Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
File: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft (raw, json)
Hash identifier: He8o1rU8ae5BGil9+dMHd7oSUo1YIv9kQcsemQuAUXk=
Subject key identifier: E9:55:11:C1:13:2E:EA:CB:17:24:B3:E3:E5:86:2D:35:3E:DA:62:12
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial: 02FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
Manifest number: 02F4
Signing time: Fri 31 Jan 2025 01:23:12 +0000
Manifest this update: Fri 31 Jan 2025 01:23:11 +0000
Manifest next update: Fri 07 Feb 2025 01:23:11 +0000
Files and hashes: 1: rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl (hash: rZjz8XQXo8wY7+5rnHy4zlFzeIk25b5jtX9UXYmxED8=)
2: 5E979F10C6C811ECA5A9AB33C4F9AE02.roa (hash: hZ1F/54EU32b4+tOv1jdpwsQTgq+Rgy859FLjmzADU0=)
3: A047A07AD56811EFB57A5D33C4F9AE02.roa (hash: sculBNu+C3bTcMWuMUqGiXBXDN/H8rYURoXjaVPMA2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Validity
Not Before: Jan 31 01:23:11 2025 GMT
Not After : Feb 7 01:23:11 2025 GMT
Subject: CN=679c25ff-7d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:d4:1b:58:c4:95:ba:52:19:0d:83:42:22:
b3:a8:92:31:08:13:3d:b0:af:d9:cd:f5:b4:f7:f9:
76:b5:dd:2f:6a:90:6e:7d:f8:4b:cd:bc:2f:7d:5b:
3d:81:13:e6:fe:01:f1:51:0d:eb:4a:4c:8c:c4:39:
90:34:b6:57:d6:56:26:6c:bd:d2:be:68:9e:58:60:
81:9d:f9:09:0c:37:13:47:ac:21:24:91:6b:58:22:
22:31:d1:7c:6e:30:69:4b:58:74:0f:39:d4:3b:78:
70:49:24:5d:e2:84:98:de:e0:f8:67:9d:7e:5b:a0:
97:e5:19:6a:ca:f1:16:62:50:16:be:77:e3:a7:33:
e4:fd:e5:70:4b:26:71:1b:2e:76:3e:17:24:1e:0c:
0d:3f:eb:5d:4c:c3:43:99:91:77:a3:10:6d:79:95:
00:14:50:bd:8b:66:d8:03:25:5e:ea:65:3a:ab:a6:
6f:b1:32:a5:c2:b8:e2:92:79:9c:c6:85:6d:50:78:
75:37:cf:8a:5a:d2:3c:01:96:6c:0f:4b:7a:41:b4:
2a:28:a3:7e:14:8b:04:93:4f:65:8a:ab:7d:8a:dc:
00:e0:03:72:8c:c8:ee:b7:9c:52:35:05:1e:1c:4c:
d1:e5:ce:70:2a:4b:0f:2a:f1:b8:1b:02:e1:72:97:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:11:C1:13:2E:EA:CB:17:24:B3:E3:E5:86:2D:35:3E:DA:62:12
X509v3 Authority Key Identifier:
keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a7:dc:28:72:59:f0:47:db:f3:3f:85:53:a0:7c:0c:fb:cc:
14:fb:b1:95:24:66:50:74:bc:b0:5c:1d:e1:1e:8c:ad:e8:6e:
15:ee:1a:bd:70:25:21:24:61:85:eb:90:71:34:d4:48:20:9c:
0b:fe:3d:c4:b8:65:73:f7:eb:8e:53:06:64:03:6d:bc:88:76:
2f:13:54:cc:e0:f8:80:81:c9:e2:d3:5b:56:bb:90:2b:09:d2:
94:ba:e2:da:d4:92:fd:48:b7:26:fa:8b:f8:d9:e7:5e:ad:58:
84:3c:fb:96:ad:78:1d:32:f0:17:95:55:67:d3:3f:9d:02:ee:
fa:d6:09:46:a7:b3:84:ce:22:1d:c2:9f:7f:53:8b:fc:7f:67:
43:d5:43:06:a4:1a:a0:94:f4:9c:e3:fd:40:ac:9e:41:81:39:
66:77:68:ca:4a:63:2c:c5:09:e2:84:e5:e4:8a:4f:04:46:4e:
1b:f2:6f:f4:d6:96:21:53:56:9e:85:09:b7:da:c0:ec:d1:4d:
75:1d:ca:e4:5c:06:47:aa:8c:08:05:a5:84:86:5c:5b:3f:58:
91:28:4b:bc:27:f4:86:31:d0:92:f7:60:a2:a7:df:9c:8e:57:
4f:82:68:fd:e0:42:23:97:3d:76:02:71:f2:55:cf:2b:7f:2d:
42:9b:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:19 2025 by rpki-client