Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier: JLbmMPOSWU1assRcwz87y+wynBW3oT6ATcGsa65vZkM=
Subject key identifier: DA:F7:D3:62:C6:A6:09:5A:67:95:B8:0C:CE:28:50:1D:5A:61:BB:64
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number: 03B5
Signing time: Sat 29 Mar 2025 00:56:49 +0000
Manifest this update: Sat 29 Mar 2025 00:56:49 +0000
Manifest next update: Sat 05 Apr 2025 00:56:49 +0000
Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: utHdVOh1i2XH9IOp6OfIHvJ8oaxuodCU5MfbUBWJ5lg=)
2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A
Validity
Not Before: Mar 29 00:56:49 2025 GMT
Not After : Apr 5 00:56:49 2025 GMT
Subject: CN=67e74551-4ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:5c:eb:b7:9e:0b:ea:be:6a:00:9c:3a:e7:
a0:60:03:45:22:4f:0e:97:00:0f:3a:fd:a2:bc:83:
b1:c9:73:8e:fe:30:c0:70:2f:3b:60:8e:25:6e:3f:
74:b5:2a:52:aa:e3:6f:85:16:38:6f:9a:64:9a:b3:
71:c5:6c:b6:b0:77:cc:f1:91:99:85:3b:d1:28:8d:
40:ad:b5:ab:de:ac:0a:d8:79:1d:81:ac:97:fe:2a:
84:6d:2b:92:c4:77:98:37:f0:39:a1:ff:69:39:04:
7a:32:12:32:4a:36:62:ea:b6:04:b5:64:c0:45:b4:
d1:6f:88:75:11:46:fa:8e:bb:41:0e:73:e8:65:76:
a8:05:d1:bf:ec:7c:f1:08:61:33:90:7e:26:f3:77:
3d:f4:0f:44:c1:5d:a4:13:e4:53:c5:19:95:9a:59:
db:d0:6d:59:c8:9e:d6:ff:45:df:4c:0c:f0:3c:b9:
85:0a:3a:a0:fe:3a:92:c8:84:6b:25:77:53:d2:45:
96:83:d1:6e:51:58:ce:d3:ab:fd:c6:31:df:db:43:
ab:77:9e:ca:28:a7:25:ef:d7:f5:f7:ec:60:ce:25:
f3:56:c7:4a:38:00:20:29:0b:ee:84:41:13:17:63:
eb:72:ce:f9:ce:21:50:99:60:aa:c0:4c:fd:f9:18:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:D3:62:C6:A6:09:5A:67:95:B8:0C:CE:28:50:1D:5A:61:BB:64
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:eb:08:ae:97:1d:8b:06:aa:f6:4b:88:bb:46:fc:b1:d3:4a:
d5:c8:76:84:b8:da:4f:97:f9:c5:33:ee:47:52:bb:8d:d8:4e:
2a:cb:d4:f8:31:e0:34:02:80:99:74:94:cd:1e:70:6f:06:ca:
45:b0:47:7d:8f:e7:16:27:e5:a1:23:0f:44:9f:cb:77:fc:86:
84:45:b3:e9:2f:59:28:1d:53:83:3a:f6:8e:cb:be:4a:61:44:
a0:21:26:21:af:a3:30:8a:b9:e4:d1:6b:36:ae:20:63:0d:78:
68:7f:96:6f:04:f7:dd:d2:f6:b9:35:12:cf:c6:35:9e:45:cc:
4a:cc:21:7c:37:af:68:3d:46:43:d7:9c:d7:af:60:ca:0d:eb:
8b:41:e3:76:e3:5e:7e:47:ba:04:8a:c1:01:1e:36:86:05:f9:
c0:9b:96:7c:9f:04:c2:99:37:f7:35:0a:30:e1:9a:43:58:0d:
ff:ce:1b:5c:1d:7b:6b:4e:06:4e:7b:c0:68:a1:dd:a6:23:6d:
8b:b7:af:d7:c0:69:9c:2a:4f:24:9e:01:dd:93:ca:c3:d4:09:
8d:9b:df:0f:ab:28:31:d8:1c:a0:93:ba:60:b8:0b:31:d4:f5:
8e:a4:f6:7d:01:3c:04:08:bf:95:03:f5:d5:af:0e:b9:1c:15:
36:de:05:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:24:28 2025 by rpki-client