Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json)
Hash identifier: g4eZEiiuljpj6RNnzcTehJDNUAnl+AQ6VgPXDiIcFEY=
Subject key identifier: 72:D9:5E:B9:FA:50:59:B1:17:EC:02:C5:C0:01:77:20:EF:96:9D:4A
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial: 05F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
Manifest number: 05F1
Signing time: Thu 30 Jan 2025 22:56:22 +0000
Manifest this update: Thu 30 Jan 2025 22:56:22 +0000
Manifest next update: Thu 06 Feb 2025 22:56:22 +0000
Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: /PC2+/VXdTy5JVSY4j3gP8CYtvtHCuX/4T/kKRKymIs=)
2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: JP5QB1zVHjOC8Yy1kU6cPSVIQkrzd0sn+DomcdrK1tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Validity
Not Before: Jan 30 22:56:22 2025 GMT
Not After : Feb 6 22:56:22 2025 GMT
Subject: CN=679c0396-27e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:14:90:20:57:b9:b3:b2:1e:56:5d:d1:49:
49:17:2f:d9:d7:95:23:6d:bc:f2:7b:ec:9b:ef:0e:
3b:42:b1:e7:5d:a5:2a:bf:27:81:3c:ca:57:da:ec:
95:8a:5a:bd:47:6d:19:4c:99:00:3e:cf:ca:0f:28:
16:0c:df:5d:d8:5a:f1:f3:9b:1d:91:34:eb:06:8d:
26:d1:3a:27:09:32:1d:28:df:57:b2:e1:40:e5:e0:
c9:65:1a:0c:50:08:e8:fb:dc:4a:ef:f9:8e:b4:3c:
e4:5d:39:1a:29:d1:e3:7b:39:17:b0:75:88:2c:d1:
fd:3c:75:3a:1a:02:12:68:f7:63:2b:50:e0:ea:01:
8f:e7:20:92:c9:54:b7:95:f5:89:72:88:bc:d5:ec:
55:c7:15:a7:b0:c0:6b:83:2f:c8:17:99:2b:73:45:
3f:88:64:05:5f:d0:d8:89:c4:a7:81:f4:64:31:35:
1f:f9:3b:bd:30:4f:8f:41:61:71:72:db:c4:4f:a9:
80:50:6d:e9:f1:f6:c3:ef:0f:80:cb:db:30:28:61:
95:6b:2d:d5:56:25:c0:91:c8:f8:66:4f:19:e0:3f:
8e:ed:a5:31:9e:4d:69:7c:5b:0e:3f:ed:b7:07:22:
e1:d4:d9:fd:ce:4b:34:35:a4:cf:65:09:48:30:f3:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:5E:B9:FA:50:59:B1:17:EC:02:C5:C0:01:77:20:EF:96:9D:4A
X509v3 Authority Key Identifier:
keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:c3:d2:70:2a:74:81:58:20:a3:e6:d0:b6:fc:3e:27:5b:
55:fe:78:82:72:ec:cc:56:6b:8a:a7:cf:07:dc:7b:2c:71:c2:
a7:7f:93:f9:57:53:6d:65:2e:0c:69:fd:2f:14:a6:a3:59:85:
e0:92:bd:71:bf:b2:d7:54:fd:a3:12:ef:41:eb:b8:68:45:3b:
6a:08:25:e3:3d:76:ce:4a:c2:c1:4a:a0:37:b6:55:2a:a8:a1:
62:96:24:7c:b1:73:99:47:09:98:77:80:5b:fb:1e:16:67:f7:
a6:9f:a5:30:9c:5a:10:a2:4a:98:71:19:c6:87:3c:3b:bd:12:
37:02:2a:95:a6:c2:a0:25:63:98:87:b4:e8:09:91:d5:7e:99:
ee:13:02:b2:92:ff:f0:cb:d3:38:4d:70:f0:71:e3:0f:39:f3:
07:aa:1e:d2:88:9b:ca:8d:83:8d:d6:90:38:2a:45:35:5a:b7:
91:e4:c8:23:44:c8:db:6b:80:d8:dc:b6:9b:bb:d8:da:2a:df:
22:ac:d5:78:fe:9b:dc:a0:4b:2d:56:a5:9b:36:f3:26:3f:b2:
3b:2e:2a:b9:78:09:4a:59:a2:61:c2:bc:3f:45:d3:04:3a:4c:
01:c3:a6:98:f2:2a:59:7b:08:0b:53:c4:07:f7:1c:b2:df:5b:
06:37:13:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZFRjMxMTAvBgNVBAUTKDM4NDA1MjJFMDU2RDMzNzUxRkU3OTZBNDM5NUI4RDRE
RkRFNThGOEMwHhcNMjUwMTMwMjI1NjIyWhcNMjUwMjA2MjI1NjIyWjAYMRYwFAYD
VQQDEw02NzljMDM5Ni0yN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGsUkCBXubOyHlZd0UlJFy/Z15Ujbbzye+yb7w47QrHnXaUqvyeBPMpX2uyV
ilq9R20ZTJkAPs/KDygWDN9d2Frx85sdkTTrBo0m0TonCTIdKN9XsuFA5eDJZRoM
UAjo+9xK7/mOtDzkXTkaKdHjezkXsHWILNH9PHU6GgISaPdjK1Dg6gGP5yCSyVS3
lfWJcoi81exVxxWnsMBrgy/IF5krc0U/iGQFX9DYicSngfRkMTUf+Tu9ME+PQWFx
ctvET6mAUG3p8fbD7w+Ay9swKGGVay3VViXAkcj4Zk8Z4D+O7aUxnk1pfFsOP+23
ByLh1Nn9zks0NaTPZQlIMPNfnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLZXrn6
UFmxF+wCxcABdyDvlp1KMB8GA1UdIwQYMBaAFDhAUi4FbTN1H+eWpDlbjU395Y+M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVGMy9ERERDMDFFQzk4
NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0zVWY1NWFrT1Z1TlRmM2xq
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi9PRUJTTGdWdE0z
VWY1NWFrT1Z1TlRmM2xqNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuWMPScCp0gVggo+bQtvw+J1tV/niCcuzMVmuKp88H3HssccKnf5P5
V1NtZS4Maf0vFKajWYXgkr1xv7LXVP2jEu9B67hoRTtqCCXjPXbOSsLBSqA3tlUq
qKFiliR8sXOZRwmYd4Bb+x4WZ/emn6UwnFoQokqYcRnGhzw7vRI3AiqVpsKgJWOY
h7ToCZHVfpnuEwKykv/wy9M4TXDwceMPOfMHqh7SiJvKjYON1pA4KkU1WreR5Mgj
RMjba4DY3Labu9jaKt8irNV4/pvcoEstVqWbNvMmP7I7Liq5eAlKWaJhwrw/RdME
OkwBw6aY8ipZewgLU8QH9xyy31sGNxPb
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:57 2025 by rpki-client