Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
File: OxaIpfe3JKr754IKLGPZey6o5SI.mft (raw, json)
Hash identifier: Utq0RaKPEu8/dh8wvmoZoC0zzbNUVj2ixu9riP9W7WE=
Subject key identifier: F1:C0:B9:81:EC:CB:14:D9:05:AB:5F:E3:99:DE:8B:DF:C6:A7:52:BF
Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
Manifest number: 02DD
Signing time: Fri 31 Jan 2025 01:26:42 +0000
Manifest this update: Fri 31 Jan 2025 01:26:42 +0000
Manifest next update: Fri 07 Feb 2025 01:26:42 +0000
Files and hashes: 1: OxaIpfe3JKr754IKLGPZey6o5SI.crl (hash: dsHvl7n5FuU9RpM/yr5UMJdzaTOkC9L5UJU7GcfHOvg=)
2: 2D613294CD7611EC83259862C4F9AE02.roa (hash: eiU7ZSeORX7Nfv/I101YymEKed9tnUaeLJmxcj6rlLI=)
3: EF8CB49CD78F11EC91680D49C4F9AE02.roa (hash: lJKugMMEeA6hotCUmsieh3f9JUtmDi6Rwayct/vX1UY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Validity
Not Before: Jan 31 01:26:42 2025 GMT
Not After : Feb 7 01:26:42 2025 GMT
Subject: CN=679c26d2-ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:d2:0e:47:4e:a4:1f:8a:37:c2:14:78:da:
da:6a:2e:80:82:02:a5:c8:1e:bc:e2:35:42:c0:d3:
5b:07:38:3a:be:98:85:19:f2:78:03:90:22:33:c0:
80:59:9f:a6:61:45:77:bf:57:75:bf:8f:90:ac:73:
08:08:b5:2d:c3:9d:e9:7a:43:0d:6e:6d:c6:f9:59:
9e:57:38:c4:11:1b:26:9e:7e:b6:19:93:de:47:c1:
3e:1c:76:69:ca:49:d8:e1:27:12:f7:26:4b:b5:de:
f4:90:ea:b7:f2:1f:cf:fe:dc:1a:68:aa:6e:a5:49:
01:75:e0:74:ea:90:2a:4b:54:35:d2:01:6b:48:34:
54:69:6d:df:d4:e6:25:f7:76:b3:ff:af:f3:87:f7:
b3:b3:63:1b:8b:68:01:6f:ca:df:22:8c:e4:b9:fc:
0a:45:af:c1:10:53:58:80:7e:bf:d1:61:fc:18:0f:
b2:03:81:01:0d:1f:b4:fb:58:03:2f:17:b5:bf:bd:
9b:74:76:62:ec:54:4e:df:f8:fb:a9:da:17:8d:2b:
0a:08:0f:b8:9c:52:c0:e7:a4:4b:27:94:07:f5:5b:
3c:33:35:0d:b4:5c:7a:2f:48:c4:dc:da:e9:a7:04:
47:a4:ac:6b:a5:52:4e:7f:f4:c7:90:e2:81:83:36:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:B9:81:EC:CB:14:D9:05:AB:5F:E3:99:DE:8B:DF:C6:A7:52:BF
X509v3 Authority Key Identifier:
keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:4f:49:7d:17:0a:82:e7:de:53:1d:08:eb:b7:1c:44:88:eb:
7b:1e:60:9b:c9:6c:a5:72:ee:c4:0e:9a:09:73:f4:ce:8f:04:
b4:36:78:72:ed:1c:05:df:56:7d:54:a2:23:0a:1c:80:9e:72:
3d:fe:4e:d7:14:ca:65:44:1c:b0:7a:a2:cc:3c:86:e9:84:e4:
e3:87:cd:30:13:ba:d3:d6:10:b6:5c:d7:d3:04:14:75:92:20:
c3:97:d6:b9:8f:91:5d:fd:8c:2c:88:34:4b:f4:52:b8:a7:6e:
6e:56:f0:a5:22:0c:8f:35:06:18:0f:00:c9:d4:b0:dc:b5:60:
91:84:68:82:d0:fa:1e:64:b3:d0:1c:f3:b0:6a:36:4a:bb:c5:
ac:74:d5:e4:b5:c3:1a:b9:e7:fd:8c:11:91:b9:6b:91:8d:05:
d4:1a:b0:2b:d9:ff:60:76:8e:4e:fa:68:98:d9:c1:40:2f:cc:
26:d5:53:60:58:cc:c9:1a:b9:be:bc:95:6f:c1:06:84:d7:2e:
6d:e4:04:d4:a1:13:e6:b3:d6:5f:de:55:f4:1b:53:90:7c:c1:
f0:f4:24:ee:9d:d3:02:98:da:e8:74:3f:59:38:d0:09:91:8d:
c3:4a:cd:5a:f3:a5:a5:c2:a5:23:85:ef:90:59:5b:0b:d5:49:
6f:15:9a:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcyRkExMTAvBgNVBAUTKDNCMTY4OEE1RjdCNzI0QUFGQkU3ODIwQTJDNjNEOTdC
MkVBOEU1MjIwHhcNMjUwMTMxMDEyNjQyWhcNMjUwMjA3MDEyNjQyWjAYMRYwFAYD
VQQDEw02NzljMjZkMi1mZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cTSDkdOpB+KN8IUeNraai6AggKlyB684jVCwNNbBzg6vpiFGfJ4A5AiM8CA
WZ+mYUV3v1d1v4+QrHMICLUtw53pekMNbm3G+VmeVzjEERsmnn62GZPeR8E+HHZp
yknY4ScS9yZLtd70kOq38h/P/twaaKpupUkBdeB06pAqS1Q10gFrSDRUaW3f1OYl
93az/6/zh/ezs2Mbi2gBb8rfIozkufwKRa/BEFNYgH6/0WH8GA+yA4EBDR+0+1gD
Lxe1v72bdHZi7FRO3/j7qdoXjSsKCA+4nFLA56RLJ5QH9Vs8MzUNtFx6L0jE3Nrp
pwRHpKxrpVJOf/THkOKBgzbIaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHAuYHs
yxTZBatf45nei9/Gp1K/MB8GA1UdIwQYMBaAFDsWiKX3tySq++eCCixj2XsuqOUi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9ENzI0NDU2MkNE
NzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pLcjc1NElLTEdQWmV5Nm81
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL094YUlwZmUzSktyNzU0SUtMR1BaZXk2bzVTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzJGQS9ENzI0NDU2MkNENzMxMUVDQTBBQTgwNjFDNEY5QUUwMi9PeGFJcGZlM0pL
cjc1NElLTEdQWmV5Nm81U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGT0l9FwqC595THQjrtxxEiOt7HmCbyWylcu7EDpoJc/TOjwS0Nnhy
7RwF31Z9VKIjChyAnnI9/k7XFMplRByweqLMPIbphOTjh80wE7rT1hC2XNfTBBR1
kiDDl9a5j5Fd/YwsiDRL9FK4p25uVvClIgyPNQYYDwDJ1LDctWCRhGiC0PoeZLPQ
HPOwajZKu8WsdNXktcMauef9jBGRuWuRjQXUGrAr2f9gdo5O+miY2cFAL8wm1VNg
WMzJGrm+vJVvwQaE1y5t5ATUoRPms9Zf3lX0G1OQfMHw9CTundMCmNrodD9ZONAJ
kY3DSs1a86WlwqUjhe+QWVsL1UlvFZoi
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:59 2025 by rpki-client