Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
File: OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft (raw, json)
Hash identifier: nkKjsbzDnPGGRvOzGaIlsKkFlosmDlR05GdmneQeWP8=
Subject key identifier: EB:F5:BA:FA:E6:5C:C8:8E:57:CB:A0:88:B6:AB:61:F3:C6:25:02:C1
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Certificate issuer: /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial: 03C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
Manifest number: 03BA
Signing time: Fri 31 Jan 2025 00:44:02 +0000
Manifest this update: Fri 31 Jan 2025 00:44:01 +0000
Manifest next update: Fri 07 Feb 2025 00:44:01 +0000
Files and hashes: 1: OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl (hash: aeW73QzXPAkmB4fF1Jap9wF5XyWTsU1E+Ai3OjYHYnU=)
2: F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (hash: 17t3m0KvoRjfHzLmSGQMixJ4h1po9W3fjkqykP9EfmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961 (0x3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Validity
Not Before: Jan 31 00:44:01 2025 GMT
Not After : Feb 7 00:44:01 2025 GMT
Subject: CN=679c1cd1-f800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:b3:4f:96:6d:60:34:1f:68:63:d9:5d:0e:
65:45:4d:fb:ee:0c:d8:e7:02:94:70:1f:b5:e4:a8:
0a:f8:8e:b6:83:aa:9b:4c:85:91:d6:d7:4d:66:0b:
eb:9b:8e:7c:1c:03:4b:c3:a7:12:ba:38:ab:41:e3:
3f:0e:5c:2f:3b:09:fe:ed:27:f1:24:cc:5d:99:f8:
f0:6b:c7:7a:68:2f:a0:88:af:eb:41:bb:34:58:29:
64:73:2f:23:a4:f4:e6:66:2c:51:f9:db:e1:94:64:
f2:93:ff:f2:00:f0:7e:5d:06:bc:0e:db:1e:b7:c2:
0f:29:ab:2c:b0:b9:e6:e6:14:1a:99:76:af:61:75:
18:05:ed:3f:9e:f1:29:8e:24:6a:d8:92:19:8e:b0:
3b:d4:42:50:7e:b9:d2:62:8d:e2:18:af:e6:e6:bc:
a1:43:1f:50:d3:d9:f2:0f:89:e9:5a:42:53:ae:cb:
50:6d:c1:28:9f:6a:4e:f3:04:91:e5:5a:19:1c:60:
bd:29:72:8a:81:aa:54:4d:46:1a:b1:f4:07:83:b5:
18:40:21:33:35:81:ae:94:09:59:5b:da:0f:f9:96:
a7:7c:2c:73:03:a0:99:5e:1d:65:8a:9c:ad:fe:22:
94:b4:2c:93:8b:66:24:62:3f:84:c8:3d:93:53:11:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:BA:FA:E6:5C:C8:8E:57:CB:A0:88:B6:AB:61:F3:C6:25:02:C1
X509v3 Authority Key Identifier:
keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b6:26:ab:7d:ad:46:a0:61:64:5c:84:70:f0:bc:ed:71:81:
10:fd:ba:de:87:45:6f:08:2b:c0:7b:8f:67:ce:16:c0:c3:3d:
ba:bd:88:b8:58:22:ef:1a:f4:f5:6b:61:76:4f:28:53:d6:8b:
58:f9:73:eb:1a:cf:31:1f:10:98:dc:07:47:fa:2b:e4:43:b0:
0a:c8:ff:70:9a:ab:04:fd:94:9e:22:46:76:e6:a0:3f:7b:9a:
5d:f2:a3:d5:ad:4b:64:31:1b:1e:9b:57:e8:72:5a:4b:43:76:
99:d1:02:11:d7:51:f9:85:cd:ee:a7:da:89:3f:cc:f2:88:5a:
3a:67:6b:6f:c7:22:be:c3:bf:8a:e3:18:a5:40:a8:33:2c:28:
7b:d9:b6:48:83:bc:25:57:ac:9c:53:b6:30:a7:7d:b9:0f:a1:
2e:14:0a:cb:a8:6d:48:10:01:e5:af:2b:35:f9:7b:56:69:9f:
e1:ad:cf:ed:8a:be:e4:03:f5:88:34:67:1e:b5:37:00:40:30:
b1:c1:1a:66:a8:62:58:5e:75:f3:0a:f2:a4:c5:b8:17:41:d8:
1b:47:fd:7c:04:27:1d:f8:b7:87:22:5a:0b:6d:f2:59:45:aa:
d7:f1:0c:7f:22:c8:11:3d:ca:eb:62:3f:68:9d:d2:d8:b0:a6:
f8:c2:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:07 2025 by rpki-client