Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier: OQpCHWSd7G41v/KcBVsqIZtGmEp7a8ln8Y2oyVwyj1Y=
Subject key identifier: 84:60:C1:66:4E:49:72:0A:D2:C3:C0:71:97:1D:D1:4F:83:11:DC:F6
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number: 02EC
Signing time: Fri 31 Jan 2025 01:24:15 +0000
Manifest this update: Fri 31 Jan 2025 01:24:14 +0000
Manifest next update: Fri 07 Feb 2025 01:24:14 +0000
Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: D5xcGs/c+A6hvjIDlh475UwrRkTb4HIN5tZUFvwK3O0=)
2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: qn3Hd4WEpnWFP0NC57cKVAbwF0DX8ivcyDHg1oU42uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Validity
Not Before: Jan 31 01:24:14 2025 GMT
Not After : Feb 7 01:24:14 2025 GMT
Subject: CN=679c263e-e6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:08:41:ec:c3:59:ad:ee:05:b4:d1:a4:c9:
02:4f:19:51:5f:ae:02:1e:a0:12:93:66:c8:53:de:
05:39:61:88:4b:9b:15:2f:13:e7:f9:5f:bb:86:3a:
2d:86:3e:e3:d5:ce:d5:00:3b:14:4f:64:62:fd:c4:
64:9e:d7:b8:9a:6c:e5:6c:10:ee:d9:8c:2d:50:e8:
7d:cd:dc:11:3d:83:44:3c:06:31:d4:23:ea:11:26:
84:04:0a:ef:77:26:fb:8d:03:aa:fa:47:e3:06:fe:
22:ba:a2:bb:cc:7a:93:15:31:c0:b1:7a:0c:57:d3:
26:24:90:cc:f4:75:e4:2c:47:6a:27:c0:04:f9:d8:
b0:ea:54:7b:cd:71:15:a3:e6:b8:48:71:d8:ec:57:
59:bd:38:a2:f3:30:67:61:d6:6d:1e:9b:3b:20:ca:
ed:68:36:4e:d0:dc:23:7c:d0:f0:1c:cf:a6:1b:5c:
19:58:7f:0e:0b:81:d2:27:11:0c:b4:92:fd:53:7f:
cd:19:70:1d:a9:9b:ae:fa:14:47:6a:ef:69:b8:7a:
8d:b4:e1:e4:27:70:41:ba:6d:fc:50:3b:4f:d2:fc:
b0:ee:7f:8b:9b:ad:26:d8:35:d0:8c:c1:a6:5c:19:
ad:94:b4:2c:23:4b:eb:be:c9:6e:2d:45:b2:a4:72:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:C1:66:4E:49:72:0A:D2:C3:C0:71:97:1D:D1:4F:83:11:DC:F6
X509v3 Authority Key Identifier:
keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:cd:64:07:06:89:27:7f:f1:fc:d6:d0:51:1b:45:59:83:
55:75:66:83:2b:dd:b6:d2:22:81:26:4a:bd:2e:1a:e4:2e:db:
8a:32:fa:c8:c8:2d:51:0a:d8:d7:11:58:90:49:da:c2:da:4c:
16:bd:2d:a4:16:d7:5b:b7:7a:01:5c:37:58:66:db:74:d1:e3:
8f:e2:66:8f:0c:6c:6c:e7:b4:fc:6c:13:6d:bc:0f:27:19:cd:
fa:fb:0c:ef:f3:65:4b:a0:a1:b5:bc:e3:7b:a2:93:10:8f:c7:
8d:83:04:72:10:f9:e0:df:98:a8:ef:69:fb:02:b8:e8:a8:9f:
37:cf:82:a1:39:31:8d:97:32:e6:85:8c:0f:63:62:fe:d5:63:
e2:91:7a:31:ec:9a:26:55:2a:96:d7:2c:bc:f5:b7:25:2c:8c:
4c:46:3e:2d:a5:b7:82:66:ba:89:d4:f0:b0:68:1b:c3:3c:01:
ec:fc:ba:ee:4e:8e:dc:92:49:9f:d1:86:aa:3c:34:51:06:62:
eb:7b:b6:fb:53:ca:85:9f:cd:5c:d4:d0:b3:07:ab:2f:32:25:
44:6e:8a:e9:bf:4c:7a:99:e1:6c:0f:bd:09:a2:77:bc:b8:43:
b1:ee:84:6e:b7:0c:b7:48:25:ce:e0:14:9d:67:f6:c1:46:da:
c9:40:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:17 2025 by rpki-client