Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json)
Hash identifier: T03xySfPPgyey5eLZ1u+6AkYN5pslAy2+0mv7M238Y0=
Subject key identifier: 77:A6:23:0F:3A:E9:4A:77:48:15:E3:4B:04:85:EA:86:3F:F3:15:81
Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Certificate serial: 1208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
Manifest number: 11F2
Signing time: Fri 31 Jan 2025 17:09:44 +0000
Manifest this update: Fri 31 Jan 2025 17:09:43 +0000
Manifest next update: Fri 07 Feb 2025 17:09:43 +0000
Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: 0oAULq8xHWiFVq8IEX/U/MyO/vJzF4K54qf7iguUtzM=)
2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: VilJgVER7BycZHaWd4URO4KYACwZnY/x/nNDEK5obqE=)
3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: OeaX4Y36BcWO+hpCFTJVXRa1o/dq7PQS00iGf5uCP9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4616 (0x1208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08
Validity
Not Before: Jan 31 17:09:43 2025 GMT
Not After : Feb 7 17:09:43 2025 GMT
Subject: CN=679d03d7-e81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:a2:8b:47:6b:50:c5:02:cd:96:49:2f:da:
b7:f5:97:7e:5e:ae:8b:bd:9f:da:bc:15:94:59:36:
3a:30:4f:eb:b9:20:f2:dd:82:dd:96:40:11:10:a5:
43:a6:53:f0:88:ea:e2:68:cb:8d:a8:11:e3:99:5e:
39:ee:a1:e6:f0:2a:15:82:88:85:c2:03:88:d3:00:
c0:8f:8a:5a:9c:4e:ac:4f:24:0d:c1:29:54:59:e1:
3b:ad:b7:6d:b2:8d:12:40:1f:fd:ca:bb:cf:d3:a2:
af:28:4b:8f:ce:95:9e:c0:74:65:68:52:93:a5:9c:
90:ab:ed:62:16:28:56:60:a5:5d:82:cb:97:63:6a:
67:0d:c3:b8:36:a2:ef:c6:b6:07:9b:d7:88:b3:f7:
93:94:eb:a6:2f:e7:0f:7b:6f:52:39:70:3d:82:e4:
2a:57:70:2f:93:d3:45:9a:f7:08:fa:84:21:90:11:
8a:1e:0f:4e:61:5a:89:79:19:48:6c:d1:a5:34:61:
29:58:b9:7b:4c:43:b9:c6:69:0a:c0:fd:93:0b:26:
b5:77:8e:38:9c:7e:6e:34:cc:34:f3:94:05:c4:0e:
ab:13:27:16:07:84:10:22:66:e1:de:79:3c:52:3b:
1f:24:d0:ae:4c:8f:24:7e:2a:5f:d0:cb:75:3e:a5:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:23:0F:3A:E9:4A:77:48:15:E3:4B:04:85:EA:86:3F:F3:15:81
X509v3 Authority Key Identifier:
keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:de:4f:71:40:ef:55:dc:96:05:87:91:97:1c:e4:68:8d:f4:
a4:63:d0:f1:10:04:1e:b3:15:70:42:df:30:48:53:e4:10:4d:
5c:d1:1f:bf:d9:16:b5:ae:02:74:78:cc:88:00:b3:9a:18:79:
14:71:e3:30:bc:17:2f:2b:fc:b9:e9:60:85:d0:37:bc:71:4b:
ee:14:e1:99:6c:39:e7:01:b3:63:04:3a:1c:45:e5:51:ec:15:
d5:97:a6:f7:99:82:51:fa:73:90:0a:c6:d8:9a:2b:71:87:07:
31:37:ec:43:5f:2d:c6:fc:d6:ef:e0:95:b6:03:d0:e4:49:cd:
c1:0f:24:15:07:e1:43:a0:e4:08:05:d3:a4:8d:12:97:a7:40:
17:05:a4:62:74:c7:b8:eb:5e:9d:b1:9a:a3:48:3e:0f:63:25:
bb:4f:68:73:16:58:d1:09:62:2d:ea:01:b2:8c:f1:48:84:b4:
83:09:07:74:3c:cd:98:0c:86:a8:0b:e0:5b:05:97:a8:37:6c:
86:6b:84:ab:29:0e:d0:cf:9f:c0:6c:3a:ab:af:c0:e0:1f:42:
1f:7e:6a:fa:51:bb:e6:af:a3:47:0d:73:94:98:ed:c1:04:0f:
4a:7a:87:6f:a2:15:ed:70:23:0e:98:79:62:89:14:6e:53:2e:
c7:da:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:32 2025 by rpki-client