Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft
File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json)
Hash identifier: q4R1ExkIRCqV9KIH+RAt7NJbvzIUeAERysqmpg7vF5A=
Subject key identifier: 33:78:59:89:9A:22:7A:18:7D:31:11:53:66:F2:A6:34:AB:01:20:00
Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E
Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E
Certificate serial: 1024
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft
Manifest number: 101D
Signing time: Fri 31 Jan 2025 17:24:06 +0000
Manifest this update: Fri 31 Jan 2025 17:24:06 +0000
Manifest next update: Fri 07 Feb 2025 17:24:06 +0000
Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: GdcpLaUd3Ca/M3MS1c449kqDLHX9MK/Wd9fllEOcVL4=)
2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: 6FqgiZMUxa33Dx66ztigBXPwvboVUKr0rBQAO7+tpXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E
Validity
Not Before: Jan 31 17:24:06 2025 GMT
Not After : Feb 7 17:24:06 2025 GMT
Subject: CN=679d0736-8727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:1a:bb:68:7f:50:43:41:58:1f:ba:27:46:
bb:8b:be:3d:25:95:91:57:d6:00:aa:db:33:ce:7d:
bd:5d:0e:b3:d3:96:ec:41:90:3d:45:0b:84:9c:a6:
4e:23:a1:bf:48:10:67:52:49:11:36:e5:07:5c:78:
ba:c4:c5:29:26:92:c5:1c:ba:8e:bd:4c:f0:68:b9:
70:02:e9:e9:4d:97:f1:c0:cb:af:73:67:8a:30:76:
93:86:01:ff:27:5f:60:dc:a7:6e:89:d7:23:6c:26:
80:6c:1e:47:28:3b:61:3f:47:6d:07:0e:79:04:f2:
fb:b7:37:83:64:53:03:e3:77:98:8d:28:82:9a:cb:
23:39:55:62:42:75:73:df:ff:fa:24:e6:21:4c:7e:
0b:81:80:76:c8:80:3d:64:0d:aa:14:34:78:c0:6c:
dd:60:c3:40:77:ac:c3:11:dc:85:fd:8d:ef:64:b7:
95:78:42:f7:1c:0a:0f:0a:c9:8b:c8:5d:46:63:58:
11:44:68:9d:15:1c:ef:8f:06:b3:b7:1f:1a:c3:1e:
83:b8:51:a7:3e:6f:f2:48:37:2a:f9:30:a1:2e:c3:
26:4d:24:1f:7a:43:9d:64:e3:c1:d2:e1:e7:29:a2:
c4:1c:ef:ca:d8:de:b9:6b:f6:ce:4b:2e:19:b3:f6:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:59:89:9A:22:7A:18:7D:31:11:53:66:F2:A6:34:AB:01:20:00
X509v3 Authority Key Identifier:
keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:be:6a:12:db:cf:e6:68:66:58:21:67:57:9b:da:9f:34:
dd:b9:c7:cc:cc:be:bd:54:66:ff:67:ee:1e:15:c6:b0:c1:7b:
08:07:1f:39:4e:e3:1e:8d:9e:85:61:a8:e7:87:02:8a:79:4a:
b3:dd:83:16:d0:75:b7:3d:30:2a:1b:db:c2:63:45:c1:a9:b8:
3f:3f:b4:8e:db:47:6e:19:47:fb:4c:d7:83:e4:09:ff:91:e0:
a2:d2:9a:7e:27:b2:23:2d:9f:f1:49:23:3f:b8:8d:2b:94:60:
84:3c:7a:b6:b4:71:ae:f7:30:e6:83:b7:bf:f6:11:8b:5b:39:
5d:e8:cd:0f:dc:9c:60:e6:97:ea:fe:7a:1b:79:01:6b:fb:be:
a1:c7:e7:9e:24:90:af:e8:3b:42:40:72:16:b6:39:24:05:58:
90:ea:e2:c1:f3:40:e9:5b:07:69:65:84:98:2f:8b:46:1e:64:
39:ca:9a:44:11:cb:47:0a:6e:d4:92:69:96:f3:94:dd:40:d9:
a3:4d:05:c2:ba:04:fc:50:dc:4c:dc:8a:f3:4e:05:f3:f6:2e:
02:e1:c4:2c:a9:7c:28:26:71:4f:d1:54:5b:1a:db:ef:42:55:
6e:89:47:1d:c0:05:49:db:f6:47:65:8b:da:e5:69:53:1e:72:
a7:be:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:18 2025 by rpki-client