Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier: IYNqed6I1Iq+oNEZtcXoxcJZqeRdzhmLBydX7rHX4zw=
Subject key identifier: 15:20:B3:AB:AB:3A:60:1E:F7:50:77:36:D2:F7:30:46:BB:BC:57:1B
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial: 0976
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number: 45C5
Signing time: Fri 31 Jan 2025 15:49:31 +0000
Manifest this update: Fri 31 Jan 2025 15:49:30 +0000
Manifest next update: Fri 07 Feb 2025 15:49:30 +0000
Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: ULc7ztP55r5D3ZbCR9lG6dAFJumimI9zNcI7U6DTy8Q=)
2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: HQMuxFH+p0cd5TxCsDJ5OnEAYnLT5yZN5O7uVIpfgdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422 (0x976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Validity
Not Before: Jan 31 15:49:30 2025 GMT
Not After : Feb 7 15:49:30 2025 GMT
Subject: CN=679cf10b-913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:54:10:5e:85:0d:7e:9c:ab:23:07:e8:c8:
ef:d1:a4:4b:11:b9:d7:70:08:28:1d:86:1e:48:47:
ba:a0:87:ec:bd:12:cc:d7:e9:99:9b:90:27:0e:d2:
69:51:29:8e:64:6c:9f:18:69:d5:3a:9c:64:30:75:
73:68:62:9b:21:39:65:85:87:be:03:db:c0:f6:98:
d5:dc:50:99:4c:b2:c2:b1:26:20:5b:15:69:65:25:
a1:47:26:2b:b2:7e:5b:b9:71:1b:1d:be:63:ea:b5:
29:7c:35:d3:b9:1a:07:45:1f:57:4c:4d:80:5f:c6:
05:84:66:97:30:76:6e:fa:cb:16:f6:f2:68:cf:4b:
67:56:f0:6e:26:f9:de:6a:c0:bb:59:fa:4b:99:22:
c0:42:d3:0f:51:8e:36:7c:3c:35:47:9d:eb:3f:0c:
f5:54:41:64:44:ed:fe:48:a2:60:8d:ea:08:83:f0:
24:b6:85:6a:bb:1c:22:14:8b:86:95:74:30:96:c3:
d3:4f:11:43:b3:1c:e4:f8:7a:1d:28:d0:87:6d:eb:
f1:dc:8b:3e:04:d3:0b:3c:e7:3d:9e:74:89:e4:db:
89:b6:d0:e9:39:53:9d:2e:68:33:5c:11:5a:68:f4:
3f:30:51:5b:6c:c8:41:d4:a2:1d:db:6e:86:de:c8:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:B3:AB:AB:3A:60:1E:F7:50:77:36:D2:F7:30:46:BB:BC:57:1B
X509v3 Authority Key Identifier:
keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:61:d6:bd:bb:59:9b:d5:6f:b9:29:74:78:d0:eb:a9:02:ca:
69:f0:60:ea:99:13:8f:65:b8:41:81:f9:f5:7e:e4:d5:2e:84:
a6:a3:4e:31:27:bf:39:d8:18:13:9b:d7:d3:27:e6:f8:d5:11:
66:45:09:6a:b9:de:d1:f1:c3:b7:f7:c2:cb:bc:41:56:56:8d:
42:91:4f:eb:56:8e:2e:17:fe:c8:08:c4:5a:dd:0b:28:86:f4:
dc:13:27:f8:e6:ac:78:bd:d5:e1:f3:82:7d:5e:08:60:73:3f:
4e:03:d3:08:b2:13:ab:b6:83:a7:37:2b:b9:a6:3b:00:e1:0e:
58:1d:5d:0f:e7:8f:5e:1a:ca:85:86:11:be:b5:fa:52:fe:ab:
06:4a:c8:1f:0e:ba:52:29:68:3d:6e:01:d5:58:8a:76:84:86:
59:eb:4a:62:b3:bb:7d:3a:bb:8a:6d:95:6e:72:95:62:f9:db:
14:e3:a7:47:cf:09:f9:6b:5c:46:d4:7e:04:19:85:53:8c:9d:
98:8b:e9:e3:b7:66:6b:4f:c3:ac:fc:bf:5e:5d:cb:c7:5e:4c:
f8:a0:dd:00:5d:ef:41:1b:62:35:08:d5:81:fa:c1:c1:d6:e3:
dc:ce:85:04:83:b6:44:2f:64:f5:98:86:9d:6c:5e:fa:ce:40:
f4:e7:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:03 2025 by rpki-client