Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier: ywhMYK6+r8xcWalBZhMw8nBFvJB4zCXYkc1KxNzVLZw=
Subject key identifier: 04:2A:BB:AB:45:57:C0:65:87:FE:9F:9A:E8:19:A8:93:79:5B:34:20
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer: /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number: 0173
Signing time: Fri 31 Jan 2025 03:05:26 +0000
Manifest this update: Fri 31 Jan 2025 03:05:25 +0000
Manifest next update: Fri 07 Feb 2025 03:05:25 +0000
Files and hashes: 1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: mzWq7lVvCZWCCPyKE9XyLVHv4kqgD5vBU7LDEDWGDB4=)
2: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: Zu/GkgTDY0t5SCI7wWqSzTovtjd1f4VGPuuLiqKupZw=)
3: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: 11PyH5TvXQ0r5ME5Ee83Ppo1yXxDKq4IEnegpCrapA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Validity
Not Before: Jan 31 03:05:25 2025 GMT
Not After : Feb 7 03:05:25 2025 GMT
Subject: CN=679c3df5-0638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:a2:87:35:b5:d9:9e:91:ea:13:a6:b4:45:
c6:b6:50:81:44:d1:fc:25:2e:9a:da:25:85:6a:8d:
9d:4b:c6:b3:bf:2a:e0:e2:e4:b3:93:4a:f2:e7:be:
c3:ca:f3:75:a3:c5:61:eb:2d:e5:83:65:ac:ae:07:
68:3c:9b:f2:f2:5b:27:2f:c2:b4:d8:a6:6a:ee:b8:
84:bd:cf:d7:25:75:89:8e:3b:33:5c:ab:b6:4e:9d:
07:da:ff:c9:13:c2:b7:69:17:bb:96:64:fc:2d:20:
29:39:00:0c:8e:59:69:cb:1e:9a:66:56:66:c5:93:
41:f5:12:6d:ac:02:fd:a3:56:c6:ee:e6:f3:4c:b8:
c2:58:8b:3b:7d:c8:c4:bf:76:5d:e6:8e:dd:b6:7d:
20:e5:89:f9:9c:4a:7c:d3:cb:fb:52:59:ea:f7:24:
97:55:cb:2f:ca:89:de:d0:ee:2d:38:32:68:ae:c2:
6e:f8:0f:14:53:34:6b:f6:3b:6d:20:c2:54:c5:e0:
b3:ee:98:57:f5:4d:4c:2b:e7:b8:9a:91:46:c2:d3:
94:c1:bf:5c:fd:1e:bd:7b:7a:0f:c3:45:e2:a9:64:
b3:c6:2f:2a:1d:7d:b4:c6:f0:84:cf:83:ec:83:f0:
38:d5:a1:5f:0f:f9:4b:22:60:9b:fa:bd:a2:de:b9:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:BB:AB:45:57:C0:65:87:FE:9F:9A:E8:19:A8:93:79:5B:34:20
X509v3 Authority Key Identifier:
keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:8f:a9:4e:89:73:7b:a1:11:1b:a4:a5:b7:ba:3c:03:6a:a9:
47:2a:38:17:7f:04:3e:6f:6b:92:7c:2d:d4:35:5d:a6:db:69:
24:a7:46:3a:8c:02:10:dd:80:a7:28:d8:ac:28:08:49:8c:c9:
67:9f:14:9b:06:28:ae:69:c7:9f:50:85:83:09:65:cd:17:70:
a3:80:4f:6e:38:bd:78:2c:d7:ac:f5:eb:e2:3d:f1:e9:5b:e3:
98:d0:aa:88:45:4f:00:e9:a2:ef:57:87:f8:21:5e:3f:58:33:
d3:ab:b0:fd:e3:5f:d8:a0:38:af:79:a8:d7:61:df:ba:37:02:
0b:d9:77:3d:6f:78:80:cf:37:95:22:f1:7f:84:0f:52:0a:16:
0b:df:69:41:77:b5:f3:66:ea:4c:04:e8:7a:d8:f7:64:95:d3:
3b:44:85:74:39:55:29:1c:21:bd:94:e2:1c:30:5f:47:80:92:
16:86:9a:1c:15:75:1b:00:e6:0d:da:50:56:45:4a:b3:a8:64:
ca:9a:00:f2:1c:c5:de:bd:d8:3e:45:bf:20:35:f9:a8:3b:14:
d2:7c:f1:5f:8e:e8:bf:fb:fa:21:10:91:e4:a8:d9:a4:4e:e4:
5a:9b:d5:4f:95:84:7b:71:25:c4:db:f5:3d:24:5a:e4:44:53:
53:7c:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:19 2025 by rpki-client