Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier: NPJZq56R0ziB4BX7Z1is3ZlTRPFYGqF5G7/TvyddEhk=
Subject key identifier: 8B:E8:78:7B:F5:73:3E:4D:5D:5E:2C:19:42:16:98:C7:51:DD:1D:68
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial: 0F70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number: 0F68
Signing time: Fri 31 Jan 2025 17:32:27 +0000
Manifest this update: Fri 31 Jan 2025 17:32:27 +0000
Manifest next update: Fri 07 Feb 2025 17:32:27 +0000
Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: vXVQfLVuYpCjxzwOawa8LN3a7vchf+bmvCKhAfzSAR8=)
2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: 4lBnHy42IrC+CuFwqVAzKyt4CMy0vA1UroTjFuzkrh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Validity
Not Before: Jan 31 17:32:27 2025 GMT
Not After : Feb 7 17:32:27 2025 GMT
Subject: CN=679d092b-8b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9f:aa:6e:93:ae:04:f1:21:6d:3f:09:1b:eb:
0b:e8:1a:18:39:e7:82:36:7d:83:03:df:7e:b4:66:
58:ec:21:6e:3e:96:dd:18:46:fb:9a:c7:73:0b:46:
f9:c3:03:0a:da:c0:79:66:09:ca:f7:5c:e0:7f:00:
80:df:6b:4c:58:e0:fc:77:1f:68:53:68:57:05:3a:
b7:4a:75:7b:da:39:64:e5:02:eb:89:f2:dc:04:99:
98:6c:97:aa:67:8a:56:ae:8b:25:f2:4d:c1:03:0b:
77:bc:56:74:35:64:b6:e2:ad:ea:7e:00:5d:cd:72:
5e:8a:81:c3:49:03:9f:6f:a8:9c:74:64:48:3e:dc:
e7:73:32:04:93:07:b5:44:59:bf:a7:aa:ab:ea:ab:
00:4f:1d:06:9c:15:3c:e8:43:b3:9d:8b:c0:44:32:
ab:62:e6:71:01:1a:7b:a5:97:bd:fa:2e:f3:0b:a5:
25:9f:93:b8:75:87:9b:5d:f4:92:d5:0c:c7:c4:09:
13:9e:cd:10:c7:ff:48:6b:e8:15:4d:f0:42:86:e9:
d2:76:c6:80:d5:df:61:92:5b:67:da:2c:bf:28:9b:
fb:24:38:29:00:d6:c8:4f:fb:0b:17:75:02:3a:0f:
e9:5c:23:a8:c3:e4:59:63:81:6a:92:d1:91:a1:ac:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E8:78:7B:F5:73:3E:4D:5D:5E:2C:19:42:16:98:C7:51:DD:1D:68
X509v3 Authority Key Identifier:
keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:26:ed:8b:61:45:d8:ae:ca:b7:47:a5:12:c2:90:93:40:db:
e8:bb:29:0c:ad:b1:d5:3c:62:ad:81:fe:b4:51:3d:62:e1:dd:
88:b6:95:26:97:7d:1f:99:41:9c:ef:0d:c9:42:d7:c0:3a:f6:
bc:76:b0:67:a8:a2:9e:1b:75:56:de:c0:9a:0b:ff:37:df:27:
90:83:1f:a5:fa:e0:92:c8:40:a5:87:3f:8a:8b:f8:2e:f1:28:
f7:9f:6c:14:ea:d5:b2:eb:2c:c7:b4:fd:8c:29:c6:87:6c:d5:
ae:9f:34:e9:3c:9e:a1:14:27:eb:70:e8:16:b9:b0:cf:fe:3d:
fb:e2:09:fc:10:e7:2f:2d:f0:76:95:8b:a3:2a:01:c2:c7:31:
d6:e7:ed:52:08:7c:fd:c7:77:a3:ce:90:8c:ad:67:25:30:84:
c4:32:83:ca:4a:f0:68:cc:b9:03:af:91:91:03:fc:52:d9:92:
6b:69:7f:6f:b3:fd:13:e3:ac:02:30:d8:aa:6f:b1:d9:25:bc:
07:64:5b:25:05:c1:4d:14:14:6f:19:b4:0e:ab:46:f6:27:f4:
10:8e:99:79:4a:ea:30:b7:88:12:b4:0b:f2:54:14:06:1d:46:
3f:f8:f3:58:f0:d9:52:87:9e:56:72:bd:38:f5:89:da:ca:e5:
fa:3b:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:48 2025 by rpki-client