Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
File: OhbEBL_tNHJEowpa__ZuSZKqKCE.mft (raw, json)
Hash identifier: Lf4EsSzAJlzK/joWjPgXAHXjVaOPRGabuPaQmxNOiws=
Subject key identifier: BA:3A:95:ED:BC:50:3B:D4:28:54:47:2C:75:C4:BC:F0:95:9B:9A:B3
Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
Certificate issuer: /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821
Certificate serial: 040D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
Manifest number: 0407
Signing time: Fri 31 Jan 2025 00:31:29 +0000
Manifest this update: Fri 31 Jan 2025 00:31:29 +0000
Manifest next update: Fri 07 Feb 2025 00:31:29 +0000
Files and hashes: 1: OhbEBL_tNHJEowpa__ZuSZKqKCE.crl (hash: fOZYi7Eiraq5Q3WlJ+S5Sv/WQVDqY3e7g4WQTu+agow=)
2: 9D77DCA4599A11ECA574BF52C4F9AE02.roa (hash: /fF1tdSaYFH2w1w+0HXHgYqEthaF4A0sGCD2uCBxpiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821
Validity
Not Before: Jan 31 00:31:29 2025 GMT
Not After : Feb 7 00:31:29 2025 GMT
Subject: CN=679c19e1-5bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:ad:44:62:1f:18:02:9f:53:3e:fc:23:8e:
b7:9f:8b:00:49:1e:f9:c3:45:7e:83:bb:ca:0d:99:
1c:89:af:c9:b5:24:f2:60:4c:8b:79:34:7d:5b:a9:
40:6c:ca:cb:e8:6d:6c:b7:40:1f:69:f7:60:a6:d5:
59:ba:e2:ca:68:33:5e:b0:b8:96:c9:2f:6b:e2:c3:
ac:5d:57:81:e4:b5:f8:5c:44:69:76:5f:ea:00:75:
77:ba:56:48:c0:e7:b4:41:8a:1f:ce:d6:f7:17:9d:
12:57:97:fb:64:02:42:87:42:72:89:aa:b5:82:d7:
82:12:5e:63:90:2e:e2:c9:f9:11:00:d8:a1:d7:e1:
6f:f9:50:6e:d6:58:cc:35:58:91:31:62:51:77:ba:
14:3f:f6:b7:b7:67:88:86:6a:7e:22:74:4f:07:05:
90:1c:97:69:59:aa:1e:16:00:f2:39:6b:6f:3f:57:
f2:88:82:2e:40:7b:0b:a7:9c:bf:1b:ab:4e:fc:f7:
46:9d:9e:76:5d:52:f8:2a:ac:17:41:24:4f:c8:89:
66:9c:4f:da:38:1f:7a:16:a2:1d:af:55:96:9e:f7:
c3:55:93:39:d4:56:fe:76:ce:9d:40:c8:45:5c:fd:
a4:54:b6:70:46:a9:7f:e3:63:48:0c:4b:fe:b3:13:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:95:ED:BC:50:3B:D4:28:54:47:2C:75:C4:BC:F0:95:9B:9A:B3
X509v3 Authority Key Identifier:
keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a2:b8:de:47:f5:e3:2b:80:4c:f3:0b:d0:34:6b:a1:5a:f2:
64:25:7b:cc:3b:f7:2d:c7:18:16:0d:8e:0b:02:56:16:dd:37:
38:40:6b:87:b9:ce:3e:83:95:0b:bd:d1:d6:4b:da:85:91:ec:
5a:81:9f:5b:f9:06:cb:f5:2f:b0:bf:17:7b:dd:50:3c:e0:68:
b6:de:eb:e8:29:e4:70:43:d1:04:00:30:32:4f:90:fd:66:8f:
c8:69:1e:82:ac:23:9a:c0:6f:c3:da:e5:98:1f:83:64:5a:7a:
b4:7d:8b:51:f9:2a:1f:83:2d:af:74:02:04:02:87:18:21:c0:
d5:86:d7:72:8e:d6:6c:66:14:1a:84:db:08:17:12:e4:0c:6f:
e5:29:ef:de:ab:dd:52:af:04:5b:ea:67:15:ae:70:bb:ea:29:
aa:f2:3a:0d:7a:11:a0:2c:17:13:80:7b:ab:cc:1a:56:d6:d4:
e1:15:06:1a:5f:97:11:24:45:6a:1c:b6:8d:00:98:20:80:91:
cb:23:95:1f:4a:0f:b7:ce:2a:2a:78:47:a0:55:97:37:7c:a6:
88:a9:0c:40:34:2e:91:be:20:f8:92:d2:09:0a:cb:03:5e:62:
ac:74:bb:51:c8:67:97:e9:ee:cd:9b:92:28:f3:6a:30:a1:66:
7e:3f:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:44 2025 by rpki-client