Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
File: oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft (raw, json)
Hash identifier: drtpL6+asKdkXJ5zWJzRnv73n0JQNnop2JBiUdqUsZE=
Subject key identifier: 76:33:50:C5:9C:22:9F:B6:8D:22:DE:28:53:00:7B:BD:2E:9B:9F:DB
Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
Manifest number: 0253
Signing time: Fri 31 Jan 2025 02:16:16 +0000
Manifest this update: Fri 31 Jan 2025 02:16:16 +0000
Manifest next update: Fri 07 Feb 2025 02:16:16 +0000
Files and hashes: 1: oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl (hash: 32jc/ul7OmASc0UTsGCTgJaLUF0kYt3cDsecKyOqz6U=)
2: F2C774B2AEF611EFB2FDA54AC4F9AE02.roa (hash: E3jdAv1bCMzb7IYg3TqO8Epjql+e1J7Ssimn4jMQAyk=)
3: 177A0A42AF3B11EF8991021DC4F9AE02.roa (hash: LUugMgqb/XztTcKwryEONjOJivWLzeqaL8qrbsWHaR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Validity
Not Before: Jan 31 02:16:16 2025 GMT
Not After : Feb 7 02:16:16 2025 GMT
Subject: CN=679c3270-934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:fe:e1:aa:5f:53:70:66:28:ab:00:cc:8d:
5d:a3:eb:5e:4a:02:f4:dc:65:51:fd:ff:bc:89:dd:
c2:2a:c5:c8:e2:54:2e:b0:b2:fe:07:61:fc:e8:a9:
71:60:04:1b:26:36:8c:16:a3:51:8f:27:32:0c:f7:
2a:fe:64:ab:e4:4e:e3:4a:2e:24:0e:d8:67:c7:b0:
64:10:20:e7:de:9c:41:ad:d1:e8:e7:be:7b:7f:fb:
3d:8e:a0:0f:40:b7:6a:56:50:9e:b6:39:3c:62:2f:
d2:a6:fd:5c:9d:05:ec:20:21:78:90:cb:91:04:c2:
93:af:85:19:62:3d:46:35:85:05:69:3c:f1:3a:7d:
29:94:f0:c4:2a:ce:af:c0:63:39:08:44:42:82:46:
aa:f5:ed:c7:2e:fe:48:f5:79:8d:91:e9:0e:bf:63:
c1:ae:b4:c2:1b:11:59:0a:d3:e7:5a:e6:0f:85:e0:
8b:e3:7f:44:eb:ec:de:7e:33:cb:17:2c:f1:61:d0:
8c:27:75:0e:85:14:af:3e:cf:32:c0:f8:33:34:3e:
13:f9:65:46:87:54:92:85:9c:a5:c1:bb:e5:10:9f:
a3:9b:bb:ed:5d:a9:88:cb:48:b1:ff:da:ad:75:97:
f9:e1:7b:4f:b2:3c:09:e0:08:3a:22:e6:bb:08:62:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:33:50:C5:9C:22:9F:B6:8D:22:DE:28:53:00:7B:BD:2E:9B:9F:DB
X509v3 Authority Key Identifier:
keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:31:52:b1:52:52:50:a2:bf:d5:1b:05:9e:f0:88:05:8c:48:
0b:da:0f:6b:55:9a:af:20:7e:78:24:85:c9:1f:78:51:34:5a:
4d:2a:3a:0b:8e:87:fc:90:fa:3d:7d:46:8b:54:f3:8f:f9:f8:
d2:cb:8d:93:00:fd:0f:75:da:ae:c9:cf:c6:59:e2:c4:0e:33:
5e:3b:a0:05:ed:69:63:94:0a:21:ac:2e:17:18:85:4b:9b:32:
da:c5:7c:11:1c:d2:ee:46:99:e5:cd:4f:1d:b8:7e:d8:97:5e:
fa:67:3f:8e:fd:d8:13:47:c5:5d:52:8b:71:00:e2:96:1f:a6:
48:b9:67:f9:f3:39:9e:19:df:a1:ac:8a:28:1f:f6:10:3b:90:
88:05:ed:a9:c9:70:71:74:0e:4b:40:92:38:fc:dd:08:7a:e1:
c8:93:16:cc:b7:4a:b3:1e:37:05:6a:d7:b0:da:b0:9d:62:cb:
ae:c7:43:97:18:d0:73:5a:f6:9e:49:d0:8f:20:f1:16:f5:72:
c1:12:be:df:1f:93:ed:38:3c:f9:3b:e9:ed:f0:fd:3f:84:8c:
d2:a1:9b:1f:c6:3a:2c:55:76:e2:18:cf:56:94:36:fc:f2:ce:
48:94:9b:32:bc:34:de:63:fc:21:cd:ac:be:4d:44:d8:8e:ff:
40:a5:15:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:38 2025 by rpki-client