Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft
File: cOaM6FoDjZ4wcEODfKbmsaZglu4.mft (raw, json)
Hash identifier: ImJLa1oiP+CjPaCy4+B6NvCMlL9M00XVNzJUlD8knzc=
Subject key identifier: E3:19:4C:87:CD:4C:1E:EF:23:E8:F1:4D:9A:69:F6:70:E4:04:27:E3
Authority key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE
Certificate issuer: /CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE
Certificate serial: 044B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft
Manifest number: 0445
Signing time: Fri 31 Jan 2025 00:19:12 +0000
Manifest this update: Fri 31 Jan 2025 00:19:12 +0000
Manifest next update: Fri 07 Feb 2025 00:19:12 +0000
Files and hashes: 1: cOaM6FoDjZ4wcEODfKbmsaZglu4.crl (hash: C8K5DEBZnJXV2pFko/w3EB278Um0xqUfoT1Pm2XfaXk=)
2: FD0DCDCA41E111EC98FA0C0AC4F9AE02.roa (hash: CzraaquDZ9Uo+Rh3T+BRvbMkjKbruCD1g9kPUW6icAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6ADE/serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE
Validity
Not Before: Jan 31 00:19:12 2025 GMT
Not After : Feb 7 00:19:12 2025 GMT
Subject: CN=679c1700-311e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:ab:aa:71:e2:a7:10:7c:0d:bf:5a:27:a1:
01:e8:33:f9:55:85:10:a4:16:c8:e5:a8:48:c0:c6:
d0:d6:c6:17:fc:6f:f8:bf:9d:77:7b:27:4b:f6:4f:
ca:37:62:99:ac:c8:e8:e6:8b:5a:71:d3:95:15:6a:
06:e4:1e:f0:a3:32:b0:ae:f4:10:82:7e:7e:64:24:
0e:cb:82:6d:79:7e:97:20:61:45:66:31:3b:3e:85:
58:a9:cc:10:0d:64:fd:6d:c3:29:17:49:89:e8:7f:
da:db:35:d9:52:35:c2:15:03:6b:27:58:bd:7a:38:
55:22:ad:f8:68:63:88:26:d0:29:ff:23:2e:cd:92:
a1:ce:f5:46:c2:cc:e4:59:2c:52:ff:74:a6:8c:93:
7b:28:c3:7f:25:9a:10:3a:98:74:3c:b4:2f:74:f3:
28:13:ce:62:e1:6d:71:be:80:96:9d:2e:df:52:9d:
a5:3c:00:19:11:7c:4a:1e:ce:aa:a4:6f:05:7f:9c:
7c:b1:e5:00:97:ca:bf:c2:c4:f2:b9:9b:97:82:f2:
c9:30:e6:c9:91:36:8a:52:5b:f9:89:56:c1:c2:9d:
da:b3:06:33:e7:bc:88:f3:01:60:75:4c:ba:50:9a:
63:0b:b4:0d:23:a0:a8:84:82:92:d4:9e:23:5b:66:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:4C:87:CD:4C:1E:EF:23:E8:F1:4D:9A:69:F6:70:E4:04:27:E3
X509v3 Authority Key Identifier:
keyid:70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ca:ba:c3:25:df:c6:c4:c5:ef:5a:d9:84:9a:f6:f6:98:6d:
45:63:b6:21:39:eb:fa:71:fe:f8:73:c0:f5:75:e8:4d:7a:45:
b2:8d:48:96:62:0f:66:ff:ff:2b:01:b8:04:05:3b:1f:6f:28:
2e:c1:ab:2b:9e:93:02:ce:e4:a0:18:29:84:f5:af:82:b8:e9:
90:a9:b2:da:bb:df:53:31:9b:d0:cf:87:67:2e:9a:9d:5a:58:
a6:24:11:67:7f:a1:f7:f8:84:bf:74:2c:d1:a3:19:6d:8d:d7:
24:d0:9a:cc:b0:4e:d8:f9:c4:fa:90:14:b7:cc:e7:88:de:a5:
d8:c9:39:6b:bf:e1:04:47:67:f1:ed:72:17:ea:f0:e1:1b:55:
da:38:0d:8c:ea:4e:1e:9d:1d:eb:9f:34:97:ce:4b:2f:b9:4d:
14:de:dd:0c:78:31:e5:ef:9a:6b:c5:5e:7b:59:50:9e:1e:bd:
17:4b:5c:6a:2a:cb:f0:8a:17:6d:ba:4a:9b:d7:98:66:65:47:
8e:57:04:3f:ea:89:44:a3:07:08:ea:ae:97:66:eb:97:53:fc:
2a:05:ef:a0:ac:bd:de:d2:ce:b7:33:1d:68:1b:35:75:3d:9a:
90:a9:8f:97:40:e6:08:d0:2e:30:d5:d5:f0:a7:c4:bd:46:7a:
55:ac:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:57:29 2025 by rpki-client