Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier: TVJ1UIOjyqABlLaZyK7F8ZMG4GpiU/i0IdNhQ6QT28s=
Subject key identifier: DE:C8:5A:22:AC:63:38:B9:52:3F:BE:0F:18:30:C2:0C:83:07:DA:13
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 038A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number: 0374
Signing time: Fri 31 Jan 2025 00:59:13 +0000
Manifest this update: Fri 31 Jan 2025 00:59:12 +0000
Manifest next update: Fri 07 Feb 2025 00:59:12 +0000
Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: jUj7LvDpJfTeA15irRdxI/Vj7XSDYThA07V/+I67Pbw=)
2: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: PFHGyRpc2XbCpMP3oZwcoRFS7cS4eDGCTFH+DmvXr+c=)
3: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: dmwskcX+7K87R4MLVSKhbA64Ib5h40ZpO651aHbL2xA=)
4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: 8Wa5zRD8JBVDnPrtDrMM10W+ePzBdP7fVD0dPyvthC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906 (0x38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Jan 31 00:59:12 2025 GMT
Not After : Feb 7 00:59:12 2025 GMT
Subject: CN=679c2061-2dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:18:75:60:a8:88:b8:bc:1e:61:d2:ae:8a:
47:82:50:ee:03:f9:45:6e:e8:d4:95:73:64:44:1d:
91:a8:da:74:7d:8d:e3:70:7f:4d:63:8e:2c:6c:84:
1e:b2:8d:6c:c6:ec:42:09:18:80:5b:34:19:2b:25:
6b:3b:89:9f:1d:91:15:50:d5:db:ad:ad:ee:7d:bd:
84:a8:fa:b6:e2:97:c4:bc:f5:af:b8:dc:ad:30:51:
c1:e8:99:f9:a6:18:fd:8f:6a:95:c2:9a:ad:ad:ec:
45:1d:f1:ea:12:65:69:68:e0:d8:18:98:7f:94:c1:
ba:43:1b:14:ac:1e:ea:30:ff:92:25:cc:80:ff:19:
ad:a4:89:5b:03:81:b4:b4:19:5c:66:3c:8b:dc:b6:
bd:dd:82:fb:b3:d3:c1:23:de:0d:d8:8c:78:d5:5d:
dc:3b:cd:3a:9f:26:3c:45:45:b3:59:45:f3:d0:d6:
f5:52:25:68:18:9c:0d:52:ef:3d:bf:2a:af:a2:37:
80:cb:23:bc:60:7a:cd:ce:cb:42:8c:1b:29:df:6f:
e5:fd:91:d8:56:c5:da:27:08:4a:75:0f:b9:87:57:
bc:71:4d:4f:fa:df:46:40:08:98:db:46:9a:61:c6:
e3:8e:98:1c:a0:8d:fe:90:50:37:9d:f9:34:4a:4b:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:5A:22:AC:63:38:B9:52:3F:BE:0F:18:30:C2:0C:83:07:DA:13
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:5c:0b:2d:3a:e1:7a:9e:00:c6:73:4c:56:60:f8:2e:e5:ee:
35:60:87:00:d3:94:d6:3f:6f:bb:37:55:be:e9:9b:ba:89:1a:
46:2d:f5:ed:0a:51:12:fa:76:8e:5d:56:87:81:7a:20:eb:ab:
86:e3:3d:71:9d:4b:d6:54:cb:9a:37:48:ca:53:92:91:c4:07:
98:db:31:11:a8:e9:a0:db:66:94:f9:6a:d0:82:c2:3d:87:8f:
7f:1d:d9:fc:0a:e4:87:58:67:8b:2f:14:4d:54:20:5f:99:72:
4f:4e:e5:d9:c6:a3:31:54:a7:3a:d6:8a:01:21:c0:80:78:d3:
68:09:5a:f9:7f:61:dd:2a:14:cf:79:2b:5a:d9:d6:f4:8a:42:
5d:72:c7:e8:8f:11:61:fd:01:d1:61:a3:24:8d:06:63:54:56:
78:a5:ac:e5:3b:65:51:c5:e4:79:24:d3:cc:79:a1:5c:20:ce:
83:85:6f:35:c2:59:d5:d5:33:aa:66:16:33:33:54:dd:b3:93:
6f:af:a4:59:8b:8e:57:04:0e:fc:8f:76:79:f0:e5:7a:e8:8b:
3d:44:80:08:b7:98:8b:a5:89:9a:d1:95:62:8b:bd:19:69:52:
09:c7:85:67:c5:17:c5:90:dc:c5:4e:89:cc:1e:d4:ae:d8:76:
2e:77:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:53 2025 by rpki-client