Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
File: OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft (raw, json)
Hash identifier: i1WE+E790ebzMian8Urx9TAEBTFVlhixC9mLGXig9so=
Subject key identifier: D2:41:32:63:57:30:98:60:2A:63:44:B7:53:8E:26:DB:C3:86:A7:F8
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 03:26:37 +0000
Manifest this update: Fri 31 Jan 2025 03:26:36 +0000
Manifest next update: Fri 07 Feb 2025 03:26:36 +0000
Files and hashes: 1: OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl (hash: Hf/qaaB5KNXgwRTrJSFqjt+Ch9BrEuT9+Yc7Q8M8kV0=)
2: 9580A702548211EFAADB996FC4F9AE02.roa (hash: bUq+3W02lE1dY/rsndFfjUdc4yRLRj5puR7YHObIsuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Validity
Not Before: Jan 31 03:26:36 2025 GMT
Not After : Feb 7 03:26:36 2025 GMT
Subject: CN=679c42ec-7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:92:42:3d:3d:89:c7:a7:13:c4:52:0f:ea:
aa:0f:11:3f:a0:f5:a1:54:f5:de:5e:2c:2d:9c:5c:
2e:2d:b1:dd:8c:a5:cd:6b:ee:ab:9a:2d:1b:18:32:
a7:3c:d7:07:4a:50:1c:d8:0b:c5:38:40:63:ff:c9:
f6:17:66:5c:ff:6e:ec:6b:c2:3f:fb:68:a8:76:9a:
47:2a:8d:9a:55:bb:f2:2e:8e:13:e8:00:0d:49:89:
41:de:d2:40:f9:de:eb:5b:f0:e2:ba:56:84:b0:db:
94:a2:00:87:7e:6f:84:d0:17:b0:64:91:a5:c5:7c:
77:f1:b7:71:0c:06:6a:c2:1a:8c:29:04:c3:aa:c1:
1e:d9:d4:ea:a9:e3:70:c6:f3:f5:2a:6b:ce:b6:e2:
74:d1:1c:2e:27:f7:8c:d1:97:2e:e0:bf:d2:36:a4:
4b:3d:9a:72:56:7e:a1:25:53:1c:95:b4:be:6d:3f:
bd:04:e9:0e:aa:8d:d7:64:96:43:d1:90:8a:cc:74:
ae:0c:10:7e:fe:d3:de:b1:35:b2:45:8a:4f:86:92:
38:18:06:37:be:9f:64:e4:97:4d:f5:4b:09:90:a5:
73:3b:7c:48:a8:79:e6:cd:64:53:a4:57:f9:3a:6d:
1f:d4:1d:af:6c:17:bb:40:65:e7:d5:8c:1b:56:ee:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:32:63:57:30:98:60:2A:63:44:B7:53:8E:26:DB:C3:86:A7:F8
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:31:f4:90:00:47:60:80:04:46:72:12:c6:3d:14:8f:aa:c7:
bd:45:50:34:90:ce:bb:da:55:ed:ca:db:87:5c:00:7f:cb:35:
12:1e:ac:76:98:76:51:d2:f6:8c:45:2e:cb:f5:79:ed:f3:d2:
82:4c:b4:5a:96:95:68:d6:66:09:48:15:5b:fc:9e:b0:49:ff:
09:41:06:29:42:25:24:a4:d0:78:d3:5a:3f:d3:2e:3a:af:1d:
14:ef:ed:3f:76:b3:16:78:3f:3d:27:98:76:0b:e8:50:66:9e:
26:5d:14:b7:8f:8b:63:5c:1f:fc:2a:28:7e:11:bb:dd:35:a3:
de:51:0b:e4:3c:85:cc:10:c8:06:86:1e:af:c3:32:5a:5c:dd:
c1:5b:80:6d:dc:ec:f4:2f:d1:44:df:bb:8e:45:56:24:a4:7b:
fa:cd:6d:8a:ed:d5:04:5e:00:57:30:91:30:99:57:8a:79:30:
08:fa:8d:8a:4f:bf:2e:cd:1d:52:ca:e4:73:23:96:6f:2c:b0:
fc:16:ac:b3:74:fb:f1:ac:30:c5:aa:c8:63:95:70:a9:06:6a:
e2:ce:29:25:7b:00:c3:93:40:8f:a9:9e:84:57:ac:99:0d:8e:
41:fc:1d:6f:03:24:18:9b:00:57:b1:54:09:98:ee:b3:9a:b6:
1b:73:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:43:58 2025 by rpki-client