Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
File: oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft (raw, json)
Hash identifier: YTM3q6hGany9mJfdb8zkh+fgpcweSzBz1SyOznumqQo=
Subject key identifier: 44:2B:52:CD:13:F2:3F:61:C8:AC:9D:C4:82:0D:93:89:C7:63:F0:92
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0997
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
Manifest number: 0986
Signing time: Thu 30 Jan 2025 20:13:22 +0000
Manifest this update: Thu 30 Jan 2025 20:13:21 +0000
Manifest next update: Thu 06 Feb 2025 20:13:21 +0000
Files and hashes: 1: oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl (hash: zXxU73Mv29sBvQ/odDsqxpAJCRtHxV52O1QGMyReemk=)
2: 9FC3DC92883311EDB7271C62C4F9AE02.roa (hash: edRF5NmnUhALz+kYtW9yGNAWlG19b9huZPqLRyT0OOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Jan 30 20:13:21 2025 GMT
Not After : Feb 6 20:13:21 2025 GMT
Subject: CN=679bdd62-d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:76:dc:8d:b8:4b:a4:57:9e:a9:1e:19:6f:
13:e0:fb:60:24:b7:ad:9b:36:e1:c0:d9:4d:97:8c:
f6:fd:58:fc:fb:48:f0:f3:e5:fb:56:0b:83:57:ce:
58:e9:15:da:f0:1c:86:7d:d8:4e:9f:0c:fa:82:b9:
7e:4f:f4:4d:fb:65:b8:e6:71:e4:a3:19:59:64:c2:
21:5d:21:12:38:2f:07:ce:a1:35:97:d3:ec:49:9c:
a7:0e:77:55:eb:fc:df:a5:af:c9:f6:62:d7:5b:2b:
f6:fe:e5:c3:32:73:15:ca:9b:e9:26:41:fa:1e:01:
96:53:74:a9:d8:78:b1:9f:de:22:3c:33:51:b2:98:
cf:d3:39:8b:d4:e8:86:c1:0d:0e:71:7c:80:f8:a0:
48:aa:84:e7:c6:28:1b:c5:6c:9c:68:a0:86:96:bd:
fd:40:e2:db:cf:85:73:20:e7:47:52:bf:80:f1:43:
27:81:fb:37:9a:56:bf:e8:8b:6b:12:2d:2b:10:57:
79:ba:2d:ec:aa:86:36:01:ce:9a:9c:3e:8f:bb:5d:
d0:e8:f4:c3:b1:6a:47:5a:31:eb:39:7c:75:54:5f:
1f:04:9a:e9:1a:67:75:db:cb:83:d7:2b:ba:f4:34:
87:2d:6d:1f:75:ec:51:9f:c1:38:51:f5:49:a8:eb:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:52:CD:13:F2:3F:61:C8:AC:9D:C4:82:0D:93:89:C7:63:F0:92
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:98:6e:39:36:45:28:f0:31:e4:59:da:01:f7:d1:c8:e3:
e5:04:a0:d2:f1:10:08:ed:84:4d:c0:eb:a2:b1:d6:48:8d:68:
29:7f:32:82:60:c6:8f:a5:f8:bb:8a:ff:09:be:c9:da:83:9e:
32:68:9b:d6:b8:24:52:e0:82:6f:a6:d6:e7:93:25:67:da:2b:
47:5a:20:e1:3c:16:a3:98:2b:69:3d:b5:f2:2e:2d:27:37:74:
5a:0f:8f:28:ac:3b:0c:4d:59:41:8a:4e:88:69:92:bf:d0:e8:
6c:24:15:b9:c1:f0:cd:a9:14:74:fb:5b:90:d7:29:e0:5a:f6:
9d:f1:0c:be:78:9d:01:fe:67:7b:58:1c:f1:90:d0:1e:43:56:
44:25:df:8e:b8:d7:e8:68:dc:f0:89:fd:25:a9:fa:62:57:a6:
ef:98:67:6a:b1:70:0f:88:c8:66:b9:f2:b2:94:cc:0c:28:57:
73:d4:cb:8c:f3:de:27:ed:b3:b2:8a:a7:22:97:ef:f0:f6:86:
38:96:f4:7c:b0:28:2d:be:ea:57:b4:9f:6a:06:52:c4:c7:b6:
53:2e:ae:c2:b3:37:64:21:42:4c:4c:a4:35:bd:d5:be:7a:d9:
da:7f:06:c0:21:8d:f4:44:7e:18:d5:1a:6c:63:df:b2:6f:79:
8b:8c:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:12:16 2025 by rpki-client