Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
File: oTW4FOHrHifJWX7tLoIoVJMNP88.mft (raw, json)
Hash identifier: xamJnTHKgd87yzpANKKd1qSI6MWs1r+jhSfp2KJ5Pfo=
Subject key identifier: 08:EC:A1:78:7B:48:8B:1F:07:D7:4A:3B:53:7E:CC:96:C6:84:1D:AA
Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
Manifest number: 012E
Signing time: Fri 31 Jan 2025 04:00:29 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Fri 07 Feb 2025 04:00:28 +0000
Files and hashes: 1: oTW4FOHrHifJWX7tLoIoVJMNP88.crl (hash: E41sR7SZXrK/YZI2sGgxTiGSxKHzBZkRM8ee3qGNkJc=)
2: 52029FF66B4F11EFAEF62166C4F9AE02.roa (hash: AahZ+Qe22CEKGofJ9I0IWIyRF9dSrKzoTGk/BsP9v5c=)
3: CD168A226C2111EFB0ACC153C4F9AE02.roa (hash: gZsn2HT8wdkk8V9kPIX/PrYWbNbTXu5bTe/wvaT34e0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 7 04:00:28 2025 GMT
Subject: CN=679c4add-d4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:b5:b4:c8:93:6e:29:94:6f:07:9a:a1:45:
1d:c2:eb:f2:19:71:4b:9f:a4:05:7f:f6:e8:eb:41:
07:7e:c2:2f:4d:ef:3f:3c:b2:12:d3:77:d9:ba:5d:
00:bd:da:d3:7f:9f:0b:b6:14:98:4d:25:b4:83:4f:
85:35:73:f5:2e:f5:cb:46:60:fc:e9:c1:fb:ea:42:
59:c9:13:3a:32:92:f5:64:fc:00:b1:f8:75:02:0d:
f0:46:27:ad:36:48:8d:a7:61:47:f4:44:2a:6d:a6:
35:f0:82:da:d1:74:f0:c3:a2:a5:df:70:1c:c5:9c:
7c:b0:5f:33:e6:c5:ce:ff:fc:20:d1:30:7d:6a:5c:
ba:1d:60:da:4f:a8:7b:43:37:b8:be:25:dd:29:aa:
57:95:2d:c0:83:0e:82:c4:18:20:91:af:6a:15:90:
4b:f5:bc:ca:9d:72:b7:5d:57:3d:ee:b5:aa:27:1a:
35:e4:de:57:71:7c:7c:73:1c:72:6b:a4:04:0f:5a:
dc:39:8d:d6:dc:35:8f:a9:30:96:49:38:73:e5:99:
33:71:4e:dc:5b:6d:a8:71:f7:57:c0:9a:f8:15:d0:
d4:1a:94:e4:7e:17:c3:f0:2f:69:f1:c3:37:64:1f:
e7:8f:61:ea:a2:60:df:ce:c1:2f:71:b2:07:64:ec:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:A1:78:7B:48:8B:1F:07:D7:4A:3B:53:7E:CC:96:C6:84:1D:AA
X509v3 Authority Key Identifier:
keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:14:9c:92:35:15:01:88:da:34:21:53:57:6b:3d:76:4c:
06:88:62:a0:5f:db:e1:f1:0f:96:48:66:b4:62:6b:46:ed:67:
45:e9:3b:9e:05:0a:89:8c:c1:7a:15:3d:a3:9e:ac:8c:67:51:
74:d0:99:3a:70:39:2a:b1:da:38:a7:41:27:fe:76:19:10:46:
8b:5b:78:a1:90:e9:53:e1:19:a5:23:18:ab:c8:9a:e3:17:a5:
71:12:ff:d5:2b:a5:5f:ef:3c:82:44:5f:22:1d:70:a1:23:4f:
a9:24:17:20:27:bb:5a:12:15:d0:ad:1b:db:42:c0:4b:16:41:
4d:3b:d5:77:6a:2c:0f:41:b2:a5:f1:87:a0:d0:87:4a:47:6d:
4f:56:57:5b:9b:e6:4b:c8:9f:4b:07:fc:34:d1:0a:ef:45:42:
3b:c5:50:c0:59:83:6c:69:7d:12:c3:3d:9a:5f:bb:c5:1c:bd:
ed:9a:3a:cf:ae:f5:80:c5:5b:ac:35:b0:2f:a5:a8:1e:4f:19:
cd:b5:b2:61:47:0d:59:59:14:00:27:2c:a9:22:47:80:bf:2f:
b4:11:da:82:e1:22:aa:f3:92:b7:be:17:87:1a:fe:80:1c:0d:
0b:aa:40:3a:a6:aa:fa:8a:9c:20:e9:2c:a0:30:38:9e:3c:ec:
f1:34:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:45 2025 by rpki-client