Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json)
Hash identifier: s/UpPMoDBiVSg/0qOYmOb3HKL4FRO8vyacWge+XlNVU=
Subject key identifier: A7:D4:CA:21:FD:02:06:9F:F1:B9:8C:64:36:A5:D9:B8:D3:C0:E4:20
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
Manifest number: 0C
Signing time: Fri 31 Jan 2025 07:10:19 +0000
Manifest this update: Fri 31 Jan 2025 07:10:19 +0000
Manifest next update: Fri 07 Feb 2025 07:10:19 +0000
Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: kcsyIv1eR64hyzPaHQZOvZTNWdQBr8fQdNdMDWtK1K0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Validity
Not Before: Jan 31 07:10:19 2025 GMT
Not After : Feb 7 07:10:19 2025 GMT
Subject: CN=679c775b-2c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:3a:e2:ad:60:c1:7a:a2:b8:3b:3a:6a:ec:
6d:f4:48:ef:81:19:6d:78:9f:39:b9:f3:c5:9b:30:
e6:d3:82:d5:fa:6d:3b:6f:04:94:4c:0d:6d:77:60:
9a:18:27:c5:5b:37:68:0b:9c:b9:ca:e9:5b:b4:e0:
ae:85:3c:7f:4b:16:a4:04:9e:bd:90:72:cd:c6:85:
3e:00:77:ed:07:f7:fb:4a:24:d0:ad:34:a6:93:d4:
26:83:d1:75:d6:78:7f:05:14:6d:9d:b5:c1:aa:e9:
54:b1:a6:3f:0f:79:53:2f:cc:e0:0f:f9:ca:07:30:
9d:3d:25:ee:c7:b2:67:d3:ca:1d:24:62:09:87:95:
df:9c:a1:30:0b:11:2c:12:83:45:c4:c4:4b:42:50:
42:75:e1:87:69:9b:2e:82:31:d5:e9:ab:4f:02:19:
0a:ea:02:c1:85:72:59:54:a3:f8:0a:9b:46:1a:11:
e8:38:f9:30:0c:c5:95:78:3f:57:ff:ec:fb:9d:79:
e0:08:18:61:a1:68:e4:0c:e1:40:5b:a5:6a:cd:a2:
52:a0:2c:52:b0:9c:53:6e:1e:82:f7:3f:79:5f:5a:
e8:52:72:50:07:c9:a6:1f:7c:a7:64:4f:a3:20:bc:
0b:03:4d:e1:b5:95:f7:ec:d8:25:14:13:1d:74:1c:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:CA:21:FD:02:06:9F:F1:B9:8C:64:36:A5:D9:B8:D3:C0:E4:20
X509v3 Authority Key Identifier:
keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:6f:b0:cd:04:64:ee:56:c3:51:21:7e:dc:68:7f:6b:cc:
c9:da:9d:eb:b7:28:a4:33:ea:15:57:9e:bd:31:c1:97:ae:7a:
af:bc:bf:2a:ef:13:65:98:6b:83:55:25:eb:ee:73:ba:9c:5d:
50:61:ea:0d:47:60:48:e1:b4:57:25:99:f1:ce:a2:47:5c:25:
c3:66:1b:e7:2f:1e:42:84:e2:06:35:15:0e:81:b0:58:4d:1b:
28:db:32:f8:88:59:2c:e8:e7:f3:ad:e3:12:15:c4:2a:d8:7a:
86:9c:52:32:a9:72:01:84:a4:16:58:65:10:40:de:43:e3:bf:
a9:48:bb:47:94:49:71:56:21:91:87:81:3a:5b:c6:39:00:82:
e4:1c:02:0e:97:f8:36:70:c8:5c:a9:13:82:b1:47:38:ec:49:
aa:35:aa:15:09:bd:32:06:4c:aa:37:7c:66:0f:d5:60:a5:ae:
da:1d:e8:a5:eb:29:40:93:42:ed:ba:6f:0c:7f:62:be:62:86:
e0:a4:5d:39:a7:3b:90:0b:d3:c2:43:2a:77:4a:94:0c:43:f9:
93:44:8c:4f:b4:b5:7f:fe:36:e8:04:a8:67:c1:9b:93:fb:6a:
b7:15:be:4e:4d:a3:d3:02:33:de:ed:c9:f6:59:cd:e2:3b:5c:
3b:fa:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:45 2025 by rpki-client