Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json)
Hash identifier: OZa1d1MKIlDKjBMApUvmdMzes/2ORUJD8gtwHiNB0+8=
Subject key identifier: 2D:BE:23:12:79:D1:22:4F:7C:64:7E:40:BA:2A:17:3C:D1:E1:8F:82
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial: 0EF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
Manifest number: 0EE9
Signing time: Fri 31 Jan 2025 17:37:59 +0000
Manifest this update: Fri 31 Jan 2025 17:37:59 +0000
Manifest next update: Fri 07 Feb 2025 17:37:59 +0000
Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: ACuKoUvPnvb+Ki/DC9YXMGTZXkimOZCvtqM2y7fcscM=)
2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: tn6ujwfx2fxOjVcWSqeXpg3bHl3JICdgt6OHucuWivU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3828 (0xef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Validity
Not Before: Jan 31 17:37:59 2025 GMT
Not After : Feb 7 17:37:59 2025 GMT
Subject: CN=679d0a77-ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:25:4f:e3:c5:e9:6b:9a:4e:95:6b:72:08:
a9:db:cb:1a:ac:82:3f:4f:78:90:f8:a2:ff:b5:7b:
2d:3f:f0:c2:f6:1a:c6:33:f1:91:3e:cc:e4:75:49:
45:c5:75:35:8a:53:cb:8f:8a:1c:d0:38:d6:1a:89:
fc:51:dc:6c:4d:8d:56:38:cd:3e:66:55:48:89:d8:
f3:0c:42:4f:15:bc:bd:f8:5b:ee:d7:5b:99:42:97:
f0:ce:8e:08:99:5f:c7:09:5e:48:f1:bb:ca:1c:84:
f1:1b:95:2f:0a:b0:9f:2f:cb:b4:f2:c2:52:20:46:
b8:d5:72:ef:3f:a9:b6:20:b8:fd:28:48:00:2a:e3:
fa:ac:a9:49:62:92:37:c9:2f:38:5d:6f:b6:5d:bf:
97:24:f0:44:eb:25:1e:b0:38:6c:46:8b:25:92:96:
e0:81:cb:33:47:48:d5:dc:6e:fa:89:61:1d:18:7b:
7e:f6:26:76:f5:63:93:eb:ce:3d:0d:08:b0:62:88:
ac:7e:07:f9:01:be:c2:e0:1d:d7:02:53:20:3f:a9:
f5:52:43:ca:d1:8e:3f:ca:48:3f:c2:17:dc:3f:3b:
00:30:ed:b8:10:2f:dd:c5:63:97:19:45:d4:60:6f:
f5:8d:09:8d:0d:bb:62:22:87:f3:67:e4:da:04:9d:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:23:12:79:D1:22:4F:7C:64:7E:40:BA:2A:17:3C:D1:E1:8F:82
X509v3 Authority Key Identifier:
keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:62:21:06:83:eb:72:0f:45:84:f1:20:8a:7d:f0:3e:bc:46:
9e:20:20:7f:04:e6:a4:63:27:95:ee:d2:cc:cd:55:ed:62:86:
0f:cd:86:5b:f0:f7:1f:b7:ab:39:53:e1:dd:6e:1f:b0:80:89:
db:6c:51:7d:5d:21:62:39:dd:ca:f9:16:dc:98:de:c8:12:8b:
95:cc:4a:16:71:8a:64:9d:f3:35:4e:ba:60:5c:d7:7a:89:0b:
f0:cd:f3:17:1d:83:c4:5d:ea:19:30:a4:79:fe:63:ae:3a:5a:
21:76:9b:85:48:80:84:46:d0:1f:43:e1:fc:41:e0:64:14:ae:
43:8a:4b:e4:5a:be:fd:4c:61:57:a0:cd:74:a8:73:10:f1:87:
69:bb:f2:cb:89:1d:66:28:3b:d7:5f:0e:70:01:17:8f:72:ad:
36:ce:1f:8f:f7:d3:d2:21:9c:ae:21:e3:38:b0:68:92:12:dd:
ae:77:e2:a9:9a:25:f6:31:7f:2c:26:82:4c:9a:5a:7f:fa:6d:
8e:73:64:9c:d5:9b:4d:73:af:4e:0e:63:5c:05:fb:e8:59:23:
6c:dc:04:b4:b2:2c:42:48:14:e2:21:45:2e:24:0e:22:83:b0:
2d:13:70:e1:75:78:73:8b:a0:25:72:20:c8:55:13:1b:9c:d8:
78:b6:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:17 2025 by rpki-client