Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
File: uOlsag2VSKKgQMvnGZdFun2x7Sg.mft (raw, json)
Hash identifier: cedGZ5FyZ/Y36AhnP+mR/vpeYsMQErJ28MgAwxoW6I4=
Subject key identifier: 73:B2:D6:C6:A0:EE:AA:F9:71:26:31:2F:FC:B5:F6:3C:E5:CD:61:B2
Authority key identifier: B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
Certificate issuer: /CN=A91B2D29/serialNumber=B8E96C6A0D9548A2A040CBE7199745BA7DB1ED28
Certificate serial: 0992
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
Manifest number: 4619
Signing time: Fri 28 Mar 2025 15:53:41 +0000
Manifest this update: Fri 28 Mar 2025 15:53:40 +0000
Manifest next update: Fri 04 Apr 2025 15:53:40 +0000
Files and hashes: 1: uOlsag2VSKKgQMvnGZdFun2x7Sg.crl (hash: 9jaBYwM9WxeCZetZwyIFm6ccd50Pf2swU7iKuXq7gy4=)
2: 7CEC1452E17E11ECAB421316C4F9AE02.roa (hash: HQMuxFH+p0cd5TxCsDJ5OnEAYnLT5yZN5O7uVIpfgdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29
Validity
Not Before: Mar 28 15:53:40 2025 GMT
Not After : Apr 4 15:53:40 2025 GMT
Subject: CN=67e6c604-0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:54:65:59:e1:c4:36:da:12:54:4e:dc:b8:
de:b1:20:25:8d:59:6a:e8:ae:2f:b8:f9:df:5e:05:
21:ce:d0:43:24:2d:c4:40:73:3d:56:0b:4d:90:e9:
70:d3:5e:07:f3:2f:85:3f:71:05:c2:a2:c9:a4:44:
b6:f0:bc:57:3f:cb:0f:d7:42:b3:50:bc:17:f9:d5:
9d:dd:d6:a1:11:7d:fb:51:18:5d:79:96:ce:94:39:
d5:bd:b6:d8:ff:ea:5b:6c:27:7a:95:b4:a9:2a:35:
b7:91:56:d7:0f:e6:cd:07:8a:ec:1c:d3:2a:12:25:
62:cd:74:5a:93:42:d3:9f:cd:9a:0a:c0:bf:1f:98:
79:ef:65:c3:be:d5:02:b3:f1:ca:c5:a9:32:f5:92:
e2:e8:a0:9b:b3:6b:59:2a:7f:39:41:a1:0e:e1:e2:
5f:8d:0f:09:9f:2d:6e:8c:61:a8:f3:d4:1f:a8:db:
42:2f:56:2d:98:8d:2d:27:aa:19:39:c0:ea:27:34:
78:96:4c:85:c4:85:38:2f:d3:6f:5a:22:4b:d5:a2:
c9:56:48:96:61:00:c4:ab:34:b7:dc:09:01:7c:1c:
1d:fe:ab:58:be:f0:f9:10:6d:cc:79:52:60:34:65:
9a:6e:25:25:5c:01:f3:e8:fd:84:0f:b6:19:af:c8:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B2:D6:C6:A0:EE:AA:F9:71:26:31:2F:FC:B5:F6:3C:E5:CD:61:B2
X509v3 Authority Key Identifier:
keyid:B8:E9:6C:6A:0D:95:48:A2:A0:40:CB:E7:19:97:45:BA:7D:B1:ED:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOlsag2VSKKgQMvnGZdFun2x7Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/uOlsag2VSKKgQMvnGZdFun2x7Sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:02:ba:41:86:37:3f:ff:53:b4:93:2d:0a:46:4a:18:3b:fe:
