Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft
File: OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft (raw, json)
Hash identifier: 3DYN2e15/vjLnV5PRYMTkj0QiipMNFGPVyspbc4Yj6k=
Subject key identifier: F1:3A:03:4E:18:AA:A2:06:EC:AB:D0:5E:73:5C:1B:3A:BB:39:1B:35
Authority key identifier: 3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3
Certificate issuer: /CN=A915802B/serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3
Certificate serial: 0A43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft
Manifest number: 0A3A
Signing time: Thu 30 Jan 2025 19:51:36 +0000
Manifest this update: Thu 30 Jan 2025 19:51:36 +0000
Manifest next update: Thu 06 Feb 2025 19:51:36 +0000
Files and hashes: 1: OkN4D2xDLe5HSoqVaFkCgtvqXbM.crl (hash: CeGFEK0S/XbkCz0uIeT/vJffOj7n16mn1xmwTApvF54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2627 (0xa43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915802B/serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3
Validity
Not Before: Jan 30 19:51:36 2025 GMT
Not After : Feb 6 19:51:36 2025 GMT
Subject: CN=679bd848-b787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:8e:cf:b2:5d:5b:66:e3:8e:04:7d:5d:bb:
d1:10:3d:d6:a0:fd:5f:64:a2:db:7f:cc:1f:e2:3b:
05:d2:d5:64:c2:3d:fb:cf:fd:72:41:d7:b1:b6:dc:
c9:59:63:ee:36:1f:98:6b:f9:78:f0:14:0c:55:50:
49:93:1e:a3:b5:75:5f:e2:b5:52:e2:0a:0e:bf:f1:
43:f7:df:fc:e2:11:eb:e8:2a:b1:65:05:39:6b:b0:
9c:13:a2:75:36:4a:b1:c9:8a:d3:9f:5a:8e:35:16:
26:7e:2e:eb:2a:d4:13:38:0d:dd:fd:3b:bf:db:fa:
8c:85:b2:1b:e3:ba:96:f8:76:d1:39:ca:20:d0:7c:
6e:d4:01:ea:32:3f:45:e8:7d:b7:34:a9:fa:44:9d:
e3:7e:7f:75:86:4c:ac:59:36:90:af:bd:66:18:07:
40:e6:24:24:a3:1a:d9:6c:b4:a0:ce:bf:73:94:92:
5e:f2:ee:4e:e8:7f:c8:0b:25:27:49:43:06:d2:cc:
c6:62:5d:93:2c:36:01:78:82:18:cb:88:99:79:28:
d0:6d:81:c9:9d:d3:fc:ab:aa:4c:49:7b:14:59:88:
00:ac:fa:16:82:84:bb:06:ab:74:73:38:81:a0:83:
39:83:7b:0e:0a:29:37:23:06:ee:26:42:00:f8:86:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:03:4E:18:AA:A2:06:EC:AB:D0:5E:73:5C:1B:3A:BB:39:1B:35
X509v3 Authority Key Identifier:
keyid:3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:9f:ba:42:03:6c:8d:04:49:d5:1b:69:5f:6c:21:c4:35:6b:
0b:05:23:27:2d:57:69:7e:b5:57:85:8c:88:48:f0:c3:d7:53:
cd:80:2e:47:65:f5:1a:84:0f:99:23:19:70:8a:a3:51:49:0f:
2b:df:61:99:54:85:be:1f:04:bd:f3:78:fc:9c:77:df:fe:17:
cf:6b:7c:f1:ec:2b:94:b8:f6:83:11:77:7e:f8:08:15:c4:5d:
e1:e5:1d:71:5c:09:2e:16:1e:28:5c:b4:67:f2:f9:25:21:14:
74:1a:ac:c3:ab:01:5c:b5:91:c3:14:90:24:c9:88:f0:c8:dc:
da:cd:b6:2c:01:f7:cd:a5:8c:71:6e:e8:49:d2:a8:f0:65:e9:
f9:8f:28:b7:79:64:71:0a:93:ab:35:36:27:fa:16:d7:1b:9e:
af:2c:ab:80:a3:35:88:5b:a5:4b:fb:33:50:91:7a:e9:fc:ad:
6c:20:f1:67:4e:27:e1:3c:36:04:12:c2:20:a2:66:a5:4f:fa:
4b:6e:8c:1b:71:8f:40:38:12:b7:56:6f:0b:3a:5f:5c:d0:24:
6b:de:e5:94:bb:52:84:99:c9:eb:a3:7c:57:3e:c7:94:cc:e7:
fb:2d:7a:bf:9f:8a:0d:a3:50:fb:d0:8a:72:ba:2f:21:24:da:
18:93:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:05 2025 by rpki-client