Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
File: 0KOmnirBDCwQU_cvdJlH7CK5w80.mft (raw, json)
Hash identifier: gURKlNuZ1Tw2HGSd3Sts6WEcclqg0DzR/8sCk+Slmak=
Subject key identifier: 61:69:D6:DD:BA:53:1F:D4:B1:B9:B0:3A:1D:0B:52:3D:B3:8A:59:6B
Authority key identifier: D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
Certificate issuer: /CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Certificate serial: 09C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
Manifest number: 09B8
Signing time: Thu 30 Jan 2025 20:05:51 +0000
Manifest this update: Thu 30 Jan 2025 20:05:51 +0000
Manifest next update: Thu 06 Feb 2025 20:05:51 +0000
Files and hashes: 1: 0KOmnirBDCwQU_cvdJlH7CK5w80.crl (hash: mxk+md9G8k30sxaeis2W4N3XfTNKcY3frtb3ptQUfeY=)
2: 077A609E183911EB9C11C27CC4F9AE02.roa (hash: 3+/t3J2iluPwHXxOgZE7j6ggbnPpq8pNrSyJFTrrBZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180758/serialNumber=D0A3A69E2AC10C2C1053F72F749947EC22B9C3CD
Validity
Not Before: Jan 30 20:05:51 2025 GMT
Not After : Feb 6 20:05:51 2025 GMT
Subject: CN=679bdb9f-8b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:70:d5:bc:29:5e:b8:ac:43:3c:74:63:97:
55:17:fc:bb:6c:9f:a9:f0:f7:10:68:34:70:80:73:
a6:9b:89:58:8d:e1:7a:58:b0:09:66:9c:d9:13:45:
f0:cc:de:6e:ae:86:bc:00:f6:ba:27:88:73:74:d6:
fc:d0:f9:82:0a:04:0a:c3:3f:c7:77:9d:76:40:3f:
17:3f:01:9c:d6:82:fb:8a:b2:93:bb:c0:38:bd:20:
ff:00:bd:e8:ab:51:d7:f1:34:d8:ce:d3:84:00:64:
1e:71:3b:58:09:bb:07:89:0f:0c:c6:bd:36:c6:b4:
db:0e:ee:1c:84:38:39:f7:5e:49:ec:ca:a9:91:48:
ed:7f:b6:7e:fd:a5:7c:f0:9b:21:2a:b0:d3:1c:66:
50:6a:18:d8:52:85:66:fc:0e:02:ef:6b:28:70:74:
cc:51:d8:18:55:5c:b7:2f:1d:19:92:37:a2:06:b9:
ef:01:de:98:f9:05:b8:03:34:3f:64:ef:47:ac:61:
38:5a:e6:da:c8:88:d4:e6:2c:68:02:6a:93:97:18:
65:6a:52:7e:67:15:0e:8f:41:73:d0:18:df:1e:68:
24:c5:7f:0f:a4:98:5e:c4:87:ea:de:5f:e4:70:25:
90:3d:71:8f:3e:9a:ea:d9:4c:60:5f:89:e7:fc:ec:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:D6:DD:BA:53:1F:D4:B1:B9:B0:3A:1D:0B:52:3D:B3:8A:59:6B
X509v3 Authority Key Identifier:
keyid:D0:A3:A6:9E:2A:C1:0C:2C:10:53:F7:2F:74:99:47:EC:22:B9:C3:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KOmnirBDCwQU_cvdJlH7CK5w80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180758/33389884797B11EA9B27EC37C4F9AE02/0KOmnirBDCwQU_cvdJlH7CK5w80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:60:c1:92:b9:d6:97:9a:8b:d9:75:f9:3c:fa:9d:df:d9:41:
fe:8f:73:8d:aa:0d:f4:13:f7:21:22:7e:9e:cd:2c:42:3f:80:
c6:9f:6e:41:b4:52:64:c1:95:ff:78:2b:a4:ab:89:ce:d0:a9:
5b:d7:19:72:03:27:9d:e2:23:64:ba:24:d0:22:67:0c:ef:4a:
a4:99:94:4e:d9:03:62:ba:8a:97:c3:b2:e9:07:2f:7a:56:68:
f4:3b:96:3d:ba:6f:f5:59:47:fe:c2:af:90:27:c9:04:4e:1a:
65:29:2e:e5:23:49:38:9b:4d:2b:e4:99:90:8d:98:4d:26:c3:
22:40:b5:d2:53:a5:0d:1e:fa:97:9d:f7:bf:a7:24:2e:f1:39:
85:33:e8:a6:c3:f5:99:18:7b:0b:4b:41:3b:d9:e3:b7:4c:3b:
98:4c:f3:7e:5a:99:27:f3:ad:84:6b:4c:5f:d7:79:8b:9d:cb:
1b:54:8d:a2:e3:30:92:ae:e2:41:91:c7:39:f5:ef:95:5e:71:
9b:7f:dc:40:80:8d:5d:19:5f:ae:fe:ad:68:67:ec:5b:08:86:
a7:79:67:0d:39:5a:53:6b:15:a8:2b:6e:52:96:f2:20:dd:9d:
38:db:81:ed:ae:db:da:1d:17:0b:af:e4:b7:74:ec:54:45:24:
17:9e:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:54:55 2025 by rpki-client