Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft
File: oAONXyzMSsJeuvdxJC50MA_PeCw.mft (raw, json)
Hash identifier: xEvQig3Y54mHS4+CT2mE7RlYMqKO4HK62Slsh5xCGpk=
Subject key identifier: C4:DF:F7:03:2D:1E:17:9A:52:3B:04:23:DB:33:EA:A0:F4:A5:F9:6A
Authority key identifier: A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C
Certificate issuer: /CN=A91E60A4/serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C
Certificate serial: 0992
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft
Manifest number: 0988
Signing time: Thu 30 Jan 2025 20:10:45 +0000
Manifest this update: Thu 30 Jan 2025 20:10:45 +0000
Manifest next update: Thu 06 Feb 2025 20:10:45 +0000
Files and hashes: 1: oAONXyzMSsJeuvdxJC50MA_PeCw.crl (hash: Oj0BByoR6MPNUdR37Ht10WI5zo1d0JYixL8KYvqW8cA=)
2: 1D86F90A988D11EABE02F23DC4F9AE02.roa (hash: eXMB9dV7xihStPr0BmetBSssUWM8QZG3PMbHIo5WHpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E60A4/serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C
Validity
Not Before: Jan 30 20:10:45 2025 GMT
Not After : Feb 6 20:10:45 2025 GMT
Subject: CN=679bdcc5-b814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:9e:f5:09:e9:06:f1:33:df:06:b2:69:3d:
4d:89:ab:19:6e:b7:2f:3d:db:d4:0a:49:ce:47:f1:
6b:55:3f:b4:42:29:ba:56:02:7e:4a:7a:ce:96:ee:
db:cd:44:21:2a:10:30:7d:85:3d:c4:10:f4:10:f5:
8b:3c:30:f8:0d:fd:3c:9d:a1:75:9b:11:e6:cb:49:
a1:7c:f3:f4:5c:d6:71:e5:03:55:63:ed:93:e4:f8:
1c:b5:f8:ef:7c:c3:d2:b4:1d:07:79:d6:c5:b4:d8:
4e:e9:aa:a1:b2:4c:63:07:22:99:b7:f2:36:23:e7:
3f:00:a6:bb:df:b9:c6:bc:d9:97:7e:f1:a6:42:dd:
39:23:df:32:56:13:2c:6c:da:98:eb:7e:e9:3c:98:
ef:9d:d9:48:d1:30:64:b9:c3:3a:5c:fc:98:fc:a0:
b9:a7:fa:ee:8a:d7:1e:ad:aa:7c:65:b7:d9:c1:7c:
a2:02:10:41:7d:34:8e:d6:ae:be:61:ce:c1:de:de:
3e:b7:75:65:61:be:20:4d:f2:60:25:db:5a:db:22:
b1:8c:2c:b3:7b:68:87:5a:52:e2:f8:e0:3d:c4:a8:
f8:1f:f4:11:55:0a:fb:ab:8b:65:1b:fb:b1:69:71:
6e:ab:67:3b:b7:fb:22:0f:be:fd:ea:45:57:bb:28:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DF:F7:03:2D:1E:17:9A:52:3B:04:23:DB:33:EA:A0:F4:A5:F9:6A
X509v3 Authority Key Identifier:
keyid:A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:58:19:df:12:2b:4b:8e:2d:42:1f:05:fc:4d:0e:16:7f:71:
12:c4:1b:dc:af:42:f1:fa:15:79:03:24:b6:87:58:8b:d5:34:
2d:f9:0a:79:0e:05:c9:79:66:d8:b5:ac:82:a3:fe:03:0c:0f:
da:e9:57:ea:1a:c4:0a:fa:d7:3c:63:4c:6b:a5:38:da:a5:8f:
67:41:14:05:fc:72:ed:cc:5a:20:c8:8b:9e:59:12:b8:c2:bf:
52:52:48:02:86:5f:2e:64:51:c1:35:77:47:ca:8b:cc:b0:02:
13:fd:94:d3:a3:b8:4c:84:b3:85:4a:82:34:76:7c:f7:cd:f8:
e7:46:e2:7a:4f:a5:98:aa:97:ab:cf:23:6d:7c:74:9e:bb:34:
2a:dc:36:16:4f:3a:27:03:3b:a0:d7:39:b6:9e:aa:b9:9f:b7:
09:d6:7c:9e:38:ec:b6:4e:f4:6b:62:9d:6a:8f:bb:5b:82:52:
d2:71:87:2e:30:ff:71:f9:8b:b3:1b:c7:6d:aa:d0:b6:81:8e:
6e:ea:ec:a7:a2:14:d4:6e:a2:18:fd:a5:7d:a3:85:9e:f0:14:
72:d3:0c:85:ab:53:59:cb:c2:51:f0:f4:ca:8f:2b:93:92:f7:
1f:17:e7:92:67:ef:05:d9:80:b3:4d:32:a3:d7:4e:eb:d0:96:
15:e5:43:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:03 2025 by rpki-client