Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
File: OochbBWSc79Rk0f8H-5wYZXMKuY.mft (raw, json)
Hash identifier: zQUsLZHvzATfn3uNUW6mU311AnQqaU+x+XVM4XNrGv4=
Subject key identifier: D3:2E:0F:56:5B:0F:49:0D:16:A9:6A:97:DB:09:0F:53:E4:12:5B:3B
Authority key identifier: 3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
Certificate issuer: /CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Certificate serial: 065E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
Manifest number: 0653
Signing time: Thu 30 Jan 2025 22:28:18 +0000
Manifest this update: Thu 30 Jan 2025 22:28:17 +0000
Manifest next update: Thu 06 Feb 2025 22:28:17 +0000
Files and hashes: 1: OochbBWSc79Rk0f8H-5wYZXMKuY.crl (hash: ut1ZWuTwkdEwUfOKMvPfZoDHgstf0LElXoEYHlY9QI4=)
2: AABC79100EC411EF858B5255C4F9AE02.roa (hash: xd+kZGDM6lidBL503M6KRPrbZpmB555muvLLsOdJRog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C661C/serialNumber=3A87216C159273BF519347FC1FEE706195CC2AE6
Validity
Not Before: Jan 30 22:28:17 2025 GMT
Not After : Feb 6 22:28:17 2025 GMT
Subject: CN=679bfd01-7ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d1:0c:e3:f0:cf:e9:ab:04:91:2b:1a:75:94:
f8:9d:79:e7:91:36:92:a9:15:90:03:74:9e:76:d8:
93:f0:65:89:1b:6e:05:ec:26:3a:e8:24:59:52:e2:
f9:33:ac:96:1e:17:4c:3c:2d:c2:33:54:28:46:34:
9c:32:0c:84:fe:bd:85:34:67:cf:57:90:bd:aa:cc:
16:88:42:39:61:e7:ba:88:18:ee:0b:80:c4:95:ff:
a8:48:c0:ce:ae:07:a4:5d:10:c6:72:4b:ec:79:87:
59:ec:98:e3:4d:be:46:57:30:31:ed:22:9c:7d:80:
44:92:4f:c0:9e:c7:b9:05:2d:8a:de:40:1e:76:8c:
14:26:26:88:dc:11:76:00:4d:9e:d0:13:02:74:ae:
36:c7:3c:a5:e4:d1:b7:89:aa:43:5c:3c:de:77:78:
06:84:aa:09:15:1f:89:1a:6d:48:7f:e0:a8:c2:a2:
9c:04:87:72:71:91:98:00:ad:e3:46:98:f9:68:0c:
dd:89:58:20:95:0d:34:74:5e:41:31:be:02:56:26:
1b:db:70:6b:df:9b:a5:44:57:cb:b3:09:ae:1d:fb:
e1:ed:4d:cd:cf:92:3b:4d:e9:c5:7e:a7:d4:fe:3f:
77:83:bc:9f:b2:45:53:66:b6:64:32:94:34:7f:2d:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:0F:56:5B:0F:49:0D:16:A9:6A:97:DB:09:0F:53:E4:12:5B:3B
X509v3 Authority Key Identifier:
keyid:3A:87:21:6C:15:92:73:BF:51:93:47:FC:1F:EE:70:61:95:CC:2A:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OochbBWSc79Rk0f8H-5wYZXMKuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C661C/F4592992737211EB9475CA5DC4F9AE02/OochbBWSc79Rk0f8H-5wYZXMKuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:de:a4:53:35:aa:ad:f9:73:9a:cf:78:d3:08:a8:a3:65:b2:
ed:7d:56:d1:3d:7e:80:4c:20:6b:36:e4:45:4e:00:bf:63:67:
6e:fb:8e:38:64:4d:7d:16:0e:38:12:bd:8d:4d:35:b5:b0:a1:
d0:a1:15:33:70:ad:69:4f:4e:ea:1e:03:c9:ed:3e:1f:26:48:
39:28:d9:1f:f1:cd:56:fb:78:8d:ff:f8:56:fc:c0:41:a8:3d:
b6:58:49:36:0d:41:8d:93:c5:cc:7c:9c:fb:74:be:06:db:de:
3f:bd:b2:66:20:ed:4f:c8:a4:2b:79:2f:d4:5c:79:ef:ca:a7:
3e:fa:cb:23:3b:8e:6c:da:79:63:21:8e:73:a6:4f:20:47:c2:
54:26:82:c1:41:01:d0:e0:8f:a3:8b:98:cb:c9:44:1b:b6:93:
90:e7:82:11:96:39:0e:f6:8f:a3:2f:7f:81:a1:9b:7f:15:ed:
14:e7:a8:03:23:5a:95:25:c5:1f:f4:31:f0:cd:6f:46:b9:d3:
f9:02:1d:06:87:a2:82:0e:02:62:3d:7a:ab:04:60:da:eb:24:
82:35:3b:f7:b2:d0:54:f8:1c:c2:a5:ef:dd:7e:9c:72:a9:e7:
60:6b:d1:1d:8a:3b:81:51:ae:bf:71:72:d4:d7:3c:a4:a0:02:
7f:cf:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:54 2025 by rpki-client