Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
File: oXkseNMOEHMKPERWHH5YIufxwvg.mft (raw, json)
Hash identifier: EcErFh6JJiISz429WFOZci4kJHZOY45kXCPXxCsbtE0=
Subject key identifier: 54:7B:FD:DD:01:C5:1D:F5:02:E0:CA:99:06:50:34:F0:02:09:23:15
Authority key identifier: A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8
Certificate issuer: /CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8
Certificate serial: 0819
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
Manifest number: 080F
Signing time: Thu 30 Jan 2025 20:53:49 +0000
Manifest this update: Thu 30 Jan 2025 20:53:48 +0000
Manifest next update: Thu 06 Feb 2025 20:53:48 +0000
Files and hashes: 1: oXkseNMOEHMKPERWHH5YIufxwvg.crl (hash: d4harD3CWx1uugGJpYlt17Z4VYq9EOusNV04pjCDujc=)
2: 153A3AE86A9111EF905C3C37C4F9AE02.roa (hash: kBSFKLz8LnjDZ6O+bwDGlGgZ5ZDFmw7Q4gOGItD96sE=)
3: AA973CB86A8B11EFB0774B61C4F9AE02.roa (hash: Al1m1aAhUy31yN3v1SptiV2uHlPjUIQuuReZVTdaqrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A093A/serialNumber=A1792C78D30E10730A3C44561C7E5822E7F1C2F8
Validity
Not Before: Jan 30 20:53:48 2025 GMT
Not After : Feb 6 20:53:48 2025 GMT
Subject: CN=679be6dc-13ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:1d:15:60:a6:1c:2f:3e:ec:0e:87:5c:eb:
89:8d:84:48:c3:10:f2:90:17:30:28:06:0e:a5:64:
fb:e0:dc:73:42:c9:5e:79:05:86:1d:46:65:c2:fb:
e0:98:40:42:46:8d:40:91:e0:0b:f5:d3:b6:01:74:
8c:ea:fe:60:1e:46:ed:e1:a4:2b:25:67:49:96:fe:
d4:7b:cb:f3:e2:12:70:29:bc:f1:40:5e:49:91:82:
f6:b2:3b:0c:90:09:73:a8:a3:e5:40:96:d0:7a:28:
90:4a:52:ae:f4:5d:2a:06:d4:1b:d5:1d:0b:d1:93:
ac:92:e9:4a:0d:c9:7b:1e:f2:1e:d3:93:c6:01:ca:
4e:67:79:24:21:09:8e:4c:2b:a1:89:7e:b5:0b:87:
6f:e3:b0:6a:b4:06:b7:09:fe:9d:80:7b:57:8d:4e:
96:ad:26:a5:66:7e:ad:4a:7a:f1:11:73:64:e8:6b:
47:28:37:c5:8a:bd:4b:b1:f2:ed:65:a0:07:94:dd:
f6:77:6e:0e:66:79:97:03:d9:2b:7c:2d:dd:4d:c5:
59:3e:53:52:cf:61:ef:e0:ab:23:73:49:9d:ee:61:
a8:f4:19:b1:de:69:14:89:6a:8c:d4:c8:2a:f8:68:
3a:30:21:7e:12:df:ba:3f:12:5e:44:5a:63:5e:d2:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:FD:DD:01:C5:1D:F5:02:E0:CA:99:06:50:34:F0:02:09:23:15
X509v3 Authority Key Identifier:
keyid:A1:79:2C:78:D3:0E:10:73:0A:3C:44:56:1C:7E:58:22:E7:F1:C2:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXkseNMOEHMKPERWHH5YIufxwvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A093A/EBA3531ECBD811EA867AFB4FC4F9AE02/oXkseNMOEHMKPERWHH5YIufxwvg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:22:8a:50:77:0e:d5:70:98:90:27:07:f2:69:fb:7c:e2:61:
ab:4e:3c:62:03:c2:6e:bf:12:f9:e8:d4:ed:8c:64:55:90:6a:
06:5e:4c:a1:f9:4b:37:09:3f:f5:54:3b:e1:69:85:35:b8:f6:
be:91:4a:13:10:80:1e:4e:e0:bb:16:ed:40:fa:29:51:e6:1d:
be:52:40:88:87:07:4f:c6:61:04:5b:d4:0f:e3:7c:fc:0b:d5:
cb:24:1d:1f:f3:43:8d:de:92:e4:8e:31:35:f2:70:a5:ef:2a:
25:1d:4e:3e:52:ed:15:6b:b5:c2:eb:2a:b8:84:7a:c7:0f:2f:
5b:22:54:ff:7f:03:78:9c:fe:4d:4b:45:8a:dd:20:a7:31:a4:
f3:f8:2f:1e:97:46:8a:a5:92:05:00:e4:44:17:c8:dd:4a:f4:
e9:ee:14:26:09:a8:e6:4a:9b:7d:6f:a9:ae:73:ac:50:67:f8:
84:bb:cd:10:c4:3e:5a:ad:94:bc:d8:6c:17:aa:71:1a:65:bc:
d4:bd:b6:fc:1a:46:14:b3:c1:57:27:6a:4a:b0:77:75:e6:e7:
d4:65:d8:45:6d:e2:48:51:05:ce:74:cd:b1:a7:bb:e0:cf:9e:
99:da:54:3b:11:2d:e2:78:60:60:05:2e:4b:5e:cb:0f:c0:2a:
31:5f:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:46 2025 by rpki-client