Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft
File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json)
Hash identifier: ML/Jkx2E4XSBHpwCrg4kwkQk36g3GAZCG79L4P5TmZY=
Subject key identifier: B2:01:71:78:B3:98:E7:93:3A:29:D6:BF:61:9A:F6:8A:E8:7F:6B:52
Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C
Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C
Certificate serial: 15F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft
Manifest number: 15E6
Signing time: Fri 31 Jan 2025 16:44:43 +0000
Manifest this update: Fri 31 Jan 2025 16:44:43 +0000
Manifest next update: Fri 07 Feb 2025 16:44:43 +0000
Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: WjEgD9yEXAUOou3RiJQPxkDkiaZ/K96oryAp7A5A0bY=)
2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: w3oachy62b9vS7wqwD6D3HohJubENRLKhLvYOw/CqsQ=)
3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: P/jVLVKJm35tcLY3WNaJuQCIeip3WppGMETv/Tz90FE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5622 (0x15f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C
Validity
Not Before: Jan 31 16:44:43 2025 GMT
Not After : Feb 7 16:44:43 2025 GMT
Subject: CN=679cfdfb-8157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:fe:aa:b3:62:ff:79:6e:6d:6b:cd:ca:24:
39:0e:bb:de:1e:b3:69:ce:fa:d0:ea:da:04:18:0e:
66:32:82:9c:db:43:be:7c:22:7b:57:6e:21:dc:4a:
1f:55:db:94:04:81:42:71:0d:e2:dd:89:8a:7a:26:
4b:24:9a:a3:89:61:6a:ce:e1:b8:e4:f3:09:fd:9e:
27:93:e3:76:6a:b1:e0:76:9f:1a:fb:6b:ed:78:45:
e1:b0:f8:fc:63:f4:a2:57:50:ed:30:01:70:66:03:
72:ff:e3:b8:81:c0:92:49:27:58:7e:79:42:f0:9d:
01:2f:e7:98:34:40:a4:3d:02:76:83:ac:f4:c4:7b:
3b:8a:54:f2:07:8c:36:f9:9d:2c:8f:c7:a2:ca:58:
2f:c4:43:e4:a1:d7:d9:4a:31:1d:90:51:55:a3:ce:
c5:30:94:79:16:74:46:d1:ef:92:bb:b8:49:ca:f3:
b8:a4:a2:fa:cc:c9:56:e1:d1:0f:7c:b0:22:91:1f:
a7:6e:dc:1e:ab:fe:ea:19:2a:59:d1:b1:12:8e:5a:
b8:2c:73:87:61:5e:0f:31:fd:3e:12:1f:7c:c4:9a:
81:bc:6e:90:a8:dc:10:f8:22:ab:7f:15:03:5c:84:
c2:9e:2c:36:83:66:d0:27:04:f2:4d:97:76:b4:84:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:71:78:B3:98:E7:93:3A:29:D6:BF:61:9A:F6:8A:E8:7F:6B:52
X509v3 Authority Key Identifier:
keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:98:8b:9a:81:d9:4b:08:b8:36:c4:77:1a:72:8d:02:eb:18:
c7:38:52:71:b7:96:d1:65:c2:62:e0:29:34:39:83:2e:83:b8:
e2:c1:da:72:f3:a5:da:2b:ae:ff:6d:93:94:d5:1e:d1:01:fa:
82:f8:07:7e:fc:81:d3:52:91:23:68:7f:fa:4b:ab:0e:7d:f0:
bc:3e:56:b7:4a:5e:df:74:6c:f3:54:4c:99:14:c5:17:29:f5:
b1:1b:97:c3:ba:de:7d:71:21:06:8d:fd:32:10:9f:1b:e3:5a:
2b:7b:5e:7f:52:08:0f:34:19:a1:58:77:12:ce:89:ff:98:ef:
b9:6c:bb:62:28:0f:0d:6a:1b:6a:7d:56:09:d3:64:0f:53:a1:
24:9a:39:20:d1:ec:ba:da:ed:49:97:7a:1d:61:75:0b:68:f6:
b2:c2:3d:dc:71:27:41:2c:04:28:60:12:7e:54:86:2e:89:e6:
76:f1:4e:c6:32:29:5a:97:97:be:9f:32:47:84:74:fb:a8:38:
57:b7:f8:0a:54:2b:ba:30:78:50:2c:14:23:4e:c8:4b:6a:b3:
eb:64:4b:57:9c:09:e2:88:6b:ba:b0:7c:ca:ec:a0:e0:8e:a0:
3b:c6:72:ad:f7:b0:31:3f:47:7a:20:77:99:a2:cf:f6:53:a7:
f0:48:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:21 2025 by rpki-client