Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
File: o222tflxI3VeVEH6xWqmu6BbCAo.mft (raw, json)
Hash identifier: dY+82K0zbRFDXx8peSBtsISBkt2yHsMVkFqQ1w7hUpc=
Subject key identifier: AB:9D:DB:CD:1D:91:6F:ED:6B:5A:E8:6D:DE:D8:DE:81:11:7C:5C:FA
Authority key identifier: A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
Certificate issuer: /CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
Manifest number: 70
Signing time: Fri 31 Jan 2025 05:55:45 +0000
Manifest this update: Fri 31 Jan 2025 05:55:45 +0000
Manifest next update: Fri 07 Feb 2025 05:55:45 +0000
Files and hashes: 1: o222tflxI3VeVEH6xWqmu6BbCAo.crl (hash: BUTP/yYqC9bhVHeQWjt/bBiPi4aaGF+g5D+uGu05Irw=)
2: 4136642C39AA11EF933F9583C4F9AE02.roa (hash: sUP25TQ/KdT/7AtskmzQ7yncQkdS/sqA5Ond/xRIO3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD4DF/serialNumber=A36DB6B5F97123755E5441FAC56AA6BBA05B080A
Validity
Not Before: Jan 31 05:55:45 2025 GMT
Not After : Feb 7 05:55:45 2025 GMT
Subject: CN=679c65e1-70e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:17:f9:1e:0f:03:c5:c3:21:13:d3:cb:6a:
54:b0:0f:19:bd:29:11:bf:d3:51:08:20:d0:6a:9d:
c2:97:c4:e0:ea:78:44:c7:36:3a:8b:72:63:a7:8a:
c1:1f:b7:d3:8b:a2:59:e3:d9:b1:f2:19:f8:18:b1:
ca:f9:54:0e:a1:bd:24:73:ef:a2:62:a2:8a:0a:c4:
a2:e2:a5:9f:4a:0d:75:70:54:35:8b:0b:ef:e9:6a:
f3:27:b2:2e:2e:bb:38:cc:c0:10:29:73:c0:9f:7f:
3a:dd:ae:a4:58:d4:e0:31:2a:70:7d:25:e6:45:42:
e2:c8:7b:91:31:22:af:ae:50:99:01:04:31:b7:35:
48:2b:a9:fb:dc:13:f0:2e:b1:94:8f:d8:a6:ef:61:
9c:21:1a:93:71:22:6f:cd:34:75:c7:9b:7c:1c:33:
a7:be:15:ab:99:0c:58:1a:72:70:a9:de:07:37:61:
b1:3a:d0:61:cc:cd:17:2d:97:9b:6d:7e:96:86:46:
b3:01:e3:cf:49:7c:45:b7:0b:ae:21:2e:ff:63:1c:
52:b3:81:ec:31:62:d4:1b:2f:bd:7e:f0:f0:d4:81:
15:26:9f:ea:ac:4a:40:f9:cb:2a:62:f4:4f:eb:1f:
05:33:69:51:6e:9c:58:d1:f5:ce:3d:7f:14:45:ea:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:DB:CD:1D:91:6F:ED:6B:5A:E8:6D:DE:D8:DE:81:11:7C:5C:FA
X509v3 Authority Key Identifier:
keyid:A3:6D:B6:B5:F9:71:23:75:5E:54:41:FA:C5:6A:A6:BB:A0:5B:08:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o222tflxI3VeVEH6xWqmu6BbCAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD4DF/310D3542399311EFA08D2E1BC4F9AE02/o222tflxI3VeVEH6xWqmu6BbCAo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:82:40:0a:c4:19:f1:8c:a3:ea:46:45:fd:ae:ad:b5:8b:
67:6f:1f:08:34:e6:43:8f:29:44:c0:e8:ea:ff:33:98:51:7a:
e4:db:68:ff:c7:a4:f8:04:15:fd:73:9a:1e:7f:b9:d8:33:c6:
2c:74:44:9f:89:27:46:01:43:96:3a:84:e6:68:66:c5:38:e2:
4b:b0:db:41:89:b0:f6:e3:21:5c:65:4b:69:f5:64:70:d6:70:
13:cc:13:f4:da:ac:8e:6a:bc:a0:fe:c0:67:5c:29:0e:21:83:
88:d8:3a:b4:fc:be:8a:0e:63:4d:34:07:ea:c2:a2:86:41:85:
22:f9:13:3e:7e:49:84:36:b1:ee:73:cc:c2:b8:be:85:e8:47:
62:02:40:78:15:3e:69:cc:f0:75:f9:61:bd:f3:2e:dd:63:bd:
f1:56:1c:85:49:11:7d:a1:a8:a9:67:08:40:55:87:b2:ba:09:
31:a8:9f:bc:d6:20:a0:02:bc:a6:76:23:ac:9a:33:74:f9:ce:
48:c8:fb:b8:e6:de:c9:0f:8e:ec:c1:a5:51:29:b2:31:d8:94:
f6:bf:c2:9b:07:cc:1b:2d:13:7b:4b:21:da:b6:ed:43:60:5b:
2c:df:55:53:53:22:8f:8c:c4:62:a5:29:7c:0d:d4:b2:75:14:
0f:78:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:11 2025 by rpki-client