Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json)
Hash identifier: am4vdrnmoPVXkNP7kkNdcQR/e6GHciaN1bQSVpySIjc=
Subject key identifier: 08:76:51:55:9B:B6:5E:BD:5B:29:AA:E2:94:C7:5B:AB:1B:ED:CE:78
Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Certificate serial: 04B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
Manifest number: 04B2
Signing time: Thu 30 Jan 2025 23:57:23 +0000
Manifest this update: Thu 30 Jan 2025 23:57:23 +0000
Manifest next update: Thu 06 Feb 2025 23:57:23 +0000
Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: XK/kYAEcyhHdE3CtTnxydB8hctI2MShzEyZkpntKWbY=)
2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: jQrr/0vTs0drz7C/43ZuoTAB+9+rBNBWg+VJTfcqQK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1207 (0x4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Validity
Not Before: Jan 30 23:57:23 2025 GMT
Not After : Feb 6 23:57:23 2025 GMT
Subject: CN=679c11e3-ac54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:9d:f3:cd:a5:53:eb:b5:00:e1:8d:c6:8c:
5e:1f:ca:86:b5:e6:01:2b:f4:c4:6c:06:ca:2f:40:
3d:1a:24:27:71:d0:d3:a7:a1:60:9e:87:cb:b2:ac:
a5:2f:b6:57:a4:e8:2b:01:07:a9:d0:f1:56:44:74:
ee:27:f7:e3:a8:6a:8e:6d:64:61:69:2c:51:69:49:
6e:62:88:b1:fd:64:d7:4d:5d:ea:82:cb:65:e7:b9:
7b:ab:c1:3a:36:6b:b2:25:eb:40:c0:81:4a:54:3b:
ef:6a:ae:78:7e:f7:72:64:95:95:7f:84:10:a2:7c:
db:6e:f6:12:3a:8f:d4:00:dd:f4:a0:f3:46:3c:ac:
02:69:39:9b:f4:49:4a:97:1f:43:a9:93:33:88:c4:
68:94:6b:8a:02:3e:b7:6c:4c:c5:18:d0:60:86:cf:
9e:64:27:17:18:04:97:d5:07:09:d4:ad:1a:9f:6a:
c5:8d:94:85:8f:79:b9:5c:45:77:5a:3a:57:4e:d6:
e9:16:4d:80:fd:e5:ac:a8:46:52:76:10:9b:71:dc:
37:29:44:72:ae:1b:b5:cc:5b:74:de:84:b7:92:ea:
58:a3:09:8e:ab:bf:aa:de:f8:e8:c0:a8:3a:71:60:
03:98:b4:03:27:19:59:48:15:a6:2a:4b:be:c2:6b:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:51:55:9B:B6:5E:BD:5B:29:AA:E2:94:C7:5B:AB:1B:ED:CE:78
X509v3 Authority Key Identifier:
keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a1:5f:4c:35:95:9e:a5:ef:4c:d6:d6:0b:a0:74:86:5e:4f:
24:8f:05:e0:29:3f:aa:84:f4:f6:2a:39:67:bc:0c:f5:68:07:
c0:e1:0b:0d:4e:9e:b3:05:b7:49:be:73:bc:b2:8a:10:5e:3a:
05:38:bc:ab:2d:9f:d6:15:e5:22:9d:ad:c2:2e:d1:7e:71:0d:
97:77:69:e4:c7:61:c7:fa:81:54:a2:67:50:85:a6:2c:1e:59:
7c:b4:b1:15:1f:d7:7a:e1:5a:7d:d5:43:ae:e1:c8:b1:c9:ae:
ab:82:6c:f0:cb:14:df:f7:12:33:cc:05:40:04:f5:db:9b:93:
be:95:da:fe:c5:a0:ae:56:ca:29:4c:22:58:bd:57:3c:e0:57:
ad:95:5f:b7:87:f0:93:2e:4c:d8:92:74:a1:86:01:27:0b:12:
f6:1f:89:4b:9b:eb:3f:00:60:e1:f1:84:d5:99:b6:3d:ef:a1:
b9:06:92:f3:5f:79:69:46:da:fd:30:c5:39:df:a5:7f:69:de:
a1:84:59:e5:5c:b0:de:36:50:c5:d1:23:7b:84:e7:a0:d2:44:
7e:1d:6a:8c:67:2d:8e:a4:93:e7:7a:40:44:f9:ba:a3:f3:d4:
53:69:9c:e5:54:05:37:b9:5f:ad:cb:6a:e9:d1:60:aa:3e:3b:
fc:1a:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:35 2025 by rpki-client