Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json)
Hash identifier: fDX0eJY/ABaqhQeuGh+TGPMSYEI1YTplDSjXpNBXwU4=
Subject key identifier: D3:07:91:3E:F5:E7:96:C0:84:8B:B5:0B:EE:45:F8:F5:D4:DB:AA:9C
Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Certificate serial: 072D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
Manifest number: 0721
Signing time: Thu 30 Jan 2025 21:45:41 +0000
Manifest this update: Thu 30 Jan 2025 21:45:41 +0000
Manifest next update: Thu 06 Feb 2025 21:45:40 +0000
Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: 5hsMWi4UlJjrA02lXrpdQrYRB41mP+J9LrhLYiqpKrE=)
2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: KbjbjWfa/W/SeFQrbonVtHmtNH6PFYaGP9XG75HjJGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837 (0x72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Validity
Not Before: Jan 30 21:45:41 2025 GMT
Not After : Feb 6 21:45:40 2025 GMT
Subject: CN=679bf305-6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:95:57:fa:96:7d:2b:a8:3c:0a:b8:97:23:
4c:45:c4:25:df:cc:be:f4:a1:11:5c:34:84:33:71:
99:9c:49:30:0b:72:6a:45:34:77:de:09:9c:ff:74:
5d:e2:02:3e:9f:8b:47:18:d9:1c:2e:f1:5c:05:72:
98:06:51:f6:9e:39:a2:c4:d0:21:6c:3e:e0:1d:f0:
a6:36:99:26:fc:0a:da:a8:b7:59:c8:38:e2:f1:ee:
64:d4:b5:1b:80:11:b9:be:94:39:67:c9:e0:7d:4d:
c2:40:8c:5e:8b:a4:c1:93:94:f6:f9:7f:ef:57:81:
88:f3:b5:5b:51:c8:d6:50:b1:86:58:2e:89:b0:fe:
ab:40:e1:62:06:ed:77:6e:37:06:51:b6:88:a0:f9:
2d:d2:34:31:0a:dc:03:81:11:32:32:6e:5c:d9:30:
4c:f8:b4:5d:53:3b:78:ed:09:3c:b2:04:d8:9a:ce:
f2:6a:a5:1b:90:a1:eb:94:88:5f:7a:5f:61:52:c2:
99:5e:2c:9e:26:dd:b5:79:39:a2:0b:66:87:27:95:
cf:e2:24:14:7b:ad:4b:ff:e7:a4:91:91:84:d4:a4:
a2:db:f0:c9:12:2a:e5:ef:e8:eb:d7:62:a4:ca:64:
ab:76:dc:cf:a4:f8:cb:9b:9f:07:fa:e1:bb:1b:aa:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:91:3E:F5:E7:96:C0:84:8B:B5:0B:EE:45:F8:F5:D4:DB:AA:9C
X509v3 Authority Key Identifier:
keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2f:05:1b:d4:c1:9d:8d:fa:c3:b6:37:65:3f:d1:ff:bb:ff:
28:0f:91:10:38:ac:cb:37:b1:be:7d:25:d8:7d:97:10:25:13:
08:94:31:95:6c:54:1b:b0:74:4e:1c:5b:c1:4b:df:f1:76:85:
0c:93:e3:8e:fe:54:22:7a:01:d5:bd:1d:4a:c7:c9:67:ea:1f:
9b:7c:c0:c5:de:e5:07:cf:1d:0f:f4:91:30:56:aa:c2:98:31:
93:ef:a8:df:34:1e:7d:27:ba:09:6e:ce:48:65:c6:d3:c7:58:
97:99:e0:48:a2:29:91:f4:14:a8:2d:99:e2:8e:2c:fb:f3:c5:
54:6b:c2:e8:05:9b:41:79:84:d8:3e:4e:e5:5c:66:08:b4:b7:
90:0f:56:a5:69:a7:72:30:11:fd:be:80:a7:b0:44:c6:c9:5c:
91:41:3b:fb:86:78:e0:83:37:f0:c6:cb:a8:5f:9d:05:6d:4e:
dc:0e:ba:4c:6c:17:bb:61:1b:54:f2:8d:27:a2:b8:9f:61:d1:
f2:44:8f:0b:ef:fe:f3:12:c1:ce:af:69:c5:6e:38:36:38:83:
ac:9c:45:a3:03:4c:35:5f:2d:45:b3:b6:36:43:a9:b4:fe:c5:
b4:70:1b:ab:01:da:3e:1c:47:84:68:c4:ec:f2:9a:60:e6:d1:
4c:f8:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:18 2025 by rpki-client