Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
File: oRR-hHvP7urdnompeo2fM2ecp-I.mft (raw, json)
Hash identifier: Zss/mGs2srUL1J0pnF3H8cGp39e1o4cLVzOrn7MVgKE=
Subject key identifier: BC:85:F5:19:CB:4B:7B:A6:74:6D:6B:CD:09:89:1A:C1:FA:E4:37:2A
Authority key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
Certificate issuer: /CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
Manifest number: 34
Signing time: Fri 31 Jan 2025 06:41:44 +0000
Manifest this update: Fri 31 Jan 2025 06:41:44 +0000
Manifest next update: Fri 07 Feb 2025 06:41:44 +0000
Files and hashes: 1: oRR-hHvP7urdnompeo2fM2ecp-I.crl (hash: hgJce0o/AY8Z1dm2aJoiFf823kkBIhRtIEHUyS2pgdY=)
2: 52DF0E62B2FA11EFA36E0387C4F9AE02.roa (hash: Es9pKOD8mSWZed849uffE6lhUB5WDPjyB7dm14eKTpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2
Validity
Not Before: Jan 31 06:41:44 2025 GMT
Not After : Feb 7 06:41:44 2025 GMT
Subject: CN=679c70a8-0991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:7c:95:aa:44:d9:e7:70:27:86:a9:40:41:
e1:5e:1c:f3:e6:c8:8d:f7:e6:12:e0:f4:ff:fc:47:
e4:cb:58:69:70:21:9a:78:16:6f:54:45:7d:f7:a1:
75:a4:3c:da:d1:f8:43:82:21:61:e6:b2:92:c1:0e:
1a:09:b8:b9:e7:31:c2:6a:46:93:97:8b:69:62:e4:
14:65:7c:d9:dc:cd:e8:a9:79:ad:c9:aa:92:11:a2:
51:bc:70:1d:68:90:58:0b:fa:ff:bb:51:f4:e8:5a:
c5:e6:4b:da:e1:2c:7d:6c:f7:e2:18:a6:1d:3f:f7:
73:2e:4f:a8:fd:4a:ea:ca:c4:ce:ce:5c:63:e5:f0:
c9:04:27:cc:4a:77:9b:a2:23:92:7e:dc:7b:3b:c6:
f6:e9:4c:91:3d:fb:09:9c:93:93:e9:64:4d:13:38:
09:61:fd:27:97:72:49:05:9e:f2:2e:6c:a1:c0:6c:
f2:1d:ab:4c:92:7e:f3:b7:ce:0c:5a:16:85:d6:30:
9a:8b:06:ec:bb:39:eb:20:88:2d:48:95:d0:74:ac:
45:96:b3:8f:fc:52:6d:d2:2f:cb:06:cc:7e:50:d2:
5d:1f:0e:65:46:18:1a:00:72:b5:8a:1e:2f:24:08:
56:0c:2e:19:3d:32:e4:bc:cd:82:43:0f:47:f2:72:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:F5:19:CB:4B:7B:A6:74:6D:6B:CD:09:89:1A:C1:FA:E4:37:2A
X509v3 Authority Key Identifier:
keyid:A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a3:23:3c:e7:69:3f:e4:d5:04:ca:a9:e1:15:2a:b6:37:ce:
6e:5d:82:25:05:4c:8b:40:03:de:2d:f5:50:cc:6c:3e:be:10:
23:4b:39:43:47:3a:79:8b:bb:8a:85:22:67:ad:e3:a7:6b:a4:
eb:fe:b1:39:e8:da:58:59:48:ca:ab:79:ec:c6:22:68:e2:dc:
92:bc:f1:cf:5a:90:82:0a:26:3c:4f:fa:0c:72:7a:27:c3:1b:
48:14:01:3c:d3:b3:9b:13:65:71:94:fc:30:45:ef:1c:ea:ce:
06:fc:60:a8:ad:2c:12:48:79:0d:55:71:e5:c8:08:45:9c:21:
4c:3a:80:07:61:5b:78:b3:2b:77:a3:a3:fb:95:46:ea:1f:59:
61:96:74:92:1c:10:33:ff:ab:99:1d:d3:ca:d7:68:c7:e8:ad:
55:46:bd:22:33:ee:0c:18:6f:af:00:79:c9:2b:04:67:63:e2:
07:ed:44:1b:c2:c2:7c:3c:2f:d8:18:ce:63:b8:91:08:cd:f3:
59:68:c1:23:44:7c:6b:5b:7d:4c:14:31:3c:e2:47:b6:2a:31:
2c:d3:d6:79:2d:75:12:96:42:ba:6f:28:09:31:f8:77:bd:62:
56:b8:17:50:69:5b:40:1c:70:74:34:6a:be:21:c1:5f:08:8d:
b7:37:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:39 2025 by rpki-client