Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json)
Hash identifier: rbZ3Z6cw/Zphvu1nRd4W7+izb9REjMc19/47XsyYQHg=
Subject key identifier: C8:48:3D:74:18:6B:14:26:A0:60:B7:29:4D:31:21:8C:59:36:88:A7
Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
Manifest number: 01E4
Signing time: Fri 31 Jan 2025 04:19:56 +0000
Manifest this update: Fri 31 Jan 2025 04:19:56 +0000
Manifest next update: Fri 07 Feb 2025 04:19:56 +0000
Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: jR1K4o2CYfitf2i9AikM+otAU2/p+psu3xYOBC4i1jE=)
2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=)
3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Validity
Not Before: Jan 31 04:19:56 2025 GMT
Not After : Feb 7 04:19:56 2025 GMT
Subject: CN=679c4f6c-5d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:e0:cb:e1:f3:82:4e:ac:fb:de:6a:30:bc:
7c:bf:6c:29:51:d1:34:c1:55:5a:ad:2a:a4:ff:59:
0f:89:0c:d9:6e:d0:1f:f8:49:d7:11:55:19:3f:a9:
76:6c:94:29:a6:02:29:81:d4:e0:b6:e6:61:5c:8b:
b8:d9:ef:fd:65:23:e3:e6:d1:ea:93:de:21:79:42:
89:38:37:c6:72:49:7b:f2:a7:66:bd:3f:49:61:e4:
fa:10:db:29:36:1e:90:00:82:bd:cd:65:aa:df:0b:
65:ea:bc:98:d3:ef:05:79:50:e3:08:71:7d:bb:2a:
0f:2e:db:32:11:82:f1:82:ac:7e:1a:c6:76:4b:9c:
93:f9:9f:2e:c3:82:88:01:c0:34:1c:f6:07:5a:10:
d4:19:4c:a7:cd:e9:83:88:8a:4b:63:12:d9:1a:00:
56:59:3d:33:d0:52:3f:26:e9:27:36:54:eb:0c:2c:
92:7a:db:93:33:0d:60:dd:cc:a5:e4:ca:cd:f7:c8:
39:65:43:4f:e4:be:0c:45:0c:c7:95:39:c5:59:11:
c8:69:eb:77:4d:66:82:fe:cb:7c:eb:cd:74:25:0f:
51:2d:b4:db:97:ba:46:76:ad:7a:ef:cb:51:29:54:
1a:42:f7:d4:79:18:88:24:1b:9a:a3:3b:ba:50:dd:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:3D:74:18:6B:14:26:A0:60:B7:29:4D:31:21:8C:59:36:88:A7
X509v3 Authority Key Identifier:
keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:1f:e8:ca:6e:50:11:09:a2:cd:02:5c:ca:fd:d9:c0:97:33:
78:7e:32:94:b4:20:11:3c:88:25:d9:81:84:a6:a8:a7:f9:6c:
f3:7d:36:04:03:21:a0:8f:e7:0e:0d:35:02:22:14:b9:75:ee:
6a:5c:7b:4f:9b:1e:13:d1:61:b8:bc:60:b4:97:79:2f:f0:8c:
bb:86:20:80:a0:08:aa:fe:5c:c2:22:f4:19:8c:17:b1:00:4f:
83:8e:dd:67:41:0c:92:75:78:a1:91:8e:3d:8c:77:c7:ed:e9:
6a:ac:de:fb:15:33:01:27:a6:13:5b:ac:da:7a:42:3f:2b:08:
1e:2d:01:9e:b8:d9:70:d8:29:38:c2:fa:5d:ba:77:7f:f3:73:
aa:9e:44:11:87:1a:60:54:ed:5e:57:d4:5c:d4:12:31:26:d0:
f3:45:7e:a7:81:96:7f:04:27:3a:85:3c:3a:59:44:5f:c9:ac:
20:8b:08:1e:51:59:33:22:41:13:f9:51:15:09:4a:26:7e:5c:
d1:f2:01:84:c0:d5:9e:a6:27:17:f9:0d:0d:13:89:b8:b6:18:
10:a3:df:de:06:43:cb:b3:ac:f1:a2:2d:38:89:38:3e:70:3f:
d0:80:40:a2:c4:ab:29:79:35:71:50:91:74:6c:62:c7:7b:f0:
71:fb:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:29:08 2025 by rpki-client