Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json)
Hash identifier: qTOPqW8AMRzzRKyLR2xCYnPcRMLG6+qFpSpY6dtQww4=
Subject key identifier: D2:B8:7E:FC:29:DE:E2:36:F2:69:DF:2C:41:34:FD:B5:F5:45:CC:65
Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
Manifest number: 0182
Signing time: Fri 31 Jan 2025 02:57:10 +0000
Manifest this update: Fri 31 Jan 2025 02:57:10 +0000
Manifest next update: Fri 07 Feb 2025 02:57:10 +0000
Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: Tw221sycynBTKqo5grsbA4cqjJx+kdH8p2OYyR5rg9c=)
2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287
Validity
Not Before: Jan 31 02:57:10 2025 GMT
Not After : Feb 7 02:57:10 2025 GMT
Subject: CN=679c3c06-bbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:05:a2:f3:d1:4e:c7:14:2c:62:b0:52:4f:
7e:4c:f0:4a:b0:5a:2e:47:d4:21:bd:c6:a7:84:d8:
b1:ab:43:82:06:2d:46:b1:93:f7:4e:a9:9d:37:03:
27:30:1f:8b:a7:0f:0e:3e:db:6d:c1:c3:d6:ba:30:
90:d2:20:bb:bd:84:a5:39:02:a6:93:1a:fa:95:c0:
3d:27:ad:75:8d:c9:55:12:ec:4a:14:53:a5:84:99:
b4:1a:09:25:7e:68:75:03:bf:17:04:b1:0b:e0:12:
ec:e1:d1:d3:80:89:97:6a:bb:00:a5:82:a4:56:6d:
13:30:f2:80:3e:fc:86:aa:93:a4:c9:2b:ca:a3:fe:
72:fc:12:1f:83:fc:be:07:12:66:29:e4:16:5f:0d:
6a:05:a0:14:e0:fc:34:77:9f:81:eb:61:7e:d8:8d:
88:f0:66:ef:e6:ad:f1:4a:e0:45:d6:58:5b:d6:b0:
5e:63:2f:e7:3a:e5:19:eb:36:78:0c:24:e3:49:d7:
4b:8b:b1:a5:c9:44:72:9e:17:1f:f0:e7:26:94:41:
5e:bb:4d:a1:72:9c:98:58:0a:45:24:e6:65:fe:2e:
c4:e9:a6:2f:f7:0d:c5:10:b1:8d:60:5a:08:89:f8:
08:69:24:c4:a8:50:66:c5:95:fd:45:8c:5e:ed:6d:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:7E:FC:29:DE:E2:36:F2:69:DF:2C:41:34:FD:B5:F5:45:CC:65
X509v3 Authority Key Identifier:
keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:57:77:16:60:7b:c3:d6:0a:cd:b5:17:6e:ce:f9:d3:09:
73:9f:28:62:6b:51:5c:a7:13:7a:7c:5b:de:db:57:54:ec:4e:
aa:0c:b6:d6:96:7b:ab:cc:94:f9:cc:61:5a:a4:8c:aa:ac:23:
e9:69:10:c7:75:0f:9f:26:6e:12:e9:7f:0e:c8:fd:41:a1:a8:
23:fb:26:27:15:90:90:f8:a5:2c:ed:a5:09:d4:ed:7f:fa:0b:
c8:21:cb:13:0d:22:ac:6c:eb:dc:21:d8:1f:c8:db:39:5a:c2:
13:33:d4:c8:02:5b:d3:d1:9b:48:dd:2d:b0:6a:82:58:40:5b:
c6:09:11:76:d6:78:56:11:f5:9e:83:14:c9:76:08:0f:e5:40:
93:50:bd:bd:cb:04:4f:c8:cb:8c:59:bf:df:ce:8a:fb:13:b8:
3b:fa:e9:ab:31:57:51:a6:e1:c9:07:2c:a3:0e:32:c5:b8:c2:
aa:01:e5:4d:30:15:75:94:ce:2c:64:f4:30:fa:be:a1:15:41:
6a:88:78:9a:dd:62:e1:bd:b1:fa:5f:ca:3e:1e:72:df:97:eb:
29:4f:e8:8e:07:29:59:da:7b:74:bd:63:e4:db:6b:b7:4e:c1:
b5:9a:72:df:1f:24:8b:d7:5b:e1:11:29:20:c0:cd:22:e8:1d:
c6:09:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:03 2025 by rpki-client