Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json)
Hash identifier: LXcnY8E9z0NmxX1KzopYk1efkVzuJIqbaX0SLPembzQ=
Subject key identifier: 64:81:5D:92:0E:BA:E9:CE:1E:E1:C2:31:57:BD:7D:7C:6B:22:1D:26
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial: 0BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
Manifest number: 0BD5
Signing time: Fri 31 Jan 2025 18:38:53 +0000
Manifest this update: Fri 31 Jan 2025 18:38:52 +0000
Manifest next update: Fri 07 Feb 2025 18:38:52 +0000
Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: ucAfxSlpoi+hr0/Ll1m7+BkFrr8ioLwoTKaC+euZPCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Validity
Not Before: Jan 31 18:38:52 2025 GMT
Not After : Feb 7 18:38:52 2025 GMT
Subject: CN=679d18bd-3b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:9e:37:fc:af:4d:e6:bb:14:ae:05:3e:bc:
60:2f:89:91:1f:57:04:94:64:57:2b:6a:f3:e7:19:
fa:54:1b:3d:39:de:44:b2:76:70:e4:df:61:f8:3a:
7a:42:6f:68:68:86:56:ce:9c:56:a9:5c:81:84:94:
36:70:02:a2:21:7f:e0:ca:33:9a:24:b6:b1:31:6d:
c3:31:61:fc:da:aa:b7:70:92:16:00:c3:86:62:bb:
ba:54:68:29:f9:87:e1:fc:a4:be:4e:b0:02:45:32:
90:fe:44:61:27:28:45:45:5c:bd:d8:86:cd:dd:f5:
b9:66:17:e1:75:f4:fe:14:c5:15:77:b1:97:e3:9a:
26:d6:37:f7:c1:1b:cd:21:d7:63:f4:80:42:e4:f5:
fe:4b:8a:47:9a:c2:e4:bf:46:60:33:47:03:4c:4e:
7b:04:aa:c8:26:67:47:fa:d3:4d:c9:f4:6e:d9:de:
21:0d:be:e6:69:4c:94:7c:6a:52:ea:0b:7c:12:13:
eb:d7:76:18:d0:32:5c:16:d0:4a:f7:05:50:ac:51:
5a:45:1c:b9:03:1b:49:b4:7f:1a:c6:cf:48:52:3a:
f4:79:6f:a1:2d:2f:9d:09:0f:72:9a:df:78:4b:e6:
d5:01:93:2d:43:25:c2:74:6b:b8:01:1f:ed:60:81:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:5D:92:0E:BA:E9:CE:1E:E1:C2:31:57:BD:7D:7C:6B:22:1D:26
X509v3 Authority Key Identifier:
keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:56:f2:c0:8e:4d:71:81:ba:3a:55:7c:3e:d2:e1:2e:f7:
d7:7e:78:fb:21:22:b2:30:a9:4f:c0:75:55:a0:25:d4:8d:18:
83:c6:f8:0e:b9:8d:e2:8b:83:34:10:26:a0:96:e4:f3:11:bc:
d3:f8:6d:11:fe:f2:9c:74:a0:2f:47:a9:78:67:f9:21:5b:37:
b3:8d:22:64:cc:4c:66:f9:9f:9e:6d:bc:cd:56:4b:5e:88:b2:
92:73:7e:5d:d5:aa:eb:d5:96:b0:89:57:fe:1a:7b:f9:42:64:
b7:1b:37:ec:21:0c:be:1d:0a:fd:6e:0e:05:31:5f:59:b2:c8:
06:f3:ad:e9:cb:9e:73:dd:a8:b6:dd:5b:c4:e8:16:68:1c:b9:
d0:5f:c0:97:c3:74:3e:f5:be:c4:10:2f:e0:85:f1:9a:5f:7f:
d3:48:a5:d5:58:d5:00:44:c6:c3:0d:64:14:86:f3:08:b5:22:
e1:84:2f:8e:29:8e:a1:f6:34:bc:1a:ce:06:11:22:8e:86:ea:
08:82:40:32:a4:74:64:a8:90:90:40:5c:67:ea:7e:86:d3:6b:
48:b0:15:9f:56:2b:38:c3:02:19:63:90:46:8c:e0:07:6a:09:
4b:a2:0f:a1:92:a5:f8:14:1a:5e:4f:ec:69:10:fe:80:ba:d4:
25:fe:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:41:08 2025 by rpki-client