
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
File: mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft (raw, json)
Hash identifier: tGRi/gB+UMu4AxEAgjloOaHZzmjiFpYT1LlxRTETGfQ=
Subject key identifier: C6:9B:6E:8E:11:6C:20:5D:3E:02:3A:24:10:34:8E:A5:B8:32:33:32
Authority key identifier: 98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5
Certificate issuer: /CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
Manifest number: 0198
Signing time: Fri 31 Jan 2025 02:49:59 +0000
Manifest this update: Fri 31 Jan 2025 02:49:58 +0000
Manifest next update: Fri 07 Feb 2025 02:49:58 +0000
Files and hashes: 1: mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl (hash: r6AwbX0wLLIb965OQrSg/jsw+454v7qdlAQKH1x1hU4=)
2: 40EF3C8690CE11ED98F4C344C4F9AE02.roa (hash: qvDqXEXQjbuHwCkNJ/vKqUaoawDx9hQmZK2ov3G3QAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191989/serialNumber=98E54ED57250C612747E3CA296853EAF919059F5
Validity
Not Before: Jan 31 02:49:58 2025 GMT
Not After : Feb 7 02:49:58 2025 GMT
Subject: CN=679c3a57-d102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6f:ba:11:6c:12:b8:5e:ae:f6:39:7b:e9:2a:
77:fe:5d:16:88:87:a1:74:1b:f6:30:52:43:4e:3b:
27:60:50:35:a3:78:5c:0b:96:f2:f5:2b:b9:4d:88:
4a:03:1e:71:b2:c8:07:8a:43:25:da:68:a8:81:b0:
dc:97:21:08:22:75:df:6b:dc:39:a1:f8:9e:29:cf:
fb:80:19:1e:f6:00:65:83:c5:83:99:e1:02:78:91:
09:3d:7a:83:c6:8e:ee:55:bb:8e:78:6b:31:0c:44:
56:cb:59:2a:d3:d4:0a:fe:ba:91:a1:80:ed:72:be:
82:66:cc:dc:96:4f:7a:7f:e2:31:73:b4:37:14:4f:
55:a4:d9:ed:ee:da:b5:f9:85:2b:dc:1b:dd:58:e9:
6f:e9:54:47:da:37:61:7f:22:3e:63:bd:01:41:a0:
ae:70:6d:81:e8:15:d2:70:fd:ce:b1:59:3b:fd:ca:
b5:21:1e:dd:5a:36:ea:a4:4f:5b:34:15:4d:dc:1b:
f6:58:c2:70:64:2d:9c:6b:91:d7:56:11:92:c0:7d:
42:3a:89:6a:87:f5:89:a6:44:a8:ef:83:bc:14:49:
84:8c:d3:08:68:95:1d:52:9c:25:ae:f2:c1:84:7c:
7e:2b:20:17:ad:6b:30:35:95:78:77:99:ff:ef:0f:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:6E:8E:11:6C:20:5D:3E:02:3A:24:10:34:8E:A5:B8:32:33:32
X509v3 Authority Key Identifier:
keyid:98:E5:4E:D5:72:50:C6:12:74:7E:3C:A2:96:85:3E:AF:91:90:59:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOVO1XJQxhJ0fjyiloU-r5GQWfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191989/587414D2863B11EDB57E7C35C4F9AE02/mOVO1XJQxhJ0fjyiloU-r5GQWfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d8:1c:18:d0:9f:e3:73:57:03:86:6e:03:22:5b:16:dd:fd:
de:3c:7e:6e:37:91:56:3a:ec:27:42:62:71:da:71:d1:6f:63:
d9:43:7d:83:76:57:c6:cd:a2:86:0a:f1:2a:6c:e5:81:47:72:
4f:b8:0b:03:d6:f7:93:af:36:19:a3:53:fe:11:b2:e9:26:aa:
9e:fb:4a:da:dd:6b:76:da:e6:07:2b:08:8a:35:5a:a5:db:b6:
5b:61:52:52:ea:04:7a:d8:3b:75:0f:16:2e:d8:65:4b:c5:bf:
01:69:a1:1b:66:de:e1:82:fd:66:b6:a5:ee:9d:27:9a:7a:e1:
aa:e9:fa:2b:7a:49:3f:90:71:75:af:a5:f2:c2:c1:c1:c1:29:
34:b7:b0:d5:72:1c:42:e3:31:7a:fb:1e:d9:47:f5:a6:b1:cb:
12:71:df:20:0f:ad:05:9e:98:9f:88:7f:13:1a:34:87:72:74:
ca:25:6b:b2:7f:32:4d:2b:63:09:4b:b4:86:19:20:de:fb:72:
98:52:59:4e:28:2a:08:47:ac:67:43:7a:63:48:48:ca:c0:5a:
a4:48:dd:43:db:30:32:61:38:02:db:a4:f9:93:8d:bb:fd:25:
18:99:9a:8d:44:7a:dd:bb:a6:f4:89:eb:be:53:d9:af:a0:7f:
45:48:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:45 2025 by rpki-client