Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
File: oWw_hyQag9GqVIDUKnT099HOXS4.mft (raw, json)
Hash identifier: yzXCAaNkx4wohWCLSpLITIjODL00K6WFPq722gdvofM=
Subject key identifier: 44:B1:ED:50:9D:C9:71:6D:8B:A9:32:2C:0E:D2:5F:9E:03:74:1C:7D
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Certificate issuer: /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
Manifest number: DA
Signing time: Fri 31 Jan 2025 04:41:34 +0000
Manifest this update: Fri 31 Jan 2025 04:41:34 +0000
Manifest next update: Fri 07 Feb 2025 04:41:34 +0000
Files and hashes: 1: oWw_hyQag9GqVIDUKnT099HOXS4.crl (hash: 0mh4l8SwWW1jm2yRNyIUpUQvWQbGYDnk6ZhpC9r5s4I=)
2: 1960E628919111EE9A03A712C4F9AE02.roa (hash: 9Znpr7cUcbnkoOK/tzYENSEz+mUbSse0tP+On0Rl+NI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Validity
Not Before: Jan 31 04:41:34 2025 GMT
Not After : Feb 7 04:41:34 2025 GMT
Subject: CN=679c547e-53be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:10:55:1c:f4:ec:12:fd:6f:d8:2f:86:d9:
c0:5d:2c:bb:c8:33:63:ee:f9:b9:d0:f2:1f:04:fc:
df:e2:8f:fa:2e:65:02:a2:98:df:da:10:c6:2c:ef:
df:6b:8e:54:c7:0f:65:9d:ed:fc:15:2a:3b:ee:39:
96:e0:47:f5:91:a9:f1:58:9e:65:6f:87:5b:b6:9c:
f1:2f:68:dc:7c:41:f0:5f:99:de:73:63:8a:e9:5c:
bc:9c:57:90:35:06:3e:ec:0e:90:ba:06:0b:d2:05:
22:f1:94:14:65:90:f2:70:82:ff:fd:32:02:b8:c6:
be:14:78:3b:05:b4:c8:ef:70:37:ce:13:8c:ae:4b:
8d:a2:49:05:0c:a1:b7:4b:94:42:02:f7:df:9b:a9:
44:67:f6:28:0c:f0:e7:e3:01:e1:73:f8:6b:74:89:
70:67:5a:05:d6:1e:4f:39:9f:d0:fe:6d:0b:7a:41:
bc:ad:0d:7a:a8:e6:5e:a6:c7:95:45:3e:86:13:a0:
58:73:65:23:8b:bd:41:00:1f:19:d1:c3:17:1f:9c:
e3:3f:9e:e2:46:29:d2:d1:89:46:6b:39:38:11:bc:
c6:34:eb:84:09:da:df:8c:e2:60:fa:3d:fb:7f:a9:
61:fe:be:f2:0e:de:17:10:7b:ee:08:a0:a1:bf:2f:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:ED:50:9D:C9:71:6D:8B:A9:32:2C:0E:D2:5F:9E:03:74:1C:7D
X509v3 Authority Key Identifier:
keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:e9:3a:46:1d:95:67:d6:a4:a4:7b:50:7c:c0:a3:35:2d:
0d:27:c8:3d:94:17:7e:70:7a:4f:b1:91:24:91:35:d7:81:73:
c5:40:6b:8b:e9:00:1f:ed:ba:79:ab:37:67:a6:34:92:68:82:
2b:90:cb:15:45:91:4f:72:37:81:01:4f:92:38:09:52:f1:6a:
77:52:1d:d1:94:a3:ed:7f:4e:d6:6a:04:a8:a6:73:40:44:7c:
2b:a5:82:f3:c2:53:65:1f:c9:e5:1f:2f:9d:78:f1:82:7f:bd:
aa:f4:55:6c:03:9f:28:0f:31:c4:76:a1:ba:9e:b1:9f:dd:a6:
e8:8f:73:64:7f:05:e7:3b:91:ce:e0:39:e3:86:51:18:98:d0:
5d:57:93:4d:19:5c:a5:02:8b:54:7b:7e:08:4e:0c:be:06:aa:
f9:7b:db:e7:74:9f:42:67:32:cb:18:bb:e9:f8:a4:f9:0e:fb:
66:0b:83:38:9b:61:d8:f2:f7:d3:c4:c5:23:df:2d:bc:6f:11:
ee:de:db:08:b1:03:8f:a0:ca:42:59:1f:65:54:28:97:0f:50:
b1:d6:a1:d1:3f:82:50:ac:1d:5e:3d:75:96:d4:10:1a:ed:a3:
ca:1d:58:54:97:94:b1:02:c6:5d:3c:b0:7d:90:9d:b4:b9:6e:
fc:1f:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:55 2025 by rpki-client