Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
File: OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json)
Hash identifier: ZbYFurW9gkNr4ET/Z9t2nEtYmGw1IDUWdvH2roi9n4A=
Subject key identifier: FB:E0:C1:81:2F:54:AB:F0:00:19:79:DE:29:71:DD:CE:15:3E:EC:FD
Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
Manifest number: DC
Signing time: Fri 31 Jan 2025 04:45:17 +0000
Manifest this update: Fri 31 Jan 2025 04:45:17 +0000
Manifest next update: Fri 07 Feb 2025 04:45:17 +0000
Files and hashes: 1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: PpvEww8N016PWE8YPAgHmPrfx1mIduRU/fBxot2xj3c=)
2: C10CE08C97D311EE9299330CC4F9AE02.roa (hash: gJAOPk4iFoIW/KqNitxUF3g+S02/W0OUx3yJyNEqzJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Validity
Not Before: Jan 31 04:45:17 2025 GMT
Not After : Feb 7 04:45:17 2025 GMT
Subject: CN=679c555d-0fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:92:98:28:b2:1a:c8:00:35:36:a0:bb:55:
58:81:c5:93:9c:e1:49:38:4f:54:68:06:92:7a:81:
cd:f3:6e:68:41:8b:e7:3e:24:a4:eb:29:c7:fa:f5:
3b:09:37:6a:58:3e:7b:25:0a:d4:54:4a:60:3a:e1:
ee:b0:cb:41:45:d1:aa:f2:a8:79:2b:ec:fb:1e:17:
75:f4:16:a8:34:46:4a:ba:a1:85:e2:41:15:df:58:
ce:9d:6f:ad:46:c3:a8:74:2f:10:4e:7f:28:02:09:
66:54:3b:e0:9e:e7:6e:dd:db:4d:29:51:96:41:bc:
4b:bc:18:08:a2:35:68:8a:a3:86:75:35:09:6e:0c:
10:7e:61:58:cb:d1:6b:d2:54:86:ed:66:6a:29:30:
f1:41:56:4b:45:1c:ab:b9:bb:f7:65:dd:a6:6a:b4:
5d:0b:b5:f3:50:70:78:c4:9b:8f:03:06:1c:6c:15:
7e:b2:01:6e:0d:df:9c:e1:8b:45:f1:31:a7:49:c8:
4d:35:5e:b3:7c:82:ff:91:48:fc:3c:e8:b5:6e:ce:
c2:6d:c2:af:2c:54:71:ff:12:33:4c:14:12:c1:6f:
6f:73:38:c8:b8:83:8b:47:fc:b5:66:e8:ec:d3:0a:
47:01:99:34:0a:f1:15:e8:9d:cd:91:f5:d5:2e:34:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:C1:81:2F:54:AB:F0:00:19:79:DE:29:71:DD:CE:15:3E:EC:FD
X509v3 Authority Key Identifier:
keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:69:bb:3c:18:c6:c2:06:89:37:fa:28:d2:18:7b:ec:98:
59:d1:0f:93:21:52:5a:34:4a:72:65:47:25:d8:23:d1:df:fb:
19:da:59:44:38:0b:ba:a6:c2:6f:a3:d5:cc:61:c0:9e:53:06:
40:71:f0:b0:a6:d2:90:4d:7e:a2:fb:e3:a9:f8:bb:96:71:39:
60:9b:4a:c0:cb:a8:45:f6:23:a9:8b:53:49:6a:26:20:aa:d8:
20:c6:02:de:f1:09:15:98:68:c5:4b:c1:82:05:c7:64:0b:24:
c4:27:c8:e9:ef:69:8c:72:ca:3c:6c:5e:9d:8c:85:dc:ad:29:
61:5d:39:28:e1:37:81:cc:3f:e7:70:50:b0:d4:44:8e:c4:fb:
e7:9e:94:38:2b:b8:01:3f:c5:3e:f1:d7:31:c8:4c:0d:a5:95:
a1:52:2f:90:b4:59:4d:f1:7d:ef:42:71:cc:b5:8f:e5:82:a5:
f5:ff:29:f6:a5:11:ee:9f:e8:ed:11:5d:2e:f6:aa:58:c5:e8:
28:ae:75:1c:59:ea:93:2a:1a:10:8b:28:a6:48:33:a6:94:9b:
0e:1c:ba:01:85:f8:a5:57:90:7e:a0:a5:16:6d:0b:3a:1e:86:
aa:bd:b3:34:d1:5f:b4:10:90:bd:fd:00:91:16:60:ab:c3:1a:
92:03:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:50 2025 by rpki-client