Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
File: _ONoVUVgesO8wzQNA5shaIJxJ74.mft (raw, json)
Hash identifier: OYp3PTT3UDaY+/lOT+03AMNVupNbDItkgD/wPuMyNv0=
Subject key identifier: AF:EF:30:EC:2C:88:16:7B:E1:37:C2:37:1B:05:AA:04:E8:D6:28:9D
Authority key identifier: FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
Certificate issuer: /CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Certificate serial: 07F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
Manifest number: 07E3
Signing time: Thu 30 Jan 2025 20:59:59 +0000
Manifest this update: Thu 30 Jan 2025 20:59:58 +0000
Manifest next update: Thu 06 Feb 2025 20:59:58 +0000
Files and hashes: 1: _ONoVUVgesO8wzQNA5shaIJxJ74.crl (hash: R496HpiUmsVSyVb06z+3C7JGWt6qiuhsfX1oCZmneRo=)
2: 3BF0A4D868F511ECAB15DE18C4F9AE02.roa (hash: ZWM4HJUjC3JgAEYknxCATq6PGI5BXk42LHpdEZQRJ0I=)
3: 51A7E3C28EB711EBB8A7B01DC4F9AE02.roa (hash: oVaIkIIp594wdZKn2XCmHgy069EyuIaCAvG8B279YGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040 (0x7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D02/serialNumber=FCE3685545607AC3BCC3340D039B2168827127BE
Validity
Not Before: Jan 30 20:59:58 2025 GMT
Not After : Feb 6 20:59:58 2025 GMT
Subject: CN=679be84f-6f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:1c:5c:c3:f6:68:d5:07:50:8c:36:c8:b2:
8c:2f:10:24:c4:ad:d2:40:e4:7a:1c:62:6b:f8:f8:
d3:5c:46:80:af:68:d2:43:24:7e:09:e5:bb:14:62:
78:4b:73:83:b8:b5:7d:c4:98:30:f2:35:df:8b:a4:
3e:c3:08:87:b5:0e:fd:22:a2:52:78:86:c9:16:fb:
17:83:45:ce:39:a4:0e:a6:73:8e:69:fc:b5:88:a9:
5f:be:18:76:09:68:e1:0a:2f:5c:75:1c:f0:cf:84:
82:b6:ce:c7:17:e8:51:4c:00:aa:59:13:1d:2c:3c:
29:99:27:9c:82:81:12:ec:af:44:85:74:d8:71:39:
de:bb:a7:8e:36:93:62:0a:e1:e5:d4:e0:29:67:b6:
02:36:ed:13:9c:5f:df:1c:89:f9:18:15:27:59:ae:
2f:06:c0:1e:06:94:41:1e:a7:87:fb:ca:68:42:e9:
33:c1:9c:a9:dc:77:80:0d:ee:9c:a5:98:91:e9:df:
ed:98:fc:a7:cd:e3:cb:8b:e0:65:cb:8c:f3:36:c7:
89:0e:73:19:86:f5:bb:ae:aa:dd:d0:87:89:4a:29:
d1:f6:5f:2f:ec:20:68:90:9e:62:98:7b:2d:f0:d7:
6c:b0:71:87:c7:2f:fd:59:4a:51:f2:98:22:aa:ec:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EF:30:EC:2C:88:16:7B:E1:37:C2:37:1B:05:AA:04:E8:D6:28:9D
X509v3 Authority Key Identifier:
keyid:FC:E3:68:55:45:60:7A:C3:BC:C3:34:0D:03:9B:21:68:82:71:27:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ONoVUVgesO8wzQNA5shaIJxJ74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D02/28A506FAD86711EA8B51620DC4F9AE02/_ONoVUVgesO8wzQNA5shaIJxJ74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:07:6a:01:0f:96:7a:7c:52:7c:6f:4d:3d:bb:1f:d0:d9:af:
9e:84:40:97:b8:d1:68:a4:e2:bf:7a:29:0f:94:b6:88:5c:b7:
6c:73:95:0b:55:c6:21:00:80:00:30:3a:2c:2b:56:78:fc:22:
96:3e:73:28:4d:62:0c:2d:ea:29:a2:da:6c:58:2a:1c:31:a4:
78:e3:26:b2:e0:29:27:2a:eb:2d:c6:c1:34:73:f4:e6:03:a0:
3e:e3:85:f0:6d:17:65:21:ef:40:f7:b0:9c:67:e2:29:b2:f8:
0e:cd:1c:71:9f:76:66:f1:de:1d:dd:36:16:58:a2:e7:cd:ee:
e9:a2:25:5b:57:d6:25:70:25:5c:6f:9f:ce:b4:ae:09:03:65:
f0:ab:f1:3d:0b:58:8b:85:98:38:45:62:b3:8d:1e:1b:ba:57:
85:31:59:c4:94:9b:b1:a3:a7:f0:06:5a:72:3b:bd:8c:d5:8a:
68:0d:fb:c6:96:fc:09:f2:d5:b1:b6:a3:01:46:db:35:9c:4c:
fb:e0:d9:48:47:18:82:e9:10:e4:94:d9:ea:95:06:65:7e:70:
6b:2d:73:36:8e:f9:b2:57:b1:85:2a:75:b6:4d:22:60:57:0c:
e6:ac:a5:97:1a:e5:5e:ad:63:b0:f9:f8:1b:1a:be:1c:02:ee:
55:b3:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:16 2025 by rpki-client