Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
File: OU6gholcbxfZNlSKMiOLgs95KU0.mft (raw, json)
Hash identifier: M3yLcMocuIOurfv95A1rwlbh8DHvZS/Qmv9SzNjOIOI=
Subject key identifier: B2:D7:E3:CF:E1:BB:2A:0C:0E:9B:1C:D2:64:21:F3:7D:34:AF:6A:9D
Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Certificate serial: 0F7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
Manifest number: 0F6E
Signing time: Fri 31 Jan 2025 17:32:25 +0000
Manifest this update: Fri 31 Jan 2025 17:32:24 +0000
Manifest next update: Fri 07 Feb 2025 17:32:24 +0000
Files and hashes: 1: OU6gholcbxfZNlSKMiOLgs95KU0.crl (hash: a62vYOTrblys43rRuvs4qPOsCVj13kGVxP+w5yLiNKc=)
2: 68DA14E65BB211E9BF474F16C4F9AE02.roa (hash: m7Wy3YFoVjfJbST/TvC6OeEgaS0QkcmFqzNu4bjOVjA=)
3: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (hash: J6dUTU+B3rYnE6IuMVXfZpLt706z/3t+VN2bTVaCwns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3963 (0xf7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D
Validity
Not Before: Jan 31 17:32:24 2025 GMT
Not After : Feb 7 17:32:24 2025 GMT
Subject: CN=679d0929-5198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:63:a9:31:7c:b7:9c:13:10:91:9d:3b:16:
34:b4:39:f9:5a:02:6c:c4:38:dc:9b:72:23:5e:22:
3e:b1:71:21:75:9a:50:37:db:bd:18:e6:e4:ef:9c:
fa:d8:3b:4a:f7:85:ca:b1:6f:80:b7:cb:0c:51:71:
d6:10:ff:fe:5f:7a:76:2d:9d:58:1e:af:6c:52:c2:
80:bf:87:8f:30:a1:fc:49:58:03:b4:d2:ad:32:8a:
ee:cd:f3:9b:3c:fb:32:bf:d8:c8:d6:4f:6e:05:08:
7e:0e:ae:51:dd:dc:39:23:8a:8b:13:c0:d3:3d:6b:
11:8e:17:62:82:9e:49:dc:c0:09:ae:88:46:bd:d0:
63:4e:cb:b2:88:ac:3f:fa:d1:a1:00:0b:ca:86:11:
66:79:95:08:a8:46:22:98:a4:b6:20:ff:3d:33:31:
c6:e9:50:f7:89:2d:e4:9f:97:2c:90:98:e0:f4:03:
62:b6:e8:40:94:5f:5b:b1:c1:3c:35:3b:ef:1a:1c:
48:8c:93:95:49:b8:ed:10:a8:90:50:bf:5b:a7:df:
69:1e:c9:a9:e1:bd:01:1d:f9:ba:ce:fe:30:63:9b:
83:e9:e1:88:a8:81:18:33:d7:47:d2:3b:1f:a0:e7:
6f:1b:4f:5b:86:08:95:62:2a:67:a4:87:9c:e9:dd:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:E3:CF:E1:BB:2A:0C:0E:9B:1C:D2:64:21:F3:7D:34:AF:6A:9D
X509v3 Authority Key Identifier:
keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:4b:ba:1f:9e:f2:9d:49:f7:02:9c:1f:8b:2d:7d:4f:ca:79:
78:33:7b:62:ac:6f:81:09:6c:0c:07:1d:f2:18:f0:62:7c:ae:
25:3c:dd:73:58:c9:8e:df:fd:52:c9:5b:0b:a9:e0:00:5c:11:
46:66:62:11:5d:71:be:3d:c9:55:92:97:6d:e0:a4:d3:af:8c:
81:91:65:8f:ae:06:bb:57:8b:98:ad:f5:9e:36:55:c5:59:0b:
dd:0d:88:fb:30:e4:45:50:2b:87:49:8c:0c:eb:a1:c3:dd:05:
3f:45:89:78:6f:5e:42:d6:8d:3a:3f:aa:2b:4f:f1:9f:04:69:
88:03:f7:23:e6:f3:c4:b9:78:e3:b3:0f:de:2d:b7:52:85:fa:
c1:27:7f:12:bd:93:3f:4c:b5:49:61:db:cb:73:cc:4c:7a:7f:
88:bb:aa:95:18:78:6d:e7:d7:27:01:c8:e4:1d:92:53:ab:5d:
01:d6:40:6a:c1:68:1e:e4:fc:aa:ce:42:17:24:93:47:62:14:
e9:ad:a8:d5:b1:7a:ba:ca:77:7a:bb:47:fe:be:10:f4:00:c1:
b2:23:35:fa:df:c0:a3:b8:f1:a8:da:14:ac:2b:09:de:79:51:
d9:70:b3:24:56:6d:5a:e0:fe:cf:45:42:5c:9c:f1:c1:a6:8a:
b4:86:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:28 2025 by rpki-client