Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft
File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json)
Hash identifier: aLApt0+u7ZBrycX+WSqDeM9F3+fveiB9nHhC0FtPDVQ=
Subject key identifier: A7:A8:37:3C:AC:AC:6B:69:EB:CC:AD:88:52:A0:90:36:22:74:7B:D0
Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D
Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D
Certificate serial: 0435
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft
Manifest number: 0422
Signing time: Fri 31 Jan 2025 00:30:30 +0000
Manifest this update: Fri 31 Jan 2025 00:30:30 +0000
Manifest next update: Fri 07 Feb 2025 00:30:30 +0000
Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: NpbUA2JpjYLnIHFIGbaeuL9viiCthjuo+g8mRnUVeLA=)
2: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: p5RWbmc3OrbusuGd87uXwNNKECyHXGRqb7DFbO3Zzjc=)
3: 451AF9F2E3DC11ECB9410B43C4F9AE02.roa (hash: PvyXkvk9rsG65qDLSBUO/zxV1I1w1ViEmt67rzLWH3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D
Validity
Not Before: Jan 31 00:30:30 2025 GMT
Not After : Feb 7 00:30:30 2025 GMT
Subject: CN=679c19a6-3d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:54:a5:be:20:d6:7e:67:7c:4a:b5:72:e1:
5a:09:0c:a6:6e:7a:3e:31:21:5e:a0:78:ac:85:16:
3b:58:f3:70:8f:cd:ac:06:66:f0:c6:7d:f4:91:e7:
0d:26:24:ea:cf:20:8e:04:cb:52:62:6e:47:e1:ac:
1c:15:b3:62:88:ae:e2:7d:ed:6b:ab:5f:54:99:65:
94:a9:ac:7b:c3:7e:c7:08:b6:98:26:bd:88:9b:74:
67:9a:08:73:6a:36:da:36:f0:12:24:b2:cb:51:4b:
3b:ea:1e:47:1b:69:0b:8c:4d:da:8b:3c:8a:dd:3e:
3e:fc:4f:79:ca:e3:0a:b3:79:93:6d:5f:4c:ec:dd:
95:73:52:4f:57:71:ad:ed:a3:c5:2f:b1:e7:4a:ae:
b6:bf:9a:e6:5c:02:e0:c9:ef:22:29:69:cf:39:8e:
a6:80:b7:c1:d9:37:24:65:76:23:02:32:92:b8:2e:
28:11:d4:48:b4:1a:61:31:ae:c7:80:4a:7f:33:ea:
a6:f2:03:57:d0:7c:0c:22:cc:e5:13:51:6c:b5:c7:
a5:db:8e:38:f0:30:e7:54:f9:7d:21:7e:85:5e:3b:
bb:34:57:44:e1:ac:8e:e7:69:bf:db:07:c0:a8:25:
df:33:4d:1f:82:f1:ee:a6:5b:75:2a:e3:8d:ee:a2:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:37:3C:AC:AC:6B:69:EB:CC:AD:88:52:A0:90:36:22:74:7B:D0
X509v3 Authority Key Identifier:
keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:1d:88:de:5f:f2:0a:ba:c1:fe:b3:12:69:1f:aa:9d:d1:
f7:45:bc:58:0a:09:b4:f8:a5:f1:91:a7:73:96:fb:05:33:6d:
88:51:64:ce:7f:11:68:97:6a:8d:4f:0d:9f:e8:c5:af:24:ed:
79:2a:56:a2:d4:76:d1:48:ba:42:40:78:de:d4:02:b2:55:7d:
d8:42:76:e5:10:76:13:25:a1:b0:9d:b9:8f:df:3a:b8:2a:50:
f5:ce:ff:e7:3c:f2:c2:da:77:35:5e:d5:07:d7:ec:75:f5:e2:
14:22:a8:f0:2c:c9:be:a3:ab:43:47:b3:21:a3:90:b9:c5:67:
ef:fd:14:09:fe:06:d1:43:a8:23:36:3d:fc:8a:00:f1:29:aa:
2e:39:92:c9:70:66:ba:11:aa:cc:63:cd:1c:13:43:ce:7b:52:
13:2b:25:7a:f3:f2:4f:7c:28:55:8a:3b:70:ef:42:1a:42:28:
8b:c9:be:7c:b7:20:55:9c:18:00:12:dc:66:9e:7b:b5:19:6f:
19:87:04:41:33:69:cd:c4:6d:70:d1:de:80:8f:2e:7b:e5:bc:
75:e3:4d:c0:53:1e:b6:0b:91:b8:21:c6:78:1f:b8:ce:1a:e2:
40:ca:e6:2d:c9:7e:c1:c9:1e:4e:35:a9:5f:1e:a2:70:8b:a6:
11:d7:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:37:13 2025 by rpki-client