Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File: oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier: iRC8yXVq4X07yuUGCuYa6OriEblmxf9Bde4qd7JmyRM=
Subject key identifier: 3E:2A:A9:D3:18:00:D3:9B:D1:4E:46:CB:9C:D3:7C:2F:A9:01:16:9D
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer: /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial: 03A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number: 03A2
Signing time: Sat 29 Mar 2025 01:00:01 +0000
Manifest this update: Sat 29 Mar 2025 01:00:00 +0000
Manifest next update: Sat 05 Apr 2025 01:00:00 +0000
Files and hashes: 1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: lryZqfBMw2LdAs0N+///MM2brO3Xm5wMFMtKsHGU3kc=)
2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: C6Zw9H9pNGGZB/RXCN/WX9ohjV5fQUJIiw4vkNV68w0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7672
Validity
Not Before: Mar 29 01:00:00 2025 GMT
Not After : Apr 5 01:00:00 2025 GMT
Subject: CN=67e74610-cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:c6:5a:9a:a8:32:f8:f0:ff:fb:ac:91:1d:
d7:0e:4d:7f:35:83:03:c0:9c:c8:73:81:f1:8d:2a:
c0:88:0e:7c:42:e4:c9:76:a8:61:91:22:04:c3:4e:
ef:89:9a:ff:75:e4:0f:1b:5f:2a:b4:ad:7d:e5:32:
1b:f0:35:50:09:68:17:60:e3:b3:2d:fc:57:1a:5f:
b2:ae:53:73:3a:cd:53:55:91:8b:b5:3d:61:f1:d6:
c1:b1:c6:29:fa:22:45:43:24:02:22:86:d3:76:96:
19:4a:6e:15:26:2d:1f:9f:c2:a4:58:7d:3d:cc:44:
24:93:94:d4:a3:f7:34:13:bc:e8:df:24:ba:1a:92:
4f:84:5e:37:fd:ae:03:99:1b:bf:1b:25:5d:9e:7f:
92:3c:a8:c6:a6:5b:14:35:dc:95:ff:07:61:db:3d:
2e:5f:b2:16:54:f3:1e:f2:48:8f:91:3b:f9:ad:b1:
0b:19:63:87:b0:63:2c:64:d6:5f:9b:ca:a3:26:45:
f9:0e:92:9c:33:5a:70:b1:81:fc:d4:35:b5:e1:aa:
4c:7b:66:2a:f0:24:f8:a9:34:26:3f:d7:86:32:56:
2b:9f:af:fe:fe:ea:a1:02:b4:25:7e:56:fb:24:f1:
8c:4c:5c:cb:9d:c7:1b:d9:fb:4e:f1:61:4a:cd:58:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:A9:D3:18:00:D3:9B:D1:4E:46:CB:9C:D3:7C:2F:A9:01:16:9D
X509v3 Authority Key Identifier:
keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ab:05:4c:99:38:83:e6:0a:52:57:d2:f9:96:3e:16:74:23:
9f:da:6e:43:81:c4:70:a7:6e:d4:c4:7b:06:20:cc:5a:f8:2f:
36:22:37:a8:3e:b5:75:e9:13:22:12:22:7c:21:d2:48:a7:5e:
86:1b:db:5c:75:81:bf:4d:bf:e1:18:1a:cd:af:64:1f:8d:6e:
20:63:81:98:73:ca:a0:40:78:f9:1f:1d:3c:bc:83:09:7c:94:
c1:29:08:aa:2d:1e:67:18:a1:36:80:99:79:5e:af:8f:40:6a:
13:fa:db:56:8f:f0:aa:4a:dc:f6:e4:75:d4:5b:24:4b:d8:42:
34:c8:7e:63:21:dd:12:f2:b5:42:95:f5:2c:17:42:78:a6:d4:
0c:10:68:51:06:81:ed:21:c8:d0:ce:f5:61:f5:c4:0c:af:4b:
07:1b:aa:88:60:93:f0:f0:7f:69:04:51:fa:53:67:67:8f:f6:
1f:25:10:24:c7:13:b7:db:7d:87:52:8d:ca:86:3a:2e:d5:b5:
c5:a9:23:40:5e:00:3b:df:73:5a:50:3e:ff:85:da:d4:77:a1:
e9:a8:0f:4d:09:1e:d2:55:04:43:f2:1b:98:45:05:4a:f7:17:
bc:d4:b1:29:22:7f:5e:c5:f1:9d:38:07:1d:80:53:dd:81:aa:
d4:68:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:22:01 2025 by rpki-client