Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft
File: OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft (raw, json)
Hash identifier: /0iIE/OFfvXml3ypko+tzI5NLc83tb2t7HQ3XRg3TiQ=
Subject key identifier: CA:E6:6E:EC:09:4E:A1:96:60:94:70:96:E7:E4:90:14:D5:2B:98:7A
Authority key identifier: 3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62
Certificate issuer: /CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 04:35:11 +0000
Manifest this update: Fri 31 Jan 2025 04:35:11 +0000
Manifest next update: Fri 07 Feb 2025 04:35:11 +0000
Files and hashes: 1: OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl (hash: nXMr548qh24ob8Z1/H8npfs02JJ8iS5nhlrHFUiX/SM=)
2: 67CB8C7287E711EEAC6C0B48C4F9AE02.roa (hash: F1mmz33PgwMDoRRZC6GtV9seLtgQSAErXHweDotrVWA=)
3: C1BECCFC68ED11EF85713047C4F9AE02.roa (hash: Sezt6J9wGq2uA81TOBF7C4CUuNihzkNfNyFAuKq+xQc=)
4: 675EE9DC87E711EEAC6C0B48C4F9AE02.roa (hash: drw42sYp0Yh/VWP9xaFHuMDcqO3Tii4R1NV32pLiPSM=)
5: 08310D28339011EFA4FD915FC4F9AE02.roa (hash: SpJu5nU/KENpOPLXjRvExSZV1G2bbDwfeZ2+Dj1X+E8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D318A/serialNumber=3A1543BDF3772A98D294EB90023803DDDDF11E62
Validity
Not Before: Jan 31 04:35:11 2025 GMT
Not After : Feb 7 04:35:11 2025 GMT
Subject: CN=679c52ff-4fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:6f:c8:6f:e3:08:14:43:35:d4:44:47:a9:
b8:ea:ea:ce:50:2d:77:95:22:05:98:9c:f2:19:62:
fd:7c:0f:58:23:d9:aa:40:d0:e3:e5:d9:b5:80:3e:
68:cf:4b:f1:55:44:ad:4b:ec:a7:41:24:b5:d4:42:
0b:7d:05:e5:7a:01:04:75:e0:01:39:1e:34:8e:cc:
df:0e:4c:fe:2f:40:aa:ec:f9:db:a0:b2:c0:22:1e:
2a:98:38:22:4d:bc:7f:eb:1e:7d:83:12:d0:d6:15:
21:29:8d:bc:1c:ee:f9:3c:bb:e5:38:93:2d:1d:31:
0e:7b:fa:06:01:7a:27:ee:a1:67:12:d9:f8:b5:b1:
83:51:5c:6b:89:b2:6d:83:33:5c:b2:4e:17:13:01:
50:0c:8e:7e:6b:86:8d:0b:98:30:08:df:52:2d:4e:
61:d6:72:26:e1:6c:cc:4b:9e:c1:72:26:c7:3a:60:
63:28:0b:08:dc:43:ed:59:de:04:0d:6e:00:16:6f:
55:86:bc:e0:f2:a9:a3:4b:2f:74:b7:50:a3:27:95:
5e:91:7b:9e:a1:07:fc:28:03:5e:0b:b8:d1:9a:e3:
f7:2f:e8:93:d2:ff:ea:99:4e:ec:7c:8a:d7:b4:f4:
04:34:24:61:d4:b8:6c:30:1f:7e:62:02:17:3a:ca:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E6:6E:EC:09:4E:A1:96:60:94:70:96:E7:E4:90:14:D5:2B:98:7A
X509v3 Authority Key Identifier:
keyid:3A:15:43:BD:F3:77:2A:98:D2:94:EB:90:02:38:03:DD:DD:F1:1E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OhVDvfN3KpjSlOuQAjgD3d3xHmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/ECFF2AF887E611EE97E6C746C4F9AE02/OhVDvfN3KpjSlOuQAjgD3d3xHmI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:8d:12:06:5f:19:3f:59:67:c6:07:b0:6c:17:98:5e:c9:46:
