Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
File: Op4IQWhX5XRXw49Tbg1usjbf-2E.mft (raw, json)
Hash identifier: jIBAmo1+dsk1uKTlVI3AacS6SX+a5peRxWt/pg58TTc=
Subject key identifier: BB:56:19:7C:99:CE:59:B5:AA:58:A4:6A:74:9C:3B:59:E0:76:44:8A
Authority key identifier: 3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
Certificate issuer: /CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Certificate serial: 3560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
Manifest number: 34E2
Signing time: Fri 31 Jan 2025 14:23:44 +0000
Manifest this update: Fri 31 Jan 2025 14:23:44 +0000
Manifest next update: Fri 07 Feb 2025 14:23:44 +0000
Files and hashes: 1: Op4IQWhX5XRXw49Tbg1usjbf-2E.crl (hash: cjYiMb2Qf01mER3e0rIcY4NjSsPUaUd7YuEE4saZE2I=)
2: F99AB520FBC211EEBB321A7DC4F9AE02.roa (hash: 4AouT3t26agKQQf9QFNNf3GM+UsR/eCeJ+iR+acXWb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CED/serialNumber=3A9E08416857E57457C38F536E0D6EB236DFFB61
Validity
Not Before: Jan 31 14:23:44 2025 GMT
Not After : Feb 7 14:23:44 2025 GMT
Subject: CN=679cdcf0-a7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:51:06:7b:28:36:6b:e9:22:1d:80:11:e8:48:
5e:c4:e0:c4:74:3a:ae:50:4d:d2:13:b4:64:da:4d:
e1:25:c4:a2:52:4d:bb:7a:30:f5:56:e8:27:1f:24:
40:f6:41:e3:68:a5:ec:10:48:6b:50:b9:42:da:24:
f0:2a:41:6f:03:4a:d9:4d:cb:76:ff:dc:03:f6:2d:
9a:93:0a:7d:47:88:cf:90:70:6c:74:d5:6b:b2:54:
cd:54:38:83:f4:a0:c2:7a:cf:4b:77:40:52:2d:e3:
2e:d2:b3:ff:7f:bd:70:a5:dd:b8:84:e9:ae:f5:d3:
d6:01:88:b2:31:e1:14:f2:3e:8c:95:6a:6f:b5:88:
26:84:29:a4:30:39:63:04:1b:e4:78:6b:b5:05:f7:
75:6f:86:73:c9:30:eb:1b:9d:6a:51:92:be:08:1b:
a8:b6:8a:23:f5:5c:7a:88:0a:e4:d0:78:3d:9d:71:
05:14:ef:e5:22:4b:c1:ab:61:a8:b5:d1:e1:80:ab:
0d:ff:a1:4a:25:3b:5a:3f:0f:63:9c:fb:61:aa:de:
7b:af:bd:07:74:b5:45:ce:0f:2c:15:6a:12:8a:c9:
1f:6a:ed:1c:7f:1a:52:b8:fa:5c:5b:09:c1:5d:8f:
39:5f:cd:f0:2b:91:c0:bf:5f:67:66:34:07:30:29:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:19:7C:99:CE:59:B5:AA:58:A4:6A:74:9C:3B:59:E0:76:44:8A
X509v3 Authority Key Identifier:
keyid:3A:9E:08:41:68:57:E5:74:57:C3:8F:53:6E:0D:6E:B2:36:DF:FB:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Op4IQWhX5XRXw49Tbg1usjbf-2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CED/83F56DAC1D8411E2910689DA08B02CD2/Op4IQWhX5XRXw49Tbg1usjbf-2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:c8:12:5d:f4:1a:6e:f3:5e:49:20:a9:31:49:f9:11:4a:
0b:62:96:d9:52:18:51:f3:68:23:b0:7c:8e:29:a4:54:20:48:
b7:1a:92:1f:94:15:eb:b2:03:3d:f8:a4:70:bb:58:14:c9:b1:
d6:81:d2:cc:48:ca:18:68:36:05:a1:4f:49:da:64:eb:df:c7:
5a:0f:aa:82:47:8d:ea:62:cf:8c:37:eb:36:c3:86:a7:ad:1b:
d4:89:a2:67:94:29:c7:5d:80:cc:a0:0c:65:88:64:0b:0b:c5:
42:5f:d8:f4:c9:e1:fe:95:75:8e:44:7d:ed:8d:10:f5:f4:9d:
cc:19:fa:a8:ee:37:5d:9d:96:76:57:48:ff:7c:eb:2e:2a:14:
55:1c:2d:86:2e:6e:70:66:32:85:9c:57:00:8e:50:a4:bf:80:
69:13:1b:8d:ae:a6:77:2a:0e:e0:66:99:b3:b8:f2:b1:a6:3e:
d4:e2:29:05:96:04:73:f2:35:f1:8e:67:54:a2:39:24:77:56:
ff:51:ac:e9:cb:6e:31:33:13:da:6c:1a:e6:37:92:ba:47:61:
a8:1b:ae:e1:ec:f5:68:8e:00:27:2a:06:da:33:b0:bc:82:35:
c6:51:4c:45:c3:c0:d4:b7:81:e6:ca:9c:ea:68:df:a0:4e:b1:
dd:2b:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:17:00 2025 by rpki-client