Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
File: OZp7H8QgfroHB6hRUZXMaOg2q_g.mft (raw, json)
Hash identifier: eitw1dcie4icGPea0yOcy/aatp85OtY1oPUAs5JGsPs=
Subject key identifier: E2:32:F5:64:23:77:59:77:C5:84:FC:2E:B6:E3:A3:99:12:D8:7F:31
Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
Manifest number: 30
Signing time: Fri 31 Jan 2025 06:45:41 +0000
Manifest this update: Fri 31 Jan 2025 06:45:41 +0000
Manifest next update: Fri 07 Feb 2025 06:45:41 +0000
Files and hashes: 1: OZp7H8QgfroHB6hRUZXMaOg2q_g.crl (hash: BSR9XgCPpnr4Ei6V03fL+/FNBtlAIuKxVwrku7iWd40=)
2: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (hash: OktGMxzzHPz/jKeXT3HBwpZFefJQX2E3qJieHJ5ZqH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8
Validity
Not Before: Jan 31 06:45:41 2025 GMT
Not After : Feb 7 06:45:41 2025 GMT
Subject: CN=679c7195-4117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:ec:a5:46:cb:9f:e9:62:6a:e8:a8:83:59:
78:61:8f:05:0b:f5:e7:ac:d7:fc:c7:e1:c0:91:88:
3e:e2:14:92:3c:ff:04:07:f1:35:12:5c:fc:ff:05:
65:a7:61:cf:7a:90:0a:ab:31:27:f5:d1:cb:00:74:
9c:f7:40:29:01:79:b5:95:28:bf:80:50:7c:e1:8e:
59:04:9f:3a:60:60:65:a6:5a:14:4b:b3:20:b8:e3:
52:94:a9:48:9a:c7:f5:cd:ce:f9:7b:7d:71:9b:6a:
a0:26:ca:2f:c9:b8:dc:7f:75:3b:1e:07:4e:c4:65:
d3:f6:1b:87:11:0a:6c:67:51:d2:84:21:8a:b2:aa:
ea:4f:8d:5e:04:de:1f:05:9a:61:b8:ec:fc:48:ce:
15:e7:32:7c:29:5e:18:af:f9:cb:cd:6b:e7:80:b5:
ee:22:a6:38:04:b9:65:87:e9:ba:b8:3a:44:b3:b9:
bb:9d:87:f4:bb:6d:5b:c0:25:33:3a:4e:85:1c:fc:
07:d2:9c:1c:0e:ab:7a:14:e7:f5:81:ee:5d:0d:35:
94:4f:21:c8:06:30:fa:d9:03:bf:af:b6:5d:fb:e4:
c2:c3:7d:da:81:2d:e5:1b:71:0b:a7:4c:fd:55:c8:
ec:e6:2e:c5:47:54:b1:96:3e:dd:ee:b7:14:f2:2b:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:F5:64:23:77:59:77:C5:84:FC:2E:B6:E3:A3:99:12:D8:7F:31
X509v3 Authority Key Identifier:
keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5a:97:51:60:53:6e:19:5b:db:23:76:2c:83:94:43:e7:1e:
51:d4:eb:73:9b:79:4c:cb:88:69:af:3a:16:dd:a3:58:b9:59:
1f:2e:81:37:23:89:ed:7f:34:80:06:bf:b7:08:b0:f4:f4:ef:
2e:64:8e:61:20:be:e7:86:21:21:a8:c1:81:4f:9c:a9:dc:45:
76:de:c7:f8:88:7f:53:71:1c:38:b8:fd:5d:b1:8c:b5:e0:ee:
84:68:b9:f0:77:37:43:80:21:1a:75:8f:44:97:8f:48:99:49:
02:ae:4d:3e:6b:08:cf:12:ab:cd:28:a1:c2:5b:65:e5:e0:a5:
1d:c8:98:d4:d3:cb:1d:77:2b:72:40:3e:9c:78:b7:af:0e:36:
57:03:d7:95:34:e8:e6:29:56:b5:16:c9:e6:c7:65:ef:ea:7b:
f0:73:5a:7a:4c:dc:dc:6e:60:ac:b6:c1:b2:17:cf:6e:0a:c3:
9a:3d:0d:21:d9:4d:1c:b4:89:43:b9:fb:18:3a:b0:b9:69:e3:
7a:56:49:19:56:b6:b2:9a:ff:00:90:06:af:a7:e6:92:c7:21:
33:bf:38:20:23:88:12:c0:b9:d9:d3:ca:36:95:53:58:6d:c1:
e7:42:53:93:b7:5c:40:ff:21:6f:05:5f:bd:59:26:84:d2:7e:
be:3a:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:42:07 2025 by rpki-client