Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
File: oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json)
Hash identifier: hjnK80jyKn05iWDn8blW4wpAo8qukTVRAMWapxbz/h4=
Subject key identifier: 01:34:35:E4:C5:C0:D4:3F:E2:98:95:75:14:D5:58:AD:97:A1:C6:2B
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Certificate issuer: /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial: 08B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
Manifest number: 08A8
Signing time: Thu 30 Jan 2025 20:35:44 +0000
Manifest this update: Thu 30 Jan 2025 20:35:44 +0000
Manifest next update: Thu 06 Feb 2025 20:35:44 +0000
Files and hashes: 1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: tecfldCi0Ca2fA0uaGZspV2ALWtXGZKhpGdLAbezzGc=)
2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: 3hcEUgYqoshOk8lFFnh68Ppk5C9DLTGbNkZXNe5ZLqA=)
3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: ao7owdTBxv72fQFQJlEFwxw2v4nLgAcrWGOJHUBmOYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Validity
Not Before: Jan 30 20:35:44 2025 GMT
Not After : Feb 6 20:35:44 2025 GMT
Subject: CN=679be2a0-750a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:12:14:54:dc:ba:22:40:46:00:8d:f3:6e:
90:ed:54:2f:ba:ea:9a:3d:cf:dd:8a:e9:ee:75:7f:
e2:7d:b0:07:73:0c:44:da:f3:80:6c:dc:65:22:d9:
ad:09:48:68:1d:61:9a:80:d5:13:13:bb:13:56:b7:
fa:10:ae:5e:02:02:09:f3:81:c6:18:fb:9d:63:9c:
6d:21:3f:2a:8c:c6:b9:32:03:8d:12:ec:33:9b:32:
59:0a:0b:cf:9d:a5:cc:6b:49:e1:d7:1d:f1:df:3d:
b9:5c:d6:62:f3:63:e1:95:a4:5c:ef:82:33:72:9e:
b3:ac:6d:0f:a0:0a:d1:6a:7f:2f:05:c7:23:c1:8e:
95:ac:79:4c:df:c3:ae:de:7f:c3:79:46:da:66:7b:
71:14:77:1b:ff:f3:ba:70:c9:d0:73:19:07:48:9e:
93:99:cf:df:3f:ae:09:00:19:a5:50:e7:1a:8b:13:
24:ed:f5:3a:aa:c6:98:4e:0f:0d:c9:07:79:c6:ae:
de:35:94:2e:10:ab:98:32:36:79:30:d4:ea:8d:03:
58:67:6a:07:d5:a1:73:d7:5c:cc:26:e9:f1:0a:f1:
f5:bf:88:52:06:2b:68:0e:d4:85:1b:b3:9e:5e:9a:
95:47:12:9a:33:b9:d3:89:3f:9f:c6:9d:cb:dc:6c:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:34:35:E4:C5:C0:D4:3F:E2:98:95:75:14:D5:58:AD:97:A1:C6:2B
X509v3 Authority Key Identifier:
keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:18:44:c4:9f:5e:08:f5:92:9e:b9:d2:07:df:a6:e6:e3:9b:
f9:e8:c5:36:5c:e2:35:ca:7a:43:b8:28:49:d9:91:f1:bc:7f:
34:42:59:5f:33:56:6e:35:bf:0e:60:28:90:f9:53:55:07:55:
30:a1:23:8a:bc:1f:6d:8d:02:d5:86:16:43:dc:bd:51:b7:08:
30:88:61:f8:e3:3b:64:0f:8c:7b:41:91:65:95:aa:43:f7:68:
f5:ea:b1:66:98:0a:91:d3:a8:da:b8:14:ec:fe:bb:09:1b:8f:
0f:11:08:0a:f9:63:4c:96:51:f0:2e:40:c2:7b:02:76:65:01:
f1:f5:42:f0:7a:35:0d:d1:d5:10:0c:61:78:72:35:17:2f:ba:
8b:8e:aa:27:0d:eb:2d:42:b9:86:27:03:30:fe:85:97:b8:9b:
bd:6c:d7:db:2e:f3:4d:e7:b0:90:37:27:b9:eb:b7:26:c5:42:
75:71:13:03:c2:a5:b1:10:b2:f1:9e:05:23:d6:9d:48:f0:50:
d9:99:4c:d4:35:9f:c5:54:76:08:7c:92:9e:c2:69:0f:d3:f5:
0b:1f:6b:c9:d6:a2:de:4d:78:ea:47:6c:20:07:12:04:30:31:
c2:56:41:d6:ae:36:20:c6:9f:d8:c8:93:a0:2c:c8:bb:d3:7a:
76:94:c3:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCODMxMTAvBgNVBAUTKEEwQkRCMUIzRjFFNEU3MDRFQjRENEYyQ0U1RkUzNEU2
NTAzN0I5NDMwHhcNMjUwMTMwMjAzNTQ0WhcNMjUwMjA2MjAzNTQ0WjAYMRYwFAYD
VQQDEw02NzliZTJhMC03NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0YSFFTcuiJARgCN826Q7VQvuuqaPc/diunudX/ifbAHcwxE2vOAbNxlItmt
CUhoHWGagNUTE7sTVrf6EK5eAgIJ84HGGPudY5xtIT8qjMa5MgONEuwzmzJZCgvP
naXMa0nh1x3x3z25XNZi82PhlaRc74Izcp6zrG0PoArRan8vBccjwY6VrHlM38Ou
3n/DeUbaZntxFHcb//O6cMnQcxkHSJ6Tmc/fP64JABmlUOcaixMk7fU6qsaYTg8N
yQd5xq7eNZQuEKuYMjZ5MNTqjQNYZ2oH1aFz11zMJunxCvH1v4hSBitoDtSFG7Oe
XpqVRxKaM7nTiT+fxp3L3GwwPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAE0NeTF
wNQ/4piVdRTVWK2XocYrMB8GA1UdIwQYMBaAFKC9sbPx5OcE601PLOX+NOZQN7lD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUI4My8wRjQ2Q0E4Q0FE
QUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3VHJUVThzNWY0MDVsQTN1
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29MMnhzX0hrNXdUclRVOHM1ZjQwNWxBM3VVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUI4My8wRjQ2Q0E4Q0FEQUYxMUVBODRDMDRFMTBDNEY5QUUwMi9vTDJ4c19IazV3
VHJUVThzNWY0MDVsQTN1VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8GETEn14I9ZKeudIH36bm45v56MU2XOI1ynpDuChJ2ZHxvH80Qllf
M1ZuNb8OYCiQ+VNVB1UwoSOKvB9tjQLVhhZD3L1RtwgwiGH44ztkD4x7QZFllapD
92j16rFmmAqR06jauBTs/rsJG48PEQgK+WNMllHwLkDCewJ2ZQHx9ULwejUN0dUQ
DGF4cjUXL7qLjqonDestQrmGJwMw/oWXuJu9bNfbLvNN57CQNye567cmxUJ1cRMD
wqWxELLxngUj1p1I8FDZmUzUNZ/FVHYIfJKewmkP0/ULH2vJ1qLeTXjqR2wgBxIE
MDHCVkHWrjYgxp/YyJOgLMi703p2lMO6
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:16 2025 by rpki-client