Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
File: OIX50v0IYCg7VTgfHE9KWjoe7z8.mft (raw, json)
Hash identifier: qmyMD+bsjw5xF1dlEyL3OxITvV0hp8a1ri3OQ18llpQ=
Subject key identifier: AC:CF:18:32:97:E5:C4:DA:A2:CC:92:9A:C9:83:3E:0B:2F:72:A4:70
Authority key identifier: 38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
Certificate issuer: /CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
Manifest number: 8F
Signing time: Fri 31 Jan 2025 05:33:36 +0000
Manifest this update: Fri 31 Jan 2025 05:33:35 +0000
Manifest next update: Fri 07 Feb 2025 05:33:35 +0000
Files and hashes: 1: OIX50v0IYCg7VTgfHE9KWjoe7z8.crl (hash: VIxxZ4ABxXr5FbD7jXm6mMZCSyADsbcIa/xvTfc7R4o=)
2: 744D8A1005EE11EF851FA42FC4F9AE02.roa (hash: g7/I1107TKCwjJnWd7arEQMGj8EBr7MRJOF1ZUaFXNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847C2/serialNumber=3885F9D2FD0860283B55381F1C4F4A5A3A1EEF3F
Validity
Not Before: Jan 31 05:33:35 2025 GMT
Not After : Feb 7 05:33:35 2025 GMT
Subject: CN=679c60b0-26e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:29:95:c8:c3:e2:49:88:95:3f:46:9f:f9:
9f:11:db:4c:b5:a2:fd:e8:f2:30:fd:ca:fa:94:25:
dd:f4:ee:d8:99:3e:52:cd:c7:8d:67:6a:9c:af:e1:
76:82:c7:f2:e1:ec:41:4c:26:c0:c1:68:27:88:7c:
8b:37:96:83:4a:44:24:c7:66:d8:4d:38:1e:bc:50:
0d:9e:a9:ec:ab:58:3e:9e:4b:0d:da:54:ee:11:6c:
9c:6c:54:4a:55:96:b9:74:7c:8d:94:f4:99:87:11:
cb:d3:fd:58:27:8d:02:d6:c0:91:18:57:b1:38:82:
1c:ca:25:b4:5b:56:b4:a4:7a:fa:f5:85:b0:80:25:
2b:3b:48:55:09:b2:45:93:92:9e:f9:63:47:78:27:
6e:91:7e:dd:c3:87:a8:7d:69:e0:8f:dd:da:09:26:
8e:7a:a9:45:43:88:bf:9d:a1:e0:73:6c:a9:9b:43:
7e:2b:84:73:55:eb:a6:92:52:9e:44:7c:59:64:5c:
a1:9c:53:f0:6b:1b:91:49:94:93:4a:72:85:ad:a9:
5e:d4:39:fa:40:29:3a:45:10:2f:29:ea:3f:c8:30:
85:7b:72:3e:e0:d6:35:f7:d7:e9:fa:ad:53:2b:c0:
36:cc:72:88:f2:11:cd:80:bd:93:3a:c0:d4:2b:4f:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:18:32:97:E5:C4:DA:A2:CC:92:9A:C9:83:3E:0B:2F:72:A4:70
X509v3 Authority Key Identifier:
keyid:38:85:F9:D2:FD:08:60:28:3B:55:38:1F:1C:4F:4A:5A:3A:1E:EF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIX50v0IYCg7VTgfHE9KWjoe7z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847C2/B92BFAD405EB11EF956BD643C4F9AE02/OIX50v0IYCg7VTgfHE9KWjoe7z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:d1:f9:6f:b2:29:f4:c2:21:8f:27:e3:62:8d:c3:3c:45:54:
1a:4d:c2:1a:e6:34:4c:e3:d4:1e:a2:47:9e:98:4a:3b:5e:dc:
2d:d1:2d:0e:d2:01:e1:66:e1:6c:c3:4f:f1:56:98:8d:73:59:
d6:1e:d0:68:a6:cb:92:a5:5f:ba:6f:ab:89:f3:02:86:a3:bc:
bc:6f:20:d4:a1:f7:36:3c:a5:d9:a0:05:55:1f:94:00:bc:ba:
58:59:02:9f:72:ab:ac:ad:b5:c6:e9:29:a7:72:d1:c9:79:d5:
26:47:fb:09:3f:7c:0f:7d:6b:33:c9:b2:c7:18:65:a6:bc:c3:
47:1c:37:c1:b2:04:ed:82:cc:64:42:09:ea:1b:80:4d:ec:32:
5b:58:92:a9:d8:bc:d7:6f:44:a4:f1:84:ee:e0:26:0c:fd:71:
84:02:3a:89:28:8d:c6:e4:a7:47:f5:d9:88:b8:02:5e:86:95:
1b:95:b8:e9:84:c5:ee:79:9f:bf:4f:4e:0b:90:53:f8:3c:11:
ae:51:18:99:c1:03:bb:2b:72:c7:e5:de:81:fc:66:f3:39:32:
67:d8:86:9f:37:c6:4b:7e:a5:4d:20:64:ac:78:80:fd:8a:1c:
43:df:6d:67:83:7f:d8:87:6c:80:11:28:1d:d6:21:e6:0e:55:
45:b2:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:33 2025 by rpki-client