlQ+f3pj7KDz5BeOmK38/W+5AHmtu2Wg8WoBSECfWJdZLPwvM0KSH30qC51
wVmRMRo/laCRAgf5TcQR4ewphQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnYJ43h
NJnRteWxqT0oVH2DU5RcMB8GA1UdIwQYMBaAFDk1ZvRBeG2VjYp5EY6O9W/IcuXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzNFRC80RDhGQTIwRTdE
NDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJaV05pbmtSam83MWI4aHk1
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09UVm05RUY0YlpXTmlua1JqbzcxYjhoeTVjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzNFRC80RDhGQTIwRTdENDkxMUVCQTE2NTczN0JDNEY5QUUwMi9PVFZtOUVGNGJa
V05pbmtSam83MWI4aHk1Y1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXEsT05Z8zc+EDcvPW2V1Ch9W2RmP74RwhuzSwLYFHfyMz5TRRtqP3
rv+obSIeq03bJBRAP5eMqyJDGZh2Ir4Az+Kd0aSejSsb/pHB2di2GWU9GRFIzeRB
ok4qYVvHIK8NSH1mygaB0L+QkScRf7Oo8TiQJYJcJrJI5Gk64Z+UPjfJzG0cpWSU
JqZteteEz1IXDC8bw8dGXaxnRlVaWjEhtdrGEzYErTHpn1V3QZgxUkZF+wm7Qw7e
UoV9ZK46k+KQWyH8D9VTCnXrBQIr5pVG1n4ZaC0gvsK5kLGYTFV2pR7KK/YRnnT4
gtecniIfQNLSKaW5hsP+4OSrpPzl9YPn
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:28 2025 by rpki-client