Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json)
Hash identifier: F/oZaKaD/tosYrdkYiyx9UX7E35ncpGRCnHKNjQdn28=
Subject key identifier: 10:F7:95:38:CA:36:15:A5:18:8D:A4:4D:C4:7D:BE:B8:D4:6E:82:58
Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
Manifest number: 0105
Signing time: Fri 31 Jan 2025 04:09:53 +0000
Manifest this update: Fri 31 Jan 2025 04:09:52 +0000
Manifest next update: Fri 07 Feb 2025 04:09:52 +0000
Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: SfV2AjI5tIrW49/NuxOBlXuyE/6UjlY7Oi5LU4Idtpk=)
2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: YUSUdSQGsAYrkhG5r+Ikfnd8mpcwF6T3vxWqRkOzHrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA
Validity
Not Before: Jan 31 04:09:52 2025 GMT
Not After : Feb 7 04:09:52 2025 GMT
Subject: CN=679c4d10-d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:59:64:3e:72:6c:2a:ea:9e:38:70:71:89:
01:49:76:9a:f4:73:56:8f:0d:e1:81:d7:d4:e9:f6:
f7:c5:6a:10:87:82:4d:50:05:6d:94:be:dc:9d:cf:
6b:6d:a7:e9:62:51:22:75:5b:9e:aa:0a:9e:2e:05:
f8:fd:78:5b:bb:4a:0e:52:86:81:b4:58:81:97:a7:
f6:a0:85:d7:57:43:66:ba:e6:c5:c3:af:1f:f3:05:
87:86:cc:59:dd:96:a8:2b:c8:f2:42:5c:bb:3f:82:
bc:2b:b4:86:8a:db:90:9a:4a:8c:41:fa:dc:9e:2d:
0a:e8:2a:01:89:73:13:7c:45:0e:25:cd:ab:de:de:
bb:c0:4f:d6:12:52:cf:a9:54:dc:06:89:4e:91:f5:
9e:11:10:98:7b:b8:c6:91:af:eb:26:1e:da:72:0e:
88:cc:66:83:90:a0:c4:5f:a0:43:f0:58:2c:5c:cf:
8a:bd:f6:90:a1:9d:7c:65:ac:9d:79:a1:2d:6f:b5:
bf:98:12:a4:90:a8:91:56:00:36:34:a5:e6:fd:eb:
84:1a:c3:32:be:2a:cf:38:25:7a:c7:60:59:c0:5c:
e3:e7:1b:d9:0b:6f:76:c6:0a:70:3b:d6:5f:5a:e1:
3b:60:8c:11:04:d6:9d:86:c1:f8:46:b9:69:46:b0:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:95:38:CA:36:15:A5:18:8D:A4:4D:C4:7D:BE:B8:D4:6E:82:58
X509v3 Authority Key Identifier:
keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:0c:23:f4:47:1c:a3:0f:d7:ad:86:18:9b:e2:23:78:57:63:
59:34:c1:26:60:33:9e:f1:61:9e:2b:5e:f7:0d:c1:42:f4:a2:
68:c4:4d:02:c3:74:e9:66:57:3c:46:10:45:03:73:e1:01:61:
d9:57:d7:bc:f2:2c:5e:7a:87:cd:b5:98:d3:35:63:50:22:f1:
03:7d:3f:ca:d0:dc:a2:65:93:0c:a4:6a:19:00:22:76:33:a5:
cf:bf:3c:1b:31:5c:ae:6d:ad:98:ab:b9:da:54:28:31:99:e3:
c8:7f:7e:a4:fc:98:bf:02:2f:32:3a:70:e8:09:d2:3e:f2:8c:
01:37:76:b3:32:d8:f1:bf:f0:91:75:7c:99:98:e4:72:c6:24:
e6:b9:d4:eb:3f:b6:a6:9b:5b:38:86:f3:55:59:ba:71:c3:69:
cd:a3:67:94:2b:87:c4:ec:29:f4:23:74:e6:83:0b:3e:ba:f5:
7e:ec:c0:35:1f:fb:46:e4:c8:93:d5:9c:c3:67:2d:d2:ef:ac:
3e:3b:84:6a:3c:78:31:90:c4:30:0c:ff:3c:b5:dd:a7:9d:a2:
cf:c5:95:0c:fa:09:fd:14:5b:37:68:ee:e3:ac:4d:ac:ce:8a:
1f:e4:3f:14:ca:dd:80:0e:f6:39:5b:b2:9e:e8:92:30:74:90:
50:d5:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:29 2025 by rpki-client