Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
File: Obr5A_sjDbZa60L2fJ8_NgMMff0.mft (raw, json)
Hash identifier: B2bfSyUNu0jjrHd11DpyzyisCupa9GnJNedpBkwEHiU=
Subject key identifier: 84:EC:66:C9:8F:E6:CC:11:74:45:30:66:FB:47:13:64:F7:99:CE:BC
Authority key identifier: 39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
Certificate issuer: /CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Certificate serial: 03FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
Manifest number: 03F6
Signing time: Fri 31 Jan 2025 00:35:07 +0000
Manifest this update: Fri 31 Jan 2025 00:35:06 +0000
Manifest next update: Fri 07 Feb 2025 00:35:06 +0000
Files and hashes: 1: Obr5A_sjDbZa60L2fJ8_NgMMff0.crl (hash: 8M3J0YSERfPgmDlYq2FARNcsm5GhhRflod2nsZA9d/Q=)
2: 5475C39A5F7111ECA813E17DC4F9AE02.roa (hash: +D56I4b7nWl9oFXCZLe1V1DGfoh8L2BH9bwrOgGWI6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1018 (0x3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A17/serialNumber=39BAF903FB230DB65AEB42F67C9F3F36030C7DFD
Validity
Not Before: Jan 31 00:35:06 2025 GMT
Not After : Feb 7 00:35:06 2025 GMT
Subject: CN=679c1aba-4f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:f6:f9:1b:7f:1b:1a:74:a1:79:1c:9f:06:
41:ec:90:cf:41:c5:50:b7:18:5f:c9:b3:36:a8:62:
e0:29:91:83:68:cb:2f:e6:ee:fd:f2:d2:91:49:41:
68:26:26:e3:b2:81:18:de:73:65:ad:9a:97:b0:8a:
e2:30:fa:fb:a2:f0:ea:38:c0:16:11:f6:0b:ac:5d:
67:54:53:5e:4c:1b:be:f2:42:28:0d:cc:f7:32:e9:
84:61:5a:c5:3b:23:8d:00:e3:1b:70:27:8e:28:8c:
b3:7a:1b:df:c4:bc:37:86:f6:66:72:c5:27:dc:a5:
58:0c:2e:4c:bf:b6:80:3e:76:ae:d1:53:bb:9d:9e:
15:c8:44:da:51:e1:7f:bb:f7:ac:26:03:1a:9a:cb:
74:19:76:e1:e4:e7:4b:ca:20:9b:54:75:e7:85:bb:
f4:06:00:af:1d:1e:73:f4:d7:67:fc:5b:82:c8:aa:
86:a5:d3:61:19:82:24:24:28:df:9e:16:c7:1d:4f:
f1:d2:13:ad:7b:d8:59:10:16:c7:91:e8:71:57:d0:
1a:ef:38:1a:e7:e0:b0:19:36:3c:55:3e:f7:a2:e8:
12:f7:ac:0f:fb:a6:b1:84:f0:1f:04:5f:fa:32:9d:
99:4f:68:96:90:50:c9:0c:2b:5d:82:b1:ad:46:85:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:66:C9:8F:E6:CC:11:74:45:30:66:FB:47:13:64:F7:99:CE:BC
X509v3 Authority Key Identifier:
keyid:39:BA:F9:03:FB:23:0D:B6:5A:EB:42:F6:7C:9F:3F:36:03:0C:7D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Obr5A_sjDbZa60L2fJ8_NgMMff0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A17/AC6F68425F6E11ECB6159379C4F9AE02/Obr5A_sjDbZa60L2fJ8_NgMMff0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:68:40:36:29:49:f2:9f:2b:32:e2:27:84:3b:d1:e4:e1:64:
c2:71:17:b5:d0:28:0c:07:be:4e:ac:e8:57:82:0b:1a:33:3e:
e0:3e:ba:e6:7f:50:30:79:d7:f7:1c:a7:5c:7a:92:e9:9f:73:
75:e9:de:6d:b2:a0:c1:79:12:af:b5:91:21:89:f9:ae:2a:c0:
7d:19:d8:e6:28:0f:d1:f0:46:3f:ff:4d:68:fb:e4:a5:e4:e6:
32:da:92:cc:fc:ff:71:47:de:56:35:1c:16:a9:67:fd:cf:82:
9a:87:c9:ea:b7:17:b3:84:54:ca:20:23:f1:c1:e2:ab:ba:ed:
a0:c7:d3:5b:f7:20:b6:51:ba:d8:b6:e1:6b:46:8d:da:37:6e:
2f:3c:b5:bc:f6:22:8a:20:19:2d:e6:68:fb:e9:23:02:a5:c9:
91:0d:8b:d0:b2:22:ff:56:58:a4:ad:39:2c:3b:8c:0c:9c:eb:
66:88:ca:80:b1:71:80:df:38:aa:74:a8:6f:1f:41:06:a9:c7:
c3:89:26:25:1b:f1:74:d0:41:64:b2:42:c1:96:38:2f:12:a6:
d9:1d:d7:e3:ab:2d:95:29:42:ab:7f:2e:7d:f6:ac:92:a8:a6:
c6:c4:fe:56:62:23:6b:d8:14:ba:14:5e:ad:ed:bd:53:eb:ae:
11:fe:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:13 2025 by rpki-client