Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
File: OYVAYLL1jUyRnGTapLfrHwzfaDA.mft (raw, json)
Hash identifier: PCS4Nxlpm+Bg1heHNAD/2Iqw+fhz4/jIRo1Gngxhndk=
Subject key identifier: BD:93:1C:36:6A:FF:E4:1A:33:08:4B:8B:DD:D0:15:E2:8C:EF:29:C3
Authority key identifier: 39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
Certificate issuer: /CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
Manifest number: 030D
Signing time: Fri 31 Jan 2025 01:16:42 +0000
Manifest this update: Fri 31 Jan 2025 01:16:42 +0000
Manifest next update: Fri 07 Feb 2025 01:16:42 +0000
Files and hashes: 1: OYVAYLL1jUyRnGTapLfrHwzfaDA.crl (hash: qLpGCu/2k9cdEJEQ0habtCwx+N5YxTmKhm2uP/o/g/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1A51/serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
Validity
Not Before: Jan 31 01:16:42 2025 GMT
Not After : Feb 7 01:16:42 2025 GMT
Subject: CN=679c247a-c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:d8:0c:64:a4:99:49:95:1f:47:33:86:d1:
ea:b5:f6:36:06:f9:c5:e3:2e:f0:21:6e:ab:6d:46:
7b:7d:16:b0:81:5f:58:6a:c5:6f:ca:a7:ef:8f:b0:
38:7a:d9:27:97:10:b1:7b:0d:7d:f8:70:26:c2:c7:
3d:c8:d4:67:87:92:f8:fa:a2:9a:3b:ea:37:0b:0b:
1f:e5:1a:7b:07:26:50:21:50:1b:35:77:f9:72:19:
87:f9:52:fe:73:7b:5f:50:36:3c:fc:a5:c3:59:b8:
56:e2:8c:c4:c6:a5:a1:d3:50:83:11:1e:1a:7f:1a:
be:06:a3:78:0a:80:f2:f2:44:b6:07:b9:af:ed:e4:
b0:b7:81:80:29:9b:ab:05:39:92:3e:0c:92:63:b4:
c1:d9:cf:81:20:44:da:cb:3e:5e:6d:9d:53:6a:53:
32:8b:c4:6c:d1:82:41:bb:a7:d5:fa:4b:9e:ae:f0:
3e:94:c5:ad:11:cd:fe:19:b4:16:57:ba:f3:5d:8a:
5a:51:83:36:8e:06:5b:dd:e7:ef:54:1d:ec:7d:95:
20:2b:1a:b3:33:4d:49:7f:03:8b:10:99:7f:43:35:
79:01:06:c6:57:ae:92:57:76:17:3e:53:d9:a9:a4:
f3:fc:13:24:1c:f3:d8:2a:1a:b2:05:e0:f8:d5:cf:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:1C:36:6A:FF:E4:1A:33:08:4B:8B:DD:D0:15:E2:8C:EF:29:C3
X509v3 Authority Key Identifier:
keyid:39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:af:99:b4:5f:ba:f8:75:45:8f:57:7c:c3:2e:1c:42:59:e1:
c8:66:c0:53:61:91:cb:53:7a:1d:e3:05:59:b1:31:51:f7:27:
04:87:f4:09:a2:43:e8:6d:74:c3:6d:44:6c:d8:19:e2:34:82:
af:81:82:9c:0a:3c:54:39:f6:97:02:63:93:1f:cc:33:b0:91:
4c:35:6a:7b:c5:17:2f:aa:1a:0c:d2:3c:e4:f5:f1:9e:6b:ed:
a5:0b:38:0f:af:84:21:b5:97:db:18:25:4d:41:99:46:76:49:
d9:47:dd:0a:3c:7a:ea:9a:69:31:25:c0:65:7e:94:97:9d:e6:
10:cf:f0:1d:ce:ea:13:85:a7:98:61:19:b2:a5:a4:2b:ff:f2:
d8:67:b2:c6:3b:41:f3:33:e6:c3:d3:70:a6:94:9f:d6:9a:9b:
41:2e:d3:c1:fd:e6:12:40:93:d7:f4:15:b7:22:e8:13:82:92:
65:87:14:c5:bb:6f:94:9f:db:39:1f:d9:fc:1b:12:dd:9c:1c:
65:fc:64:db:ef:83:4f:87:98:9d:c6:ed:a3:94:aa:c4:f1:7b:
4a:26:64:62:d7:8c:68:3b:47:99:b8:8c:c5:a7:ca:cb:69:3e:
ff:c9:72:db:e7:1c:5b:74:e4:9c:9b:38:00:81:a5:9c:36:8a:
6e:19:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:46 2025 by rpki-client