Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier: sXp2t6VFLxOaBeLE7i9PWIOxRzCnWV2tAsQZn9NWoeE=
Subject key identifier: A3:23:08:08:B1:D1:1D:86:D6:D2:E4:08:71:07:4C:CD:04:70:DB:49
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number: A6
Signing time: Sat 29 Mar 2025 03:23:25 +0000
Manifest this update: Sat 29 Mar 2025 03:23:25 +0000
Manifest next update: Sat 05 Apr 2025 03:23:25 +0000
Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: OLfSE1EVsXkMwlULlKoRYhUtkPHFAgISnqijV4cIqxU=)
2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: mhGYiG0WeDb47Y1flcMHTXRygvaWwxscynwAYyWQgq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520
Validity
Not Before: Mar 29 03:23:25 2025 GMT
Not After : Apr 5 03:23:25 2025 GMT
Subject: CN=67e767ad-1a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:71:2d:85:f6:94:12:ed:63:04:b8:b9:3a:
47:99:96:b1:cb:b0:8e:ae:75:b0:b2:ef:19:81:59:
95:35:d4:e4:de:6e:12:f2:7e:d5:19:4d:73:10:f8:
43:c4:05:a1:2c:1e:99:bc:94:7d:83:60:79:38:07:
9b:62:c0:47:63:46:8a:b6:33:66:0d:8c:d2:b0:09:
dd:45:7e:33:49:d4:2e:6d:20:3c:1d:e6:74:8d:1c:
e5:2f:dd:5b:1d:23:43:c0:96:92:2e:04:7e:d8:31:
10:05:d0:f3:6a:1b:0b:b9:03:47:95:f9:c9:5b:d5:
cd:05:82:d8:5d:45:89:bf:6d:d6:89:ec:59:19:f3:
9d:df:5c:04:e6:71:1e:a3:f7:d1:69:ee:b0:7b:fb:
91:81:62:c8:e1:4e:99:71:b7:95:91:d4:4b:aa:6d:
8e:b7:ee:a0:a7:68:55:df:4f:3f:2f:80:13:c4:00:
76:6e:55:cd:8a:94:cb:a8:f2:f9:ac:0b:93:b3:05:
3c:cd:91:39:a3:58:83:bf:ca:30:60:b9:fa:c5:3d:
60:c9:3a:90:b0:44:2d:01:a8:1a:68:be:d3:df:43:
8a:a5:87:b6:22:e3:3b:19:59:f7:1e:30:fd:2d:3d:
96:11:7c:3a:c7:f8:c9:c7:6a:f9:4e:13:a2:e9:2f:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:08:08:B1:D1:1D:86:D6:D2:E4:08:71:07:4C:CD:04:70:DB:49
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:aa:6f:b6:56:e2:c9:5a:19:73:43:99:b7:2c:fb:c3:6b:a7:
4f:6e:02:33:a2:40:64:32:31:fa:45:68:ce:8c:30:b1:9c:97:
30:9f:13:e9:73:af:1d:54:91:6c:18:f5:61:25:24:fc:2b:cc:
87:10:29:60:19:7f:28:fd:44:ae:af:fa:8c:00:f4:7a:ce:4b:
7c:cd:ac:fe:2e:10:8e:7c:76:9e:41:de:4f:dc:2b:11:42:15:
60:7c:61:a5:57:be:26:e1:84:1b:4d:7f:40:ac:1d:54:48:df:
70:e4:57:fb:8c:91:14:d3:d8:1b:bd:ef:e9:db:56:c7:2f:8a:
2a:4b:c8:ec:ee:0f:3e:da:99:95:f5:86:48:e3:a1:a3:81:16:
26:8d:8e:3d:e4:c0:db:bc:cc:1b:ec:1a:6a:c2:6c:35:71:d9:
2e:df:13:1f:2c:67:b4:2e:2f:82:cb:76:da:af:71:ab:02:6e:
1f:cf:21:89:07:2d:7a:f5:29:ee:fc:e8:15:81:13:15:6e:9f:
ad:03:75:ae:76:26:8f:81:26:7b:d5:dc:58:7d:d0:92:b4:b4:
10:90:82:23:52:83:59:fe:ff:ff:f9:d9:e2:bc:22:9c:34:04:
b9:cd:af:79:c7:bc:5f:68:a4:39:1c:93:f6:31:ae:d4:d1:e3:
2b:47:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:50 2025 by rpki-client