Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
File: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft (raw, json)
Hash identifier: hW2yjKfTePgJHD0N61e2XoHS6yqsLQhxW0W5Ncff96E=
Subject key identifier: 54:12:94:BA:3D:CD:9A:57:8C:1D:91:FD:52:BE:B7:B5:B2:CE:62:11
Authority key identifier: 3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
Certificate issuer: /CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Certificate serial: 0AAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
Manifest number: 0AA8
Signing time: Thu 30 Jan 2025 19:37:08 +0000
Manifest this update: Thu 30 Jan 2025 19:37:08 +0000
Manifest next update: Thu 06 Feb 2025 19:37:08 +0000
Files and hashes: 1: O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl (hash: vqVmnU6yXXjGh1YwrCljgV9SRc1o2mFTGUMbdTkEyY8=)
2: E174463E4BD411EAAD10A710C4F9AE02.roa (hash: cYqevdGEQNUI+tqiOOupeUJHH2ci29RPMSLOld+zvmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2734 (0xaae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D2D2/serialNumber=3BB499E117B25FF6FA36A44F3A9A9472962953EC
Validity
Not Before: Jan 30 19:37:08 2025 GMT
Not After : Feb 6 19:37:08 2025 GMT
Subject: CN=679bd4e4-4a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:b9:9f:b7:36:1e:6f:bc:71:d8:c4:45:4e:
d7:d6:8d:f8:3c:c6:ad:d3:77:b5:bb:bc:a6:58:bf:
3a:7e:a6:59:0f:b5:0d:e1:5b:68:e9:fb:c9:27:63:
7f:1d:46:2a:f1:44:1e:71:e7:a9:78:d4:95:4e:a8:
51:38:14:9e:4a:3b:63:58:8a:36:18:2d:ae:f1:00:
f5:c0:ad:b5:73:5f:6b:d3:65:14:f7:e0:74:f1:e6:
c7:22:5c:cb:50:52:3e:45:55:56:91:fc:fc:d1:0e:
70:46:64:17:81:e2:2c:c1:e6:f0:11:14:5f:ba:ca:
af:32:1a:cc:16:c6:1e:be:47:3e:9c:f4:0a:29:13:
39:57:d2:17:4a:8b:6e:ac:1b:cb:d2:5b:59:8c:72:
57:18:e7:18:93:a4:1b:db:46:cc:ee:3d:79:ae:ce:
5f:b5:1a:ca:03:b3:4d:8d:8c:84:ae:d1:5b:ca:2a:
5d:7e:12:fb:08:73:a4:c2:72:9e:ca:76:53:81:ac:
2e:82:1d:9c:70:e3:47:bb:3e:06:4b:58:9e:f2:f3:
b4:c4:e6:cd:4b:00:33:b9:51:de:8e:e0:69:d8:ae:
99:6b:13:93:74:c3:fc:57:a8:53:4d:d6:54:5c:c6:
7f:bc:d6:8c:dd:60:74:e9:e3:1f:5b:68:79:33:d3:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:94:BA:3D:CD:9A:57:8C:1D:91:FD:52:BE:B7:B5:B2:CE:62:11
X509v3 Authority Key Identifier:
keyid:3B:B4:99:E1:17:B2:5F:F6:FA:36:A4:4F:3A:9A:94:72:96:29:53:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D2D2/FA1EE372489D11EAB40FA43FC4F9AE02/O7SZ4ReyX_b6NqRPOpqUcpYpU-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:66:2a:98:72:d8:48:51:74:de:fe:bc:d3:d8:1a:b8:9e:
61:dc:4d:55:21:b3:3b:6f:1f:cc:00:27:9d:14:16:31:84:b7:
fb:22:0b:ed:a4:94:43:64:ec:f0:7a:74:40:67:0f:11:f5:2f:
81:4c:0a:bc:f4:4f:75:2d:96:cb:fe:1a:28:15:16:cc:e1:e8:
24:c7:45:d5:77:12:5e:ff:ef:76:30:5a:18:1d:1b:b5:04:16:
14:18:cb:a4:05:59:5e:49:a8:60:29:86:fb:ba:08:47:51:02:
4f:1c:1d:d8:fa:3e:74:47:cc:93:4e:6e:91:a5:6e:c9:f6:b3:
67:45:fe:77:f8:5d:48:80:1f:ad:3c:22:26:07:bb:d2:e6:64:
a5:ee:d0:98:81:2f:df:73:fe:7c:fb:77:6a:43:17:70:03:9d:
5b:1c:42:95:12:16:ae:fd:bf:ab:88:1a:7e:21:2d:f0:5f:30:
5a:19:2c:8c:ea:5e:73:0a:b0:32:a8:7f:bc:cd:ef:84:62:3d:
46:61:55:7b:4c:98:7d:54:9f:d6:4d:2c:e4:4a:bd:00:d6:41:
e1:29:20:f5:34:59:8c:a7:7f:eb:4f:18:01:7f:04:f3:1b:05:
8b:22:c2:97:c6:5b:90:57:f1:10:ec:8b:81:78:65:9b:11:5e:
9f:b8:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:33:59 2025 by rpki-client