4f:a7:f3:d6:40:44:17:b2:1b:c9:c8:31:15:34:f6:b3:a9:c1:
9e:c1:0c:c0:96:54:ef:85:c2:d6:c3:5a:c5:c1:9c:dc:1c:c9:
4d:52:6d:81:29:bc:ec:82:b6:b3:62:23:d1:24:43:96:dd:93:
cb:2e:0d:f5:6f:ec:92:ff:fb:30:2d:aa:df:91:49:70:48:27:
8f:81:c4:e7:09:ce:a7:af:11:67:45:61:22:a6:96:cc:47:61:
b4:3d:2a:a5:32:3b:8a:31:00:99:d8:9b:a5:30:d5:c4:58:0b:
64:c8:42:67:03:1e:65:a3:cc:ce:5f:7c:c4:65:04:7d:a4:27:
b5:b6:72:73:38:39:5e:fc:6e:9d:13:ac:bd:40:99:f3:5c:f2:
ae:8a:81:47:2d:24:d9:e3:8d:a1:9e:4e:c6:5d:1e:94:91:71:
2c:68:7d:c5:94:dd:2b:66:7b:45:cf:6b:04:d8:8d:9b:9a:43:
c8:23:1b:72:c7:cb:84:f4:68:a1:ca:15:17:61:87:00:25:be:
eb:d5:31:6d:3d:46:46:30:5a:ff:f0:ba:d7:0f:3b:86:4b:ae:
0d:c2:6f:8d:9c:6b:db:d0:38:38:31:9b:6f:05:ba:0a:82:f1:
db:77:06:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxOEExMTAvBgNVBAUTKDNBMTU0M0JERjM3NzJBOThEMjk0RUI5MDAyMzgwM0RE
RERGMTFFNjIwHhcNMjUwMTMxMDQzNTExWhcNMjUwMjA3MDQzNTExWjAYMRYwFAYD
VQQDEw02NzljNTJmZi00ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgpvyG/jCBRDNdRER6m46urOUC13lSIFmJzyGWL9fA9YI9mqQNDj5dm1gD5o
z0vxVUStS+ynQSS11EILfQXlegEEdeABOR40jszfDkz+L0Cq7PnboLLAIh4qmDgi
Tbx/6x59gxLQ1hUhKY28HO75PLvlOJMtHTEOe/oGAXon7qFnEtn4tbGDUVxribJt
gzNcsk4XEwFQDI5+a4aNC5gwCN9SLU5h1nIm4WzMS57BcibHOmBjKAsI3EPtWd4E
DW4AFm9Vhrzg8qmjSy90t1CjJ5VekXueoQf8KANeC7jRmuP3L+iT0v/qmU7sfIrX
tPQENCRh1LhsMB9+YgIXOspNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrmbuwJ
TqGWYJRwlufkkBTVK5h6MB8GA1UdIwQYMBaAFDoVQ73zdyqY0pTrkAI4A93d8R5i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzE4QS9FQ0ZGMkFGODg3
RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9PaFZEdmZOM0twalNsT3VRQWpnRDNkM3hI
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09oVkR2Zk4zS3BqU2xPdVFBamdEM2QzeEhtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzE4QS9FQ0ZGMkFGODg3RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9PaFZEdmZOM0tw
alNsT3VRQWpnRDNkM3hIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBijRIGXxk/WWfGB7BsF5heyUZPp/PWQEQXshvJyDEVNPazqcGewQzA
llTvhcLWw1rFwZzcHMlNUm2BKbzsgrazYiPRJEOW3ZPLLg31b+yS//swLarfkUlw
SCePgcTnCc6nrxFnRWEippbMR2G0PSqlMjuKMQCZ2JulMNXEWAtkyEJnAx5lo8zO
X3zEZQR9pCe1tnJzODle/G6dE6y9QJnzXPKuioFHLSTZ442hnk7GXR6UkXEsaH3F
lN0rZntFz2sE2I2bmkPIIxtyx8uE9GihyhUXYYcAJb7r1TFtPUZGMFr/8LrXDzuG
S64Nwm+NnGvb0Dg4MZtvBboKgvHbdwY9
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:27 2025 by rpki-client