Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
File: O0eqDQMgkZXwVVxgreMpTy03oqE.mft (raw, json)
Hash identifier: IhzF1CmiyPRt7H+Xjlhxx79i3Z4Y0gI24lomb7+QVX4=
Subject key identifier: 8F:E4:96:82:9B:AD:36:79:C3:C3:CF:81:97:14:E3:3F:CC:91:BD:6D
Authority key identifier: 3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
Certificate issuer: /CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
Manifest number: 026A
Signing time: Fri 31 Jan 2025 01:47:43 +0000
Manifest this update: Fri 31 Jan 2025 01:47:42 +0000
Manifest next update: Fri 07 Feb 2025 01:47:42 +0000
Files and hashes: 1: O0eqDQMgkZXwVVxgreMpTy03oqE.crl (hash: J+/V14lHc7eJuoE7+1OPb/LIMILfElLFANWKrPD+TGo=)
2: C78C216A070211EDB5178252C4F9AE02.roa (hash: m2ymxbp9bibtqYct6a7VfehiW03KNEWGSV8uvf4S5FQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3873/serialNumber=3B47AA0D03209195F0555C60ADE3294F2D37A2A1
Validity
Not Before: Jan 31 01:47:42 2025 GMT
Not After : Feb 7 01:47:42 2025 GMT
Subject: CN=679c2bbe-90ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:96:5b:bc:49:cf:27:40:53:e7:0b:5d:43:
12:d6:a5:6c:43:50:c0:cd:9c:0d:0b:a7:f0:0f:63:
ec:97:1a:f8:ab:21:64:47:98:2e:78:51:b1:7d:3d:
ea:09:cb:c0:cd:9f:52:31:ff:b8:e2:07:fd:98:2d:
14:bd:07:3d:64:ab:c5:1a:dd:cc:dc:a9:4b:fa:a2:
60:d4:b9:73:bb:39:fb:d7:5a:bb:d4:12:1d:4b:39:
41:58:c8:ac:95:93:06:77:eb:c6:b6:14:72:d1:9a:
60:da:50:ed:9a:66:c9:ef:c8:26:e9:cd:e3:22:2d:
81:69:54:da:ee:13:8a:37:2b:5d:4b:a2:6d:36:98:
03:aa:07:b1:a9:57:0b:e9:1a:09:7a:8a:f7:1f:3d:
11:38:b8:a9:71:8e:6c:6f:85:2c:a0:cb:31:f3:c9:
77:9b:c1:05:79:c2:4c:81:57:ed:98:84:91:08:94:
ed:c6:30:d7:f9:9a:de:84:cc:ce:37:0a:3a:09:84:
dd:98:21:0a:73:aa:a0:4a:a5:7e:36:0f:b9:4d:4a:
c8:b7:e6:68:82:a1:9c:51:98:d0:57:11:4b:4e:61:
22:e5:99:0e:9b:a4:c7:c2:ab:e1:14:70:7a:ee:70:
e7:da:ec:f1:f8:05:42:e7:8a:64:4c:3b:12:a2:f2:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E4:96:82:9B:AD:36:79:C3:C3:CF:81:97:14:E3:3F:CC:91:BD:6D
X509v3 Authority Key Identifier:
keyid:3B:47:AA:0D:03:20:91:95:F0:55:5C:60:AD:E3:29:4F:2D:37:A2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0eqDQMgkZXwVVxgreMpTy03oqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3873/112EC196FDB811EC8E386913C4F9AE02/O0eqDQMgkZXwVVxgreMpTy03oqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cd:d1:f2:9c:78:3a:21:a6:dc:f9:23:79:e4:d8:d7:cd:f5:
4b:00:d6:21:01:f5:1d:cb:ec:32:f3:d9:7a:ab:12:a8:3e:47:
fc:ba:e0:46:5a:e2:a2:f8:ed:7c:48:b1:c2:fe:91:a1:70:b7:
b1:67:e5:cb:99:b3:c4:3f:35:9c:72:0f:a7:63:0b:ce:59:a1:
43:79:bb:be:3a:a2:e8:fb:8b:20:2e:40:0b:51:5e:7a:ea:30:
57:d6:62:5d:d1:15:2b:11:f6:96:54:8c:88:8e:2f:43:e3:5f:
b7:52:70:ed:1b:1f:85:3c:71:36:57:e6:11:4d:de:5f:8a:21:
da:f5:26:91:cf:db:c4:09:d6:ac:d6:13:22:d5:15:8b:46:3a:
57:2f:21:cb:69:b0:6a:f0:b4:e2:ae:5b:77:ca:1a:45:e3:71:
4b:89:bc:38:36:5f:ed:23:70:31:51:01:70:14:f4:c3:60:41:
2c:8b:27:2c:30:a5:f1:38:4a:07:3b:9e:a2:75:e1:e7:6e:88:
b2:e3:e2:78:0c:b7:cb:46:c4:a8:7e:77:77:bd:83:c7:e4:d8:
8f:e8:6c:6f:5e:79:72:f2:ab:0e:da:d1:dc:3e:0c:c9:f0:5e:
7f:0c:51:08:89:ad:1a:22:ba:d7:cd:b1:73:fd:97:3e:7f:a5:
c8:e3:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:35 2025 by rpki-client