Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
File: O9MC-nouhmpnmxtglttnRToDq4Y.mft (raw, json)
Hash identifier: H1TInZX6mRxdSLZ+CPmWE65N5tfpI7cVx1Q2tqs26yU=
Subject key identifier: CF:84:74:5B:6F:09:29:8A:C8:E2:F8:0C:A0:DD:F4:2D:C6:00:C6:4D
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial: 09EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
Manifest number: 09D7
Signing time: Thu 30 Jan 2025 20:02:13 +0000
Manifest this update: Thu 30 Jan 2025 20:02:12 +0000
Manifest next update: Thu 06 Feb 2025 20:02:12 +0000
Files and hashes: 1: O9MC-nouhmpnmxtglttnRToDq4Y.crl (hash: JlOwVXYgE/yETSwxgYYZCyIoDFfRXowRBWRPH3hqGmI=)
2: 0791DE6034A511ED9D82D13BC4F9AE02.roa (hash: gOctjmkYOR8ziwDdEKAqJFY7unVPqTO+qQuiZZdjL1k=)
3: 62512E2C73D311EABC99D63AC4F9AE02.roa (hash: DFYge5dHCEqKdjq6qJwiRBDOxqQ6gIZRO7JP5sPeXVk=)
4: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (hash: zqNQDPCuYzDYo/nHe2BJbjMekLz1Fbx+26S+Qt9czd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Validity
Not Before: Jan 30 20:02:12 2025 GMT
Not After : Feb 6 20:02:12 2025 GMT
Subject: CN=679bdac5-fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:1f:5b:eb:c7:c0:77:3b:42:9c:92:2d:16:
a3:0c:f2:3c:cf:35:ee:19:38:17:df:60:fe:b8:b7:
a0:b8:04:f7:64:c6:a9:e7:5b:65:b6:90:63:16:b6:
7d:7f:05:41:1c:49:05:1a:a2:00:b7:80:63:10:2e:
31:cd:15:f6:d1:35:7e:c0:be:1e:3e:29:a2:26:13:
a0:7a:1a:97:23:45:ac:39:ee:92:bc:67:18:c6:3d:
06:19:38:bc:da:69:10:70:b4:80:dd:a3:80:54:48:
93:07:03:ef:14:32:de:ac:45:82:da:e7:46:b8:74:
d4:61:75:be:be:74:75:cc:66:90:01:96:b4:a5:7c:
31:05:1e:2a:8d:c5:cd:b8:c5:ec:0b:ed:c6:f0:8d:
4c:72:81:e7:bb:35:35:fc:61:76:79:c0:6d:34:0f:
1b:6f:fb:43:89:9e:b1:8c:71:e8:1c:40:65:e1:df:
75:42:e7:6f:21:47:65:44:ef:26:79:e9:fe:22:27:
6e:4f:a2:b3:30:3f:38:92:d5:33:40:88:1d:64:bd:
68:e2:39:92:ac:06:51:31:cc:ca:da:4a:c3:e3:f7:
58:b3:5e:e8:68:f6:33:69:6f:ca:94:da:00:23:72:
21:52:b3:f8:6c:ef:c7:f4:21:6e:6f:e9:65:f5:e9:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:74:5B:6F:09:29:8A:C8:E2:F8:0C:A0:DD:F4:2D:C6:00:C6:4D
X509v3 Authority Key Identifier:
keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:06:69:fb:e3:a2:ab:3c:48:7a:a5:86:7f:d1:b4:18:3e:1f:
09:e1:01:d1:07:a9:89:c5:c8:ac:4b:8f:4b:9f:95:3b:94:2a:
6c:49:23:0e:b9:2b:a8:db:67:6f:83:52:84:bc:64:e3:79:d5:
d8:b4:b6:1b:17:b6:1a:ad:59:0a:29:a1:49:c3:aa:b2:54:ed:
66:f9:fc:f3:3f:e7:24:24:fc:9b:f7:76:73:ad:e8:98:93:0d:
09:82:b2:f9:4f:e6:39:8f:f8:ae:cf:53:86:6c:ff:de:11:7d:
47:71:ed:14:aa:b1:8a:c1:8b:48:ed:7b:62:9a:c5:8d:f3:ca:
9e:c9:98:ce:3e:e1:49:d1:41:aa:f0:00:2c:d8:88:79:39:08:
3c:82:67:48:4d:b9:2e:ee:2b:ad:68:5e:3a:ca:1f:c6:8c:dd:
2d:ee:03:bc:69:22:88:37:dd:74:14:ab:20:57:75:f2:85:95:
5e:60:77:6e:f4:b3:14:5c:53:8b:e4:6a:63:63:20:22:5b:40:
08:36:21:ab:2e:26:dc:9c:e3:12:c2:96:b0:d9:b1:fd:fe:df:
8d:82:fc:d6:7e:47:57:7e:b2:30:ec:ce:81:1b:bb:dc:ab:4b:
06:3d:5d:2a:53:71:16:51:52:39:5d:97:2c:9b:3c:64:e8:ee:
ba:e0:6d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:54 2025 by rpki-client