Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier: XZv7JjDybORw3YgRR0NuqoqjDY/lfHmQN9p5dU1fgtk=
Subject key identifier: 53:30:7E:58:29:F1:78:25:72:49:38:94:9F:84:68:40:04:B9:49:CB
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 03:34:00 +0000
Manifest this update: Fri 31 Jan 2025 03:33:59 +0000
Manifest next update: Fri 07 Feb 2025 03:33:59 +0000
Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: UwOvf9EJ+oUytQBeomkIHku0klCwLrzkNKXkiX35LXc=)
2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: LDgnrMv06w2uH/2SaOTlpFRL0ITCYwRDAQrZfxJgOVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Validity
Not Before: Jan 31 03:33:59 2025 GMT
Not After : Feb 7 03:33:59 2025 GMT
Subject: CN=679c44a8-094a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:c2:1b:88:28:11:21:38:e3:ce:b0:b5:88:
ac:f1:11:90:ff:26:ea:97:83:30:90:5f:19:e3:d8:
09:50:e4:e5:e6:01:b2:e0:b2:d3:18:70:22:e2:a3:
3c:e9:a4:21:53:a8:7e:0d:7b:27:9f:b5:66:94:12:
96:42:b3:b7:a8:d2:6d:b6:67:b9:24:2a:d8:9d:2f:
68:a1:90:3d:4f:0a:45:5f:98:71:4c:df:3b:c9:b2:
55:eb:a7:53:7c:79:39:b5:01:71:5c:42:1c:e6:bd:
36:2e:16:d6:7d:ce:0d:88:c4:c1:6d:79:42:ea:bf:
bf:37:c0:ba:38:95:4c:f0:96:8d:47:74:4b:e9:28:
23:f4:ca:52:6d:ad:8d:de:be:18:2f:25:16:54:5a:
24:ba:44:e6:6f:67:49:b1:58:c3:ea:3b:27:a4:06:
9a:af:9f:eb:e3:20:44:a7:b8:9a:bc:f3:5b:f1:28:
f2:8e:26:0b:68:9e:7a:3c:4f:fb:53:e9:62:61:ad:
e2:64:1a:d2:d0:ba:be:f1:de:5c:41:6a:a2:73:97:
98:88:8c:4f:fa:ce:ae:81:2b:a8:f9:75:64:9d:bd:
80:fe:7d:8f:b6:94:4a:27:e9:f4:06:30:6b:b7:9c:
7c:0c:32:f1:7b:ef:12:7c:42:ae:b1:0c:3f:4f:77:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:7E:58:29:F1:78:25:72:49:38:94:9F:84:68:40:04:B9:49:CB
X509v3 Authority Key Identifier:
keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:cd:e0:e7:8d:8c:dd:98:a8:05:eb:53:2c:09:70:e0:23:
a6:56:22:15:dc:40:c1:9b:93:3b:a3:b9:3a:92:f0:91:47:5b:
55:11:59:b6:bd:8a:eb:3e:1d:74:c0:48:88:a5:d7:d1:ee:90:
d4:9d:bd:7c:ba:23:e2:9d:d2:4e:f8:07:33:d9:34:e9:06:23:
02:7c:8f:2e:98:2c:65:ac:4a:f0:fc:60:f2:d9:19:2b:71:e7:
b3:e5:f8:cf:78:79:e1:2d:b1:68:53:ec:0a:28:b5:87:ab:e3:
29:02:d0:d3:d6:e0:09:38:fb:a6:95:ec:46:ea:7c:64:81:32:
c9:c6:2e:ea:56:be:80:67:22:5b:0f:99:51:93:60:3e:ae:de:
17:e3:fc:9e:21:fa:87:42:a2:43:d8:3b:ef:c5:b2:4f:0a:68:
27:09:ed:45:63:f3:79:21:ed:8a:1a:1e:c7:88:b7:8a:33:80:
f8:b3:bf:1d:1b:e1:dc:6d:fa:33:9a:b1:68:bd:8d:3f:78:60:
90:30:a7:d0:a0:34:31:b2:60:3e:d9:ec:d9:48:dc:b8:fd:fa:
36:41:2a:2d:dd:cb:c6:eb:64:db:37:5b:56:b9:09:85:d4:ec:
32:79:3d:30:3b:3a:0f:29:ef:33:87:9f:36:9c:3c:6d:29:ac:
4d:0f:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:38 2025 by rpki-client