Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft (raw, json)
Hash identifier: w3g8kD97Sj8G083efb72sOT461vrHB40AXpkE58hjHw=
Subject key identifier: 25:B1:AA:F2:09:5C:E8:A7:E3:B7:8F:6F:3F:BA:B5:E0:4C:9B:25:59
Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8
Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
Manifest number: 018F
Signing time: Fri 31 Jan 2025 02:48:30 +0000
Manifest this update: Fri 31 Jan 2025 02:48:29 +0000
Manifest next update: Fri 07 Feb 2025 02:48:29 +0000
Files and hashes: 1: oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl (hash: O533XIXJJJYhwk4rJRPYJc0/jYGc6VfVRVEAGK7XIDE=)
2: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (hash: KfdVVRr1UwfhsTtUMM0Ph6w9qtVR9qcrLdXdVzGndCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8
Validity
Not Before: Jan 31 02:48:29 2025 GMT
Not After : Feb 7 02:48:29 2025 GMT
Subject: CN=679c39fd-bb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:01:e6:fc:5e:27:95:60:a2:f6:f4:dd:b2:
a0:ac:ad:bb:a8:8e:60:a3:5f:15:f4:1c:af:13:97:
ee:2e:aa:bb:4f:92:3a:e7:1a:67:b7:b6:24:27:5d:
f1:3d:71:5b:fa:d7:61:31:31:b6:e1:20:21:e7:dc:
bf:3b:58:f8:3e:21:ae:93:3d:3e:1f:0f:cd:72:e5:
1a:6d:a4:01:76:f4:d1:b3:ef:19:7e:5d:2d:a0:6f:
30:b6:07:7c:75:1a:7f:7e:c3:b1:0b:10:83:f2:29:
5f:a6:a0:e6:50:db:9f:c6:9f:d8:2f:e4:64:ab:2d:
03:ec:fd:bc:79:99:95:1c:a3:b8:ff:86:09:09:b4:
83:25:e4:cc:b6:92:92:0d:ac:bc:5d:c3:3e:a2:d5:
71:81:da:7b:60:b4:f9:21:18:10:1f:c8:ca:2c:cf:
5d:bf:ed:9e:f6:a9:ec:d3:41:eb:d7:f7:72:3d:5e:
ea:8b:c8:8e:b7:a0:ab:0e:ca:44:6e:d2:8b:2e:a0:
0c:91:d3:e5:80:59:9b:cc:c3:0f:75:e0:bc:ce:db:
f0:16:5e:9f:0f:8e:86:75:8d:b1:44:aa:a0:0f:e0:
65:a8:d4:33:ec:83:4a:48:7c:2d:e7:2e:be:0f:e4:
43:2d:29:30:93:ed:54:01:3b:12:f8:b6:97:4a:38:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B1:AA:F2:09:5C:E8:A7:E3:B7:8F:6F:3F:BA:B5:E0:4C:9B:25:59
X509v3 Authority Key Identifier:
keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:d8:fb:e2:2f:76:8a:2a:cd:61:98:b1:21:4e:4b:2b:20:
58:7f:56:11:e1:cd:4e:60:9c:21:eb:27:78:3d:4b:5e:4b:41:
d7:5d:55:3b:46:70:61:d3:94:74:5a:5f:00:13:66:a8:04:57:
fe:c8:e8:ba:47:83:47:83:f8:e7:97:92:13:09:89:69:36:86:
a7:52:c2:cb:81:bb:a4:90:65:0d:30:50:98:71:95:4d:cd:19:
06:db:d4:cd:db:90:14:7d:25:75:71:02:9c:65:da:01:87:29:
2e:a4:cf:da:6c:2c:31:6d:0d:0e:5d:13:50:a5:ba:6b:74:a5:
d9:89:be:78:5f:f1:76:f1:79:70:55:92:a1:47:1a:10:bd:68:
14:27:07:a4:1a:f7:b1:7a:19:f1:12:84:37:c3:a5:1e:be:cd:
77:b8:11:fc:ac:2c:24:0d:79:1c:dc:f6:b0:60:2a:7f:b5:39:
29:1a:36:18:fe:bc:17:3a:b2:e1:de:83:f4:4f:13:51:1c:bd:
a8:2f:6d:e9:23:80:58:3e:dd:dd:ac:74:40:2f:54:56:cf:db:
c1:50:13:75:62:df:3a:40:26:d2:49:4a:d7:0d:2e:53:b0:3b:
10:c0:ed:86:b8:a7:de:a1:25:b6:14:b6:0e:f2:66:6f:32:28:
23:91:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:35 2025 by rpki-client