Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
File: ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft (raw, json)
Hash identifier: 28zK1Y6W4OdFU67DH9RCKK218KocyDUTkLOmf8rLHPA=
Subject key identifier: 0A:0A:91:4D:AC:5F:AF:0C:FD:47:19:16:71:AE:08:1E:5B:D6:0B:EC
Authority key identifier: A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
Certificate issuer: /CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
Manifest number: 01A9
Signing time: Fri 31 Jan 2025 02:29:23 +0000
Manifest this update: Fri 31 Jan 2025 02:29:22 +0000
Manifest next update: Fri 07 Feb 2025 02:29:22 +0000
Files and hashes: 1: ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl (hash: /we71lDUj7JEtrRqD2jO6PwABgSmKWzAzO4pjgmKaow=)
2: 0AFFF078577811ED959AC36FC4F9AE02.roa (hash: 2bOIvfXxT14VfBuLjn2fK1kMoqNHisqc/b7wGNY7+9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AC4/serialNumber=A337633E35919940BD729D912F3663158C267C36
Validity
Not Before: Jan 31 02:29:22 2025 GMT
Not After : Feb 7 02:29:22 2025 GMT
Subject: CN=679c3582-c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:91:b4:78:1e:fe:0e:d1:00:c5:c5:07:63:
91:34:2f:5d:79:78:58:d5:fe:0a:22:a9:34:a4:ef:
0d:be:75:e0:2b:ad:ca:3e:07:c6:29:65:eb:6b:e0:
2b:6b:2e:f9:a9:b8:2a:b6:3b:12:ec:7f:e6:ae:f8:
0f:ec:08:0d:1c:4b:b4:cf:c1:37:d1:3a:bf:3c:e9:
bd:57:49:1b:25:54:3c:57:ff:3c:6a:76:31:22:0f:
0d:75:26:48:b1:67:90:0a:f2:78:5e:6a:1a:27:83:
ac:f6:66:d1:ef:d0:cf:c2:59:3e:5e:83:f4:50:df:
ed:82:f8:4a:80:89:05:e6:14:ca:63:bd:32:9b:bc:
dc:20:c9:21:d6:b7:56:0b:90:39:70:22:73:41:5e:
f5:2b:00:84:65:b5:37:da:be:cb:22:36:cf:3c:e0:
02:f2:0c:11:02:a2:68:16:49:66:2b:a8:c7:11:c1:
be:2d:b0:11:ac:6a:4c:56:5f:50:5b:03:b4:9e:aa:
e0:89:33:28:b7:1d:b7:df:da:7e:f5:a1:ad:55:06:
09:80:93:14:b2:79:7f:4e:61:ba:88:92:cd:a9:95:
f2:f2:59:20:58:c1:3d:a6:8b:a9:64:23:d6:9e:f2:
f3:3d:c3:97:77:ba:c9:86:fd:c7:68:b4:7b:84:38:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:91:4D:AC:5F:AF:0C:FD:47:19:16:71:AE:08:1E:5B:D6:0B:EC
X509v3 Authority Key Identifier:
keyid:A3:37:63:3E:35:91:99:40:BD:72:9D:91:2F:36:63:15:8C:26:7C:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozdjPjWRmUC9cp2RLzZjFYwmfDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AC4/C8FE174C577511ED81F13B6FC4F9AE02/ozdjPjWRmUC9cp2RLzZjFYwmfDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:8f:3f:77:4d:04:8f:20:46:1f:db:83:1e:47:48:f0:54:
84:be:3d:76:0b:f3:15:8a:59:1f:13:55:69:41:72:b8:30:ca:
03:aa:f4:02:0b:9b:ca:db:57:a2:45:04:fc:94:86:0e:fb:18:
55:2d:e8:c7:99:58:13:8c:19:f2:e4:d1:be:a3:57:af:c4:d4:
f9:0c:79:87:e2:f2:c0:0c:20:05:83:27:54:7f:07:80:06:9d:
26:ee:bf:a7:37:61:9b:d4:2f:5f:48:2f:2a:e3:d0:e2:d7:6d:
0c:82:01:a8:40:16:dd:1c:da:17:db:8f:9a:e0:a5:39:9e:57:
d9:06:10:b5:8e:94:a9:1e:5c:0f:e6:11:ee:f0:f4:b4:eb:a6:
11:26:fb:b1:59:16:ff:c5:70:e1:c3:25:77:95:c1:23:f7:9b:
34:bc:6c:d5:ca:95:67:58:f6:10:71:aa:f1:13:14:c9:ff:03:
d2:f4:66:01:65:d2:0c:18:4b:de:0b:d2:d7:84:99:39:ba:27:
aa:9f:4f:d3:5d:d7:73:47:a9:f7:97:9e:00:b5:f2:75:ec:a9:
65:6f:3c:ff:44:f3:62:b0:6f:c3:a6:6e:7f:b2:ef:7c:cb:f2:
10:4d:b4:c5:22:3a:1c:53:50:7f:db:06:b9:97:b6:e7:14:56:
43:b1:1c:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhBQzQxMTAvBgNVBAUTKEEzMzc2MzNFMzU5MTk5NDBCRDcyOUQ5MTJGMzY2MzE1
OEMyNjdDMzYwHhcNMjUwMTMxMDIyOTIyWhcNMjUwMjA3MDIyOTIyWjAYMRYwFAYD
VQQDEw02NzljMzU4Mi1jOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKuRtHge/g7RAMXFB2ORNC9deXhY1f4KIqk0pO8NvnXgK63KPgfGKWXra+Ar
ay75qbgqtjsS7H/mrvgP7AgNHEu0z8E30Tq/POm9V0kbJVQ8V/88anYxIg8NdSZI
sWeQCvJ4XmoaJ4Os9mbR79DPwlk+XoP0UN/tgvhKgIkF5hTKY70ym7zcIMkh1rdW
C5A5cCJzQV71KwCEZbU32r7LIjbPPOAC8gwRAqJoFklmK6jHEcG+LbARrGpMVl9Q
WwO0nqrgiTMotx2339p+9aGtVQYJgJMUsnl/TmG6iJLNqZXy8lkgWME9poupZCPW
nvLzPcOXd7rJhv3HaLR7hDhvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoKkU2s
X68M/UcZFnGuCB5b1gvsMB8GA1UdIwQYMBaAFKM3Yz41kZlAvXKdkS82YxWMJnw2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEFDNC9DOEZFMTc0QzU3
NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1VQzljcDJSTHpaakZZd21m
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL296ZGpQaldSbVVDOWNwMlJMelpqRll3bWZEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEFDNC9DOEZFMTc0QzU3NzUxMUVEODFGMTNCNkZDNEY5QUUwMi9vemRqUGpXUm1V
QzljcDJSTHpaakZZd21mRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVsI8/d00EjyBGH9uDHkdI8FSEvj12C/MVilkfE1VpQXK4MMoDqvQC
C5vK21eiRQT8lIYO+xhVLejHmVgTjBny5NG+o1evxNT5DHmH4vLADCAFgydUfweA
Bp0m7r+nN2Gb1C9fSC8q49Di120MggGoQBbdHNoX24+a4KU5nlfZBhC1jpSpHlwP
5hHu8PS066YRJvuxWRb/xXDhwyV3lcEj95s0vGzVypVnWPYQcarxExTJ/wPS9GYB
ZdIMGEveC9LXhJk5uieqn0/TXddzR6n3l54AtfJ17Kllbzz/RPNisG/Dpm5/su98
y/IQTbTFIjocU1B/2wa5l7bnFFZDsRyq
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:07 2025 by rpki-client