Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier: XoQCUeUZUv28EyWFyArj0k1HAgLmW7oSo+5fhk88l7k=
Subject key identifier: 3E:39:AA:C2:3E:FA:81:07:BB:2C:B4:34:D6:89:50:4A:02:C2:33:2D
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number: 83
Signing time: Fri 31 Jan 2025 05:40:59 +0000
Manifest this update: Fri 31 Jan 2025 05:40:58 +0000
Manifest next update: Fri 07 Feb 2025 05:40:58 +0000
Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: iZmxgkn9oefGRBabaBkd/92WKl9tna3BFbMOTGKCnRI=)
2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: LydTto/QF734TxXbjD+YOeOmtAZVNFAjvOAnRG1pnYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Validity
Not Before: Jan 31 05:40:58 2025 GMT
Not After : Feb 7 05:40:58 2025 GMT
Subject: CN=679c626b-7eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:14:1d:d5:fb:2e:84:28:c7:46:f0:e8:22:
b2:1e:4c:46:d3:b0:e9:77:60:6a:e2:57:db:0a:72:
83:4c:6b:21:1d:53:3d:cb:d9:d5:94:19:26:2c:0c:
6c:a2:bd:44:fe:c5:1d:be:85:88:3b:34:8e:0b:15:
3a:bd:f5:1b:f9:31:b0:cc:dc:11:e7:45:6e:23:b9:
36:d0:70:b7:55:b7:39:a2:c6:45:94:06:d0:38:57:
1c:fd:77:da:91:f7:57:4e:49:b8:e7:b4:ca:ae:e7:
d0:88:79:7f:00:33:73:c7:c0:07:31:7a:68:0f:bb:
22:21:4c:5c:d1:1e:1b:7f:3c:7e:2d:05:25:10:3b:
da:72:06:a7:74:c8:63:ef:8c:02:99:36:f6:be:89:
e3:f9:0b:8d:3b:e6:67:95:75:6b:f0:15:6f:25:dd:
a5:2c:60:4e:33:0c:05:6d:5d:2d:5d:84:b3:f3:19:
f2:5b:1f:ec:f4:c4:ad:cb:ee:fc:7e:f5:cb:c9:e7:
7a:e1:3c:22:20:f1:1a:e0:51:c7:8f:44:32:b4:99:
b0:45:cf:d1:15:bc:c7:ff:e7:61:6f:34:f4:f7:f8:
5e:10:23:cf:d0:d3:a0:2d:8e:5e:35:31:60:fd:de:
f8:94:bc:be:0b:a9:90:d0:53:d7:03:71:e4:49:4e:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:AA:C2:3E:FA:81:07:BB:2C:B4:34:D6:89:50:4A:02:C2:33:2D
X509v3 Authority Key Identifier:
keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:a6:17:c5:99:c2:f4:b4:44:9a:0d:84:70:bf:d1:ce:8b:56:
44:b7:09:4b:c6:21:c4:9b:45:d6:36:c2:b1:51:7e:b4:13:0f:
49:76:1b:a0:c9:18:ba:a1:3f:eb:e5:56:81:4d:11:57:74:b9:
a2:32:4f:31:48:cb:80:b3:9a:d0:d0:ca:ee:4c:2c:87:20:8f:
7a:a2:49:f8:4e:e6:2c:57:ee:3b:5b:5f:2c:95:50:9c:88:ab:
bc:7e:a8:83:c9:76:8c:2f:19:f5:88:c0:19:44:5d:31:54:f6:
6d:03:f0:74:e4:27:50:1a:04:da:19:97:3f:e6:c9:69:c9:db:
3b:24:5b:a7:40:1a:68:fe:f2:61:ca:34:8b:93:e6:ff:e9:2b:
1a:5d:fe:64:e0:2c:41:6c:a7:96:8b:6f:c1:06:8b:9c:8e:d2:
92:f5:1d:72:2a:74:de:6d:d1:82:02:01:b5:77:2f:ed:18:50:
f9:c8:8c:97:e5:e3:f3:75:00:85:53:0f:3a:e1:a0:7a:79:0e:
d3:84:ab:3f:6f:47:ce:a4:cd:e7:c5:a8:ca:95:48:cb:99:24:
1b:fc:d6:8f:4e:94:2d:54:be:02:6e:cc:a9:a0:cb:f8:05:b8:
b4:22:d3:ca:8f:0d:29:d7:4a:d1:7c:3f:ab:01:ec:7d:a3:eb:
c8:5f:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:24 2025 by rpki-client