Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
File: oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json)
Hash identifier: h8WakuVA4FFRxutR1kKpqebNTXieqjWOVakY1T7gbag=
Subject key identifier: 11:A8:AE:96:BA:7C:56:FB:38:8E:7F:01:F4:07:24:75:11:25:A8:C4
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Certificate issuer: /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial: 07A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
Manifest number: 0799
Signing time: Thu 30 Jan 2025 21:12:15 +0000
Manifest this update: Thu 30 Jan 2025 21:12:15 +0000
Manifest next update: Thu 06 Feb 2025 21:12:15 +0000
Files and hashes: 1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: MYMbieoaQXegOq2kUkZC0qIRKfhUumVpRss3s78x45g=)
2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D3ma4u6sODLuLAngk8FcCD8+uVZql4Y+2zbRzUVe9cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Validity
Not Before: Jan 30 21:12:15 2025 GMT
Not After : Feb 6 21:12:15 2025 GMT
Subject: CN=679beb2f-f3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:04:7d:79:e0:f2:41:98:77:60:77:cf:9a:
62:3d:4e:e3:19:b4:62:5d:f2:71:d0:68:30:8c:6f:
af:11:f8:8a:ae:a9:20:c7:ff:00:c6:df:b0:2c:f3:
2c:76:b3:47:94:c6:73:03:71:60:f6:44:67:1a:93:
b6:91:43:39:d7:50:88:30:22:4f:1f:5d:df:30:1a:
12:c1:8c:c9:4d:01:1e:70:80:9f:5d:74:12:c4:e7:
8c:81:78:1e:a4:e2:a0:18:33:37:e4:ed:e9:eb:01:
52:2f:db:3f:46:c2:e0:fa:db:94:d3:64:2a:13:e0:
b3:07:cc:66:85:01:fd:91:4a:d7:7b:91:b4:97:54:
7e:74:33:7c:0b:49:43:fb:e1:0c:1a:41:cc:c4:cd:
d2:88:dd:cb:77:ad:78:68:c1:98:41:f4:51:3c:33:
f1:c0:29:b0:c5:63:83:a5:01:fd:40:70:4d:ff:a6:
fc:76:a5:f3:a9:06:04:33:39:05:4e:b2:48:f3:da:
f1:2e:d0:19:c1:b7:4c:cc:5a:65:7a:be:ff:f6:d4:
37:16:f7:d5:0a:11:81:bb:6f:ba:59:d0:91:c5:50:
6b:46:8d:cf:91:92:07:d2:37:99:68:06:d0:f2:35:
75:99:19:2c:71:03:56:41:80:62:a1:fe:98:dc:07:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:AE:96:BA:7C:56:FB:38:8E:7F:01:F4:07:24:75:11:25:A8:C4
X509v3 Authority Key Identifier:
keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:5d:8b:37:cc:05:81:53:6a:e0:71:19:63:60:6b:9a:bc:e0:
e9:71:f2:3b:65:71:ed:95:26:62:12:9a:45:e3:45:52:14:c7:
7b:7c:2f:43:2f:81:ba:d0:2b:5e:ef:06:14:5b:93:72:f4:dd:
09:11:26:99:72:25:59:f4:13:8a:c5:74:8a:1b:f0:d5:78:6a:
5c:ba:ef:d0:0f:d0:46:c1:bf:e6:f6:a4:92:f9:2c:da:f4:6c:
bb:b8:8e:74:3d:80:2a:f9:0d:ac:0c:f6:4b:0b:d5:2a:e2:00:
3d:eb:30:12:3c:48:75:06:1f:53:4f:80:37:d2:c6:65:ae:63:
dd:81:56:b7:bb:7b:42:48:1f:3a:ac:d8:8c:61:c3:50:79:74:
88:55:02:7e:47:e2:5f:ae:f5:28:90:23:2d:86:37:26:14:3e:
3d:10:ca:fa:32:de:cd:2e:de:08:0a:b7:50:d8:00:3a:d0:57:
7c:5d:f6:14:ea:ad:6a:8d:04:b4:fd:2e:45:89:f9:ee:93:3f:
02:1b:e3:81:2f:92:be:07:21:ec:d4:1b:43:61:83:fd:0b:5f:
de:09:7f:dd:2e:9d:e9:8f:3d:2b:85:03:6b:56:eb:aa:d4:dc:
95:c9:78:31:26:72:63:b1:6e:21:8e:7c:07:b1:ab:44:a6:b6:
08:5c:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:02 2025 by rpki-client