Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File: OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier: 9eNI+f4F59ucN77PIEjIEYxVmhfN7Q2qxteHrI5LoCw=
Subject key identifier: 6F:B4:B3:9A:CF:FE:38:3A:C2:79:90:95:2B:93:16:5E:6F:30:77:79
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer: /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial: 134E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number: 1345
Signing time: Fri 31 Jan 2025 16:59:35 +0000
Manifest this update: Fri 31 Jan 2025 16:59:34 +0000
Manifest next update: Fri 07 Feb 2025 16:59:34 +0000
Files and hashes: 1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: 27EzV80u9+dC1NUe/tu+pVumJ7ZriwmUxU2g3Q7Q6dM=)
2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: c+PuAbIml2jBjPavn1IEZDbXlxGsrH9yX4XnYZy8fpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4942 (0x134e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Validity
Not Before: Jan 31 16:59:34 2025 GMT
Not After : Feb 7 16:59:34 2025 GMT
Subject: CN=679d0176-866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:8e:2c:8f:5e:99:03:50:93:a1:de:8f:96:
1d:88:10:dc:40:67:d6:eb:4e:2d:01:39:8a:f0:45:
1a:16:a2:ab:f2:fd:5b:7b:e5:86:e7:de:17:99:c1:
c0:61:59:62:aa:41:a5:4b:33:2b:08:7c:44:ff:fa:
e0:81:a6:8f:47:47:64:de:30:b9:ea:ab:be:9d:a8:
5e:3b:00:22:54:c6:ae:cb:c8:46:89:80:b8:0c:4c:
4f:19:c2:a9:da:48:c3:ac:a2:85:18:bc:96:3d:8d:
50:55:0a:c6:76:a8:51:bf:c1:c4:1a:32:da:3b:9c:
e6:11:81:be:00:a9:04:78:d1:71:dc:28:f8:f5:e9:
16:38:f5:a4:12:ff:ed:59:35:66:e1:ec:c9:d2:61:
2c:fb:5f:98:eb:86:c0:6d:89:bd:36:11:82:2c:53:
1d:7c:07:46:20:5a:79:e0:96:e6:f5:b5:e9:b4:f0:
c9:f0:d4:30:85:35:2d:1f:36:33:49:1b:31:f7:15:
dd:38:1d:ad:7c:13:54:bd:0f:07:84:c2:b1:24:6d:
1c:86:68:c5:dd:36:d2:11:92:53:61:4a:74:41:69:
25:5d:a6:9e:bc:64:f8:3b:db:dc:93:dc:e6:5c:43:
ca:c9:1e:d2:f9:e6:97:b3:e3:40:76:30:8a:25:4b:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B4:B3:9A:CF:FE:38:3A:C2:79:90:95:2B:93:16:5E:6F:30:77:79
X509v3 Authority Key Identifier:
keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:95:ac:5d:54:80:a9:40:3a:f5:4b:13:af:f8:06:53:6f:
94:d5:6e:5d:44:0a:8b:79:49:a6:67:f2:e7:1b:15:f0:c6:ad:
0e:9f:3a:aa:e7:25:3a:54:32:b0:d0:10:04:77:f0:4e:6e:71:
65:f4:90:cd:eb:b5:f7:5b:c0:b6:19:de:82:81:3d:f4:10:63:
b6:50:62:03:e0:34:ac:28:5e:8d:49:c3:96:73:b9:e1:fc:85:
87:e3:35:8c:ae:9a:e1:f1:03:6d:a6:8b:b1:fb:4b:36:ed:1b:
6d:00:52:99:0f:f8:d4:d0:88:d7:a0:1b:97:3c:40:80:b4:19:
95:d3:45:d0:63:98:ea:a4:e2:a6:b4:33:a0:65:9f:66:ed:22:
79:b0:c8:a3:69:e8:cc:ae:c5:49:0a:eb:c7:3a:60:2e:7c:95:
ac:d9:4c:f4:fe:14:b4:0a:5f:ae:6d:ec:ca:e0:c4:c8:04:f3:
74:70:13:53:a7:5e:fc:eb:ed:b0:c9:a2:1b:55:f9:fe:22:f0:
c8:ef:15:05:6b:7c:99:d9:fb:b7:33:6a:8d:bf:ed:02:44:c0:
3c:24:8c:49:7c:55:58:be:e0:53:a4:2a:6f:ab:c4:53:51:7a:
1d:98:0a:55:a0:f0:b6:7b:6d:e4:90:11:49:c7:f8:cf:90:ca:
56:58:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:37 2025 by rpki-client