Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json)
Hash identifier: evaJQVNbpmFWzYFyNOpr/VYY0hK26IdWmg9CJrz8FXY=
Subject key identifier: B4:AC:00:70:B2:F9:D2:78:AB:60:4A:51:6F:E7:94:80:F9:19:77:99
Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Certificate serial: 069E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
Manifest number: 0690
Signing time: Thu 30 Jan 2025 22:19:48 +0000
Manifest this update: Thu 30 Jan 2025 22:19:47 +0000
Manifest next update: Thu 06 Feb 2025 22:19:47 +0000
Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: lO7OfGqJtkUgux0lUs5TXxpfonwIg0kvT1ZzCtDceiI=)
2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: nGQeEW39Od+vQgXs87Jbi/bqrVd4uaNCNXUbjbZuGDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A
Validity
Not Before: Jan 30 22:19:47 2025 GMT
Not After : Feb 6 22:19:47 2025 GMT
Subject: CN=679bfb04-9b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:7c:fe:88:31:6b:af:78:8a:70:df:75:e2:
d4:c5:b8:9b:f4:b2:05:f5:3a:2b:5a:ec:42:5e:1f:
c0:23:98:14:98:d6:ad:12:c8:5f:87:3e:92:1a:14:
b9:d7:4c:b1:a9:0c:a0:9d:98:f9:85:08:00:91:91:
35:84:e6:91:03:18:59:5c:83:d4:2c:97:9a:0b:2f:
0e:84:b1:46:05:dd:29:ea:02:6b:03:cb:79:a4:c0:
d3:f9:4f:8b:7a:8f:74:f6:bc:c1:d1:d8:11:8e:17:
11:71:c9:8c:6a:7d:ad:db:64:f7:48:c6:c7:c8:d4:
60:f5:34:45:db:16:22:d8:9f:10:d7:16:a5:68:f7:
22:45:b0:a7:04:b3:d7:39:f7:89:69:3b:54:4d:6f:
68:75:04:d2:8f:9f:85:70:64:09:03:13:2c:b7:6f:
ff:b2:76:29:13:c4:e3:7a:7b:74:c9:f3:74:dc:06:
cc:86:24:9a:f3:de:17:29:7c:21:1a:a9:6b:c0:1e:
20:09:fb:ad:3b:47:79:03:0b:c0:3d:9c:c3:6b:de:
a8:0f:8c:ee:d2:d2:42:f3:55:eb:c9:83:c1:07:b8:
36:04:95:8b:21:a5:f8:28:cd:9c:41:88:75:b0:26:
01:d1:8b:54:95:6a:d5:af:9a:d6:46:12:73:75:9b:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:00:70:B2:F9:D2:78:AB:60:4A:51:6F:E7:94:80:F9:19:77:99
X509v3 Authority Key Identifier:
keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b3:8b:59:96:cf:39:83:f3:2e:4a:fd:23:55:50:57:c0:03:
48:d2:6d:4d:95:2c:2f:17:85:2f:d9:55:72:be:9b:0f:d5:24:
ba:98:c3:bd:20:b4:99:36:8c:92:cd:15:86:e1:fe:77:20:b0:
12:87:69:99:07:6a:8c:c0:2f:12:f3:c4:46:dc:b8:ea:17:5e:
95:e2:c7:f6:27:39:a9:1b:cc:9e:81:3c:f2:2c:63:8d:6e:e2:
fd:12:4e:eb:62:a4:9d:6a:3a:f2:e2:1d:5b:56:56:a0:3d:6d:
b5:e3:e8:91:b3:c3:4a:21:5f:38:f5:80:ee:16:c6:c2:93:e3:
cd:60:79:a8:2e:c8:36:c6:11:da:6d:a2:fb:c1:d2:82:ab:1e:
f3:4b:39:a8:cb:45:59:d7:79:53:21:60:6f:5a:fe:68:cf:4b:
93:eb:16:77:08:21:09:08:5a:f7:6d:01:aa:ee:c7:a7:1e:d1:
c6:09:83:02:16:7c:e9:12:28:0c:18:1d:da:45:75:ac:d9:7a:
30:f1:6d:52:e6:21:d9:4a:ee:29:84:84:20:2c:d6:79:10:48:
4e:11:c0:e6:20:1f:12:ab:b7:ec:23:e7:88:2a:53:2e:f6:3b:
f3:74:a7:a2:6b:c6:2f:d3:99:7b:a0:e9:89:d2:5e:16:df:9e:
3e:45:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:21 2025 by rpki-client