Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
File: o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft (raw, json)
Hash identifier: yCH2WzE91g8KIPXEDAwxYpHD004woII1FyWjuBvxTbE=
Subject key identifier: 12:4C:05:B5:8B:8A:AC:35:07:68:76:41:36:C1:22:13:B3:8D:EC:F0
Authority key identifier: A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
Certificate issuer: /CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Certificate serial: 02F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
Manifest number: 02F0
Signing time: Fri 31 Jan 2025 01:23:39 +0000
Manifest this update: Fri 31 Jan 2025 01:23:38 +0000
Manifest next update: Fri 07 Feb 2025 01:23:38 +0000
Files and hashes: 1: o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl (hash: XM/5W9IIpsiOYuE9YVIO1n495jxhJi94kWOhQHBp+6s=)
2: 24578ECED56A11EFB764F716C4F9AE02.roa (hash: t5WMcFCD2OO+gp845WzQi07gNbar1uWW5UXsijptYhw=)
3: 1445557CC6C011EC9D09EF1DC4F9AE02.roa (hash: JL3deikXqirsZKv5Pglr4MkJVud4y4Ww4HTgjluu/lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757 (0x2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C913E/serialNumber=A3471C31533B88D1BF8A40A32A7DDE3BA0BB1CBF
Validity
Not Before: Jan 31 01:23:38 2025 GMT
Not After : Feb 7 01:23:38 2025 GMT
Subject: CN=679c261b-7ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:87:83:06:f1:c2:0c:86:d8:db:de:95:ce:
7d:2b:04:26:6a:9e:66:99:4c:48:7c:27:2b:71:41:
c3:ab:f0:05:ea:d5:e8:2a:51:f5:71:f6:ec:af:a0:
ef:68:eb:f7:1e:5c:3a:a8:79:5f:c5:3d:e2:06:de:
74:2b:ec:3c:bf:5f:3e:5c:d0:4f:f4:99:00:02:3b:
53:f9:cf:09:59:14:21:f5:b7:46:b2:41:b9:df:31:
f1:99:9e:b5:5b:7b:29:f9:6a:1e:b5:16:b6:ca:58:
bd:79:d4:3d:a4:3e:3e:a8:55:ff:65:5e:0b:7a:36:
25:3e:85:2a:1c:c5:35:21:25:7e:6a:96:d5:af:8f:
b7:64:74:1b:bd:b5:2a:00:20:1e:45:f6:34:cb:1c:
cb:05:e1:38:ec:33:8a:7e:fb:b1:bf:ea:b2:34:b9:
74:d5:c1:c0:62:2b:39:d6:cc:a5:ee:53:45:a8:76:
36:2d:45:7b:0a:07:7e:d4:8a:e7:3e:65:1e:1c:ae:
23:44:2f:3f:93:d2:20:e6:d1:66:5a:17:8a:f6:ce:
34:41:e6:48:a3:5a:41:c9:f4:2a:22:19:f4:b6:64:
ef:f8:93:48:68:52:ba:cb:e5:cd:38:91:21:a3:ad:
67:0c:e9:45:d4:e2:31:33:a2:51:11:7c:1c:41:b4:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:05:B5:8B:8A:AC:35:07:68:76:41:36:C1:22:13:B3:8D:EC:F0
X509v3 Authority Key Identifier:
keyid:A3:47:1C:31:53:3B:88:D1:BF:8A:40:A3:2A:7D:DE:3B:A0:BB:1C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0ccMVM7iNG_ikCjKn3eO6C7HL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C913E/DD0898F0C6BD11EC8963741DC4F9AE02/o0ccMVM7iNG_ikCjKn3eO6C7HL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:c3:a0:b5:24:b2:53:80:dc:7a:07:cc:19:4d:5f:30:bf:6a:
34:14:de:91:fc:0d:1b:b3:76:6d:e5:3f:c3:0c:96:41:cd:1d:
49:7a:a1:91:82:19:aa:a2:cc:27:2d:ea:2f:a0:18:8a:24:13:
bc:18:68:c3:1a:0c:b6:8d:50:64:6b:c7:9c:88:93:d8:89:c9:
27:fb:23:0c:69:02:f9:78:77:ab:8f:f0:8f:38:16:6e:93:12:
6c:e8:31:9c:44:f5:9c:07:39:4c:87:b8:73:27:45:c8:aa:6c:
86:95:31:9c:28:12:79:38:f9:51:48:d4:fb:61:e5:88:86:e0:
1e:70:87:3d:eb:9b:b2:f8:0c:e2:b3:0a:6c:f3:ba:91:d0:ef:
a7:f6:b5:6d:9e:17:48:20:8d:97:44:83:94:c2:cb:1e:4a:e4:
c9:45:be:d3:fb:56:b4:89:e4:24:61:8d:a1:55:4a:68:26:c4:
2f:20:ad:ce:66:64:02:6d:fc:31:d8:04:cb:9f:0b:f2:3f:bd:
b4:4a:e3:75:f0:0a:2e:3e:cb:ec:e3:6f:30:7e:b2:08:07:29:
e1:32:43:ae:46:b6:dd:35:8d:f0:54:28:4e:07:eb:4e:db:eb:
e1:e2:a2:33:26:68:1d:48:b6:ef:13:67:68:1b:68:4a:79:01:
ea:a6:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:50 2025 by rpki-client