Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
File: OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft (raw, json)
Hash identifier: /Rh5qqlmDawn6M0ddLKzz4eYs746zfmb3YS43htnzhA=
Subject key identifier: 67:47:51:3C:35:6E:CB:F0:6F:D4:7D:5C:D0:F1:95:86:E1:4D:8D:97
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 02:41:28 +0000
Manifest this update: Fri 31 Jan 2025 02:41:28 +0000
Manifest next update: Fri 07 Feb 2025 02:41:28 +0000
Files and hashes: 1: OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl (hash: c0FFsLAjvNDgexYbK6xgqko7TnNxNBjRe8sPRVzjk4Q=)
2: 65AFE18C91DB11EFBC4C2A3EC4F9AE02.roa (hash: LqvEH1o9qv1Spv16C52zEqgMsWnx5LeCvM7wNncYwmQ=)
3: A50FD050DA7911EDB0D3866BC4F9AE02.roa (hash: sq3CtUxJWk/lwN1trxwIddBHXPOdGnUuNzRlPvsNflY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Jan 31 02:41:28 2025 GMT
Not After : Feb 7 02:41:28 2025 GMT
Subject: CN=679c3858-3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:06:43:c4:3a:7a:3f:20:ed:7e:ab:2f:22:
94:c2:cb:2c:9e:3b:63:32:b7:7c:66:a6:ba:5f:9f:
91:3a:78:8b:62:8a:c8:44:41:07:e9:0c:e6:12:d2:
51:e9:53:a9:d3:8d:5d:fc:19:93:52:98:37:d8:5e:
30:6c:86:d0:9c:da:dd:c8:71:23:ba:be:61:da:a6:
99:df:8a:1d:ea:b3:67:10:01:46:80:3b:16:b1:6b:
cf:bc:1d:67:b3:74:e8:f2:4c:ce:e9:f0:f5:ed:43:
2f:13:a2:e9:ad:53:d3:15:aa:8d:17:de:2a:f9:51:
cd:35:19:4c:18:08:dc:74:d8:bd:51:89:c1:2f:5d:
ef:4b:39:32:18:ef:71:f3:84:f0:2a:f2:e2:57:f0:
78:1d:72:11:48:aa:51:42:ee:5a:ef:01:14:d6:83:
61:b1:db:fc:cf:f1:39:70:9e:5b:89:f7:25:90:7d:
10:c9:34:d5:ef:6e:73:6c:c7:90:eb:2d:3a:2e:ed:
72:2e:41:99:0b:be:d5:9c:54:77:26:41:af:17:73:
55:d3:b4:eb:8d:46:f0:93:b9:28:32:ba:4f:6a:20:
26:31:7c:dd:b5:3c:98:18:80:a6:f7:ab:55:00:0e:
e0:ec:26:c1:d4:a5:b8:79:e9:6d:c3:00:31:e7:f3:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:51:3C:35:6E:CB:F0:6F:D4:7D:5C:D0:F1:95:86:E1:4D:8D:97
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:3e:10:15:52:f6:17:20:3f:c6:64:9d:cb:6b:fd:01:07:b5:
c8:8e:5c:e4:de:12:03:02:50:3c:7c:fe:e7:2c:a7:c7:24:7e:
45:d2:2d:de:5c:ab:4b:ca:a2:11:a7:e6:35:6a:e8:34:6b:eb:
43:25:8e:6b:fe:d6:df:2a:d3:de:b4:ec:95:ca:04:c4:8b:24:
a5:c7:08:26:e7:d5:38:6b:dd:41:22:16:6d:ed:26:84:75:6b:
c4:c3:b1:58:77:7f:34:40:d4:c7:21:8c:7b:e4:40:38:38:a0:
28:6d:32:32:6a:fe:a6:e5:9a:00:b4:a2:29:73:cd:1a:e6:c8:
b1:66:48:73:28:05:90:f2:72:cc:b8:ca:84:dc:35:34:d8:39:
af:df:de:79:81:3e:03:ed:99:c9:09:63:57:85:5c:67:01:8b:
0a:84:a7:31:8e:40:93:0d:50:1e:8a:c0:41:e4:fd:ac:bf:68:
eb:fb:da:38:b5:71:cb:94:67:ce:67:50:ab:97:f1:99:4e:e9:
40:da:a1:7d:28:9f:aa:78:34:bc:2b:c4:fe:f5:9a:1e:67:65:
a7:52:e8:f4:8f:9c:39:fd:1f:ff:54:a1:13:bf:c8:15:9f:82:
5e:58:2f:50:6d:91:fa:5a:4d:47:92:a5:aa:16:1e:16:1a:3c:
d7:18:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:26 2025 by rpki-client