fa:af:57:10:78:c3:7c:e4:95:9d:9d:b2:fb:45:5e:70:54:19:
01:96:9e:2f:a5:c1:ff:dd:ce:f9:60:0c:04:a1:38:58:90:36:
ed:1b:20:82:b9:07:4b:22:3a:79:2d:a3:a1:9a:51:d5:e5:9f:
eb:a4:d4:b2:9e:48:c2:0c:77:d5:80:00:d1:19:05:a4:41:19:
7d:d6:b2:3a:70:81:4d:d1:9f:43:2e:92:da:a0:62:25:41:94:
45:56:85:ff:a3:52:6f:17:17:92:77:ad:65:f8:fd:ca:a2:61:
fd:d4:5e:78:8f:94:6a:c0:41:2b:19:e9:cf:c0:6c:39:26:0d:
d5:0c:6b:3d:4b:31:30:db:c4:44:9e:f2:51:29:1b:1b:30:59:
23:7b:a0:8c:62:61:23:cd:b4:fe:7c:89:c2:1c:59:64:74:4e:
a8:75:76:7e:38:16:ba:44:5d:51:34:a9:44:8d:65:4d:0e:59:
e5:e5:66:f2:b7:47:48:d7:f7:76:e3:24:04:12:ec:82:b5:d2:
bd:f0:17:d0:eb:da:74:b6:9c:98:6a:9d:5a:61:bd:d3:5f:67:
2a:2a:7d:c1:e8:76:da:a0:52:83:aa:4b:e3:81:cc:55:33:65:
61:53:fa:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJEMjkxMTAvBgNVBAUTKEI4RTk2QzZBMEQ5NTQ4QTJBMDQwQ0JFNzE5OTc0NUJB
N0RCMUVEMjgwHhcNMjUwMzI4MTU1MzQwWhcNMjUwNDA0MTU1MzQwWjAYMRYwFAYD
VQQDEw02N2U2YzYwNC0wOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKRUZVnhxDbaElRO3LjesSAljVlq6K4vuPnfXgUhztBDJC3EQHM9VgtNkOlw
014H8y+FP3EFwqLJpES28LxXP8sP10KzULwX+dWd3dahEX37URhdeZbOlDnVvbbY
/+pbbCd6lbSpKjW3kVbXD+bNB4rsHNMqEiVizXRak0LTn82aCsC/H5h572XDvtUC
s/HKxaky9ZLi6KCbs2tZKn85QaEO4eJfjQ8Jny1ujGGo89QfqNtCL1YtmI0tJ6oZ
OcDqJzR4lkyFxIU4L9NvWiJL1aLJVkiWYQDEqzS33AkBfBwd/qtYvvD5EG3MeVJg
NGWabiUlXAHz6P2ED7YZr8iXCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOy1sag
7qr5cSYxL/y19jzlzWGyMB8GA1UdIwQYMBaAFLjpbGoNlUiioEDL5xmXRbp9se0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1
MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNLS2dRTXZuR1pkRnVuMng3
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VPbHNhZzJWU0tLZ1FNdm5HWmRGdW4yeDdTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi91T2xzYWcyVlNL
S2dRTXZuR1pkRnVuMng3U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5ArpBhjc//1O0ky0KRkoYO/76r1cQeMN85JWdnbL7RV5wVBkBlp4v
pcH/3c75YAwEoThYkDbtGyCCuQdLIjp5LaOhmlHV5Z/rpNSynkjCDHfVgADRGQWk
QRl91rI6cIFN0Z9DLpLaoGIlQZRFVoX/o1JvFxeSd61l+P3KomH91F54j5RqwEEr
GenPwGw5Jg3VDGs9SzEw28REnvJRKRsbMFkje6CMYmEjzbT+fInCHFlkdE6odXZ+
OBa6RF1RNKlEjWVNDlnl5Wbyt0dI1/d24yQEEuyCtdK98BfQ69p0tpyYap1aYb3T
X2cqKn3B6HbaoFKDqkvjgcxVM2VhU/o2
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:29 2025 by rpki-client