Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File: Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier: CGkwoJ7gE/zZHZKhiiN7jR0OpLbjedfnsRlTWfz2SiM=
Subject key identifier: 1A:DF:FD:3C:77:24:8D:46:7E:66:78:5E:C3:9C:0D:73:71:E6:99:75
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer: /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number: 06
Signing time: Fri 31 Jan 2025 07:16:00 +0000
Manifest this update: Fri 31 Jan 2025 07:16:00 +0000
Manifest next update: Fri 07 Feb 2025 07:16:00 +0000
Files and hashes: 1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: 7yGvX0wfiwCbosYCVLVC6jIreH5lOifDpZDqmQFtnXc=)
2: E8112D9AD95A11EF815C7470C4F9AE02.roa (hash: mG5mPJ9TzgmR6vCAw7pVeBBypwUd04LX9QtyyGLebqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Validity
Not Before: Jan 31 07:16:00 2025 GMT
Not After : Feb 7 07:16:00 2025 GMT
Subject: CN=679c78b0-eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:c5:be:48:cf:4b:50:7f:49:ba:65:e2:27:
76:42:0b:fc:55:06:9e:49:d4:e9:ef:12:5a:20:23:
c7:1c:93:4c:8c:ad:86:38:a9:e8:62:33:8e:a6:ec:
3d:76:bd:7a:2c:3c:3d:ba:d2:6d:19:1a:1f:77:7b:
7d:84:f6:d1:78:77:a4:79:39:77:33:63:f4:7b:21:
c1:78:33:35:df:e2:38:4a:6f:9c:e1:74:23:cd:51:
1f:41:05:65:70:bf:82:48:67:cb:8d:3c:d3:45:52:
ea:c7:9d:3e:77:52:a3:00:36:ff:4c:bc:1f:c6:77:
4d:a7:be:b5:5d:a9:52:1f:54:6d:2f:40:84:1a:28:
df:80:3a:8f:fe:c2:6f:41:7b:77:50:7a:d5:6f:69:
59:d3:7e:62:3e:00:8b:82:76:47:39:c4:8b:a7:99:
36:64:39:8b:2e:b6:a2:39:2f:2f:2c:a4:a1:2a:49:
d0:14:9d:4d:b6:ce:86:e0:32:80:60:6a:6d:60:98:
06:34:53:83:5c:1e:c3:95:38:08:09:90:70:05:fa:
40:1b:8c:4d:3f:c6:47:72:ea:5c:85:7f:64:5b:a1:
9b:66:b1:77:02:3d:c9:6c:72:41:58:f5:c1:a9:95:
e7:cc:12:94:6e:18:29:55:01:85:5e:f7:47:c6:0f:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:FD:3C:77:24:8D:46:7E:66:78:5E:C3:9C:0D:73:71:E6:99:75
X509v3 Authority Key Identifier:
keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:c6:be:91:4e:29:3d:4f:c8:d9:b4:37:33:4f:66:e8:39:95:
6f:4e:fd:05:19:cb:82:e6:e9:f2:93:6d:12:43:d2:26:df:42:
f7:b9:e0:5f:57:e1:e9:42:57:95:2e:35:de:8f:e6:26:ec:27:
53:ea:a7:05:40:f0:1d:c7:b0:31:61:40:db:57:6b:74:17:ba:
c3:58:5d:55:66:e2:c8:2b:23:fb:df:01:7a:17:8c:1e:fe:92:
fb:47:ec:9b:93:ab:37:ac:eb:8d:0c:e8:b5:63:4a:00:56:64:
df:85:3b:9a:79:b5:d4:67:89:ee:af:3c:0b:67:1e:25:c4:3d:
bc:fb:2b:47:d7:fa:40:1f:00:23:e7:f7:98:d9:49:23:88:21:
f8:c5:51:00:71:50:6a:e7:f0:a6:77:a1:55:84:57:21:45:ab:
34:f5:a7:a9:fc:94:19:8a:90:00:26:5a:90:bc:41:7c:33:c9:
c0:71:b2:58:e6:56:f3:11:68:2b:05:2b:63:01:c6:af:67:ae:
f6:d9:f0:24:ce:43:90:98:f8:fa:83:3d:af:4c:ef:6c:18:4c:
81:8b:83:40:bd:10:ce:e5:d7:e4:bf:39:53:9d:a5:d5:c6:6b:
c9:0b:f3:46:21:b8:95:92:a3:bc:8b:fa:3d:22:42:7e:8e:c1:
f1:15:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:07:50 2025 by rpki-client