Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json)
Hash identifier: m3wD7UuCCS0QR0i9mVp0ZLuk1BUv8rLcpEynjEboadY=
Subject key identifier: 89:EB:6D:14:74:76:7B:47:E5:6C:8F:92:EF:17:EE:52:CB:C5:DA:1E
Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
Manifest number: 017E
Signing time: Fri 31 Jan 2025 02:58:28 +0000
Manifest this update: Fri 31 Jan 2025 02:58:28 +0000
Manifest next update: Fri 07 Feb 2025 02:58:28 +0000
Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: D9yaQX0G8HmUgmzeEfb/o5OQDMfFlXK/tWl9emYmE2c=)
2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: VtazFFTqbixljqAtcsaeza2iwr0OPiOznwFcK1HtWtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196
Validity
Not Before: Jan 31 02:58:28 2025 GMT
Not After : Feb 7 02:58:28 2025 GMT
Subject: CN=679c3c54-5fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:80:0f:8a:99:69:a5:dd:4e:14:29:94:7a:
c9:8f:02:e2:35:f1:6e:7d:96:a6:79:e0:11:f3:94:
c6:39:0c:67:14:6e:af:0e:a1:ac:b3:4e:15:61:8e:
ca:e4:bf:9d:c9:1d:ac:2c:30:23:28:00:7c:a0:16:
2d:d8:2c:20:fa:15:aa:1f:57:7c:9c:34:e5:37:01:
99:6f:60:e0:f6:10:6a:da:44:0f:55:01:fe:6b:ac:
04:d2:eb:af:85:10:89:60:a1:fe:f1:2f:b5:a5:4b:
f2:85:f4:3b:92:3c:3d:79:a6:16:bd:81:f1:ec:e4:
c3:9a:ce:fb:8c:b8:0f:af:62:b9:a2:ca:10:c2:d3:
1c:32:8f:db:3e:aa:d2:8c:db:b2:d6:8c:e8:33:b3:
88:ad:e4:68:22:32:ba:08:b5:81:f1:43:54:35:04:
10:87:ba:2d:8b:2a:97:8f:fd:f8:3a:89:45:b7:78:
d8:5c:77:b3:f0:f6:4f:53:1b:bc:2f:67:4f:ff:ac:
0a:73:55:0c:39:66:a4:50:3f:81:95:fd:c6:24:29:
1a:2d:bf:2f:09:fe:d9:d6:83:fa:7f:20:55:4f:08:
78:89:43:34:8f:34:92:5a:45:83:8a:8b:b0:ce:3f:
72:30:d1:cf:8a:69:aa:75:81:a7:c9:fe:a0:67:e7:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:6D:14:74:76:7B:47:E5:6C:8F:92:EF:17:EE:52:CB:C5:DA:1E
X509v3 Authority Key Identifier:
keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:6a:d3:64:b4:41:18:2a:ee:e7:ec:e9:d8:08:9c:e5:89:
5a:2e:b6:49:b9:29:10:68:1c:7b:e9:74:99:83:0e:10:4a:34:
83:7c:4c:47:99:58:ba:0a:58:c6:81:79:44:94:fa:bc:ff:ae:
b3:85:53:dd:9b:36:cc:76:aa:29:2f:a3:55:d6:93:ef:98:08:
2b:d2:53:19:c0:dc:f3:c2:b3:60:b1:40:b6:46:30:40:0d:ef:
d8:5a:87:68:a3:77:bf:e2:38:7a:8e:04:02:06:a1:98:13:be:
8f:c6:5c:06:07:cc:5f:26:89:a9:9f:81:1e:c5:f7:ab:58:21:
1a:b9:85:c9:b3:df:59:3e:22:fd:8e:58:ff:c6:51:87:d9:fb:
7a:08:20:85:fd:9d:ee:3e:ec:4c:52:18:c3:45:c8:b3:8f:da:
45:2a:ca:cc:43:a3:6c:3d:f4:be:98:ad:eb:8b:ed:09:19:4b:
5a:0d:09:6c:69:00:f1:76:84:45:61:8c:1d:fd:26:1a:9f:25:
e6:07:da:57:07:ff:a1:f6:24:42:f9:39:34:39:40:65:66:4f:
bf:71:86:b0:21:ac:67:9e:05:4c:bc:6f:5f:a7:a3:67:88:1f:
ab:49:98:b0:e4:1c:4a:46:58:d1:66:11:0b:25:a9:a7:d5:b0:
cf:0c:b2:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG
ODRCNDExOTYwHhcNMjUwMTMxMDI1ODI4WhcNMjUwMjA3MDI1ODI4WjAYMRYwFAYD
VQQDEw02NzljM2M1NC01ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0DGAD4qZaaXdThQplHrJjwLiNfFufZameeAR85TGOQxnFG6vDqGss04VYY7K
5L+dyR2sLDAjKAB8oBYt2Cwg+hWqH1d8nDTlNwGZb2Dg9hBq2kQPVQH+a6wE0uuv
hRCJYKH+8S+1pUvyhfQ7kjw9eaYWvYHx7OTDms77jLgPr2K5osoQwtMcMo/bPqrS
jNuy1ozoM7OIreRoIjK6CLWB8UNUNQQQh7otiyqXj/34OolFt3jYXHez8PZPUxu8
L2dP/6wKc1UMOWakUD+Blf3GJCkaLb8vCf7Z1oP6fyBVTwh4iUM0jzSSWkWDiouw
zj9yMNHPimmqdYGnyf6gZ+cScQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInrbRR0
dntH5WyPku8X7lLLxdoeMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2
M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm
eXFndjhCanduQnI0UzBFWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPfWrTZLRBGCru5+zp2Aic5YlaLrZJuSkQaBx76XSZgw4QSjSDfExH
mVi6CljGgXlElPq8/66zhVPdmzbMdqopL6NV1pPvmAgr0lMZwNzzwrNgsUC2RjBA
De/YWodoo3e/4jh6jgQCBqGYE76PxlwGB8xfJompn4EexferWCEauYXJs99ZPiL9
jlj/xlGH2ft6CCCF/Z3uPuxMUhjDRcizj9pFKsrMQ6NsPfS+mK3ri+0JGUtaDQls
aQDxdoRFYYwd/SYanyXmB9pXB/+h9iRC+Tk0OUBlZk+/cYawIaxnngVMvG9fp6Nn
iB+rSZiw5BxKRljRZhELJamn1bDPDLIk
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:07 2025 by rpki-client