Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
File: ogavyWamnnC0ibOPEEg9wfpdPiI.mft (raw, json)
Hash identifier: yyLDwkc9ypsZqOv1Kh9TDtM1vKWCme7eCuQ/CZn3VB8=
Subject key identifier: EE:BB:EB:85:EF:92:AD:E2:63:82:DE:4F:8F:AD:B4:9E:68:9D:A7:B9
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Certificate issuer: /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial: 0399
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 00:51:00 +0000
Manifest this update: Fri 31 Jan 2025 00:51:00 +0000
Manifest next update: Fri 07 Feb 2025 00:51:00 +0000
Files and hashes: 1: ogavyWamnnC0ibOPEEg9wfpdPiI.crl (hash: I+qaNhiNDMrH/XbmjR/OWVqrp8YiFJsy6dFB8jUCNZs=)
2: F7335D9484D911EC89E5246EC4F9AE02.roa (hash: hPj+FOHLM41uPB7JyaWiRmNTCoGfo1f3eHc89Ap82eY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Validity
Not Before: Jan 31 00:51:00 2025 GMT
Not After : Feb 7 00:51:00 2025 GMT
Subject: CN=679c1e74-fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:9e:2d:8b:53:b9:40:4e:dc:19:3b:64:6b:
60:c8:30:ed:7b:fa:ba:5f:8e:d2:6c:59:98:d3:d8:
6f:5d:94:27:6f:fd:84:fe:71:d7:28:37:d5:f0:49:
98:67:b5:a9:cd:8d:2e:36:de:81:11:a2:4a:d6:d3:
de:b2:8e:d7:55:61:dc:b0:22:ef:59:0c:dc:53:ac:
ae:2a:19:3c:6c:13:86:f5:e0:06:12:64:d4:28:d5:
3b:3a:03:d1:27:0a:00:13:8e:bd:0f:8b:5d:62:7c:
07:d8:0d:9f:d2:7d:eb:a5:f6:3b:c0:58:a0:48:ca:
d8:21:75:76:a6:4f:99:89:ee:f9:70:6a:37:25:05:
d5:bd:e6:92:74:f8:04:79:a5:98:1e:ed:97:54:4c:
63:a4:11:76:29:de:e6:ef:a9:bd:5f:d3:0e:e8:03:
49:6b:b7:58:99:09:90:f0:29:a0:5a:ed:42:83:ed:
89:66:70:de:17:85:b2:eb:d9:ba:11:3f:d8:19:dc:
74:7c:c8:84:07:dd:cb:f9:0f:a8:be:bc:38:4f:b6:
0b:23:1f:07:1a:a0:c0:a8:fe:b3:c7:26:5b:7a:71:
ef:43:a0:0b:43:ee:00:bc:c7:a2:7a:f3:91:fe:fe:
21:9c:88:ee:f8:85:36:38:db:5b:9d:68:82:9a:ca:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:EB:85:EF:92:AD:E2:63:82:DE:4F:8F:AD:B4:9E:68:9D:A7:B9
X509v3 Authority Key Identifier:
keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:80:38:e6:84:85:61:47:ab:18:0e:cd:f6:1a:61:e8:f0:c5:
c5:2b:7f:69:d3:a9:c0:a8:77:50:3d:37:06:76:bb:bf:82:2b:
aa:84:0b:29:96:d2:8e:54:34:f5:50:f2:f2:df:8a:37:79:9b:
70:e8:e3:45:db:b0:83:81:c2:0a:dc:5d:09:56:05:b4:e8:49:
6a:b5:6c:c6:8c:e5:b8:9a:f5:4a:f8:ef:95:5e:43:4a:69:5d:
13:36:12:92:c7:6a:cc:d8:74:39:f7:e2:cc:7d:81:b8:7c:83:
6d:1a:65:cf:a6:1d:7c:ea:de:8d:5b:42:31:17:8f:2f:5e:c7:
9a:15:31:79:cd:c9:4f:0c:58:4c:b2:41:45:29:0d:2b:92:f9:
2a:a2:85:d2:3a:da:4b:a9:81:62:95:9f:cf:9f:e2:fc:65:81:
77:04:10:94:44:c5:4f:bf:96:91:01:5a:c1:cd:af:6d:e8:23:
6b:e9:ba:4d:43:6b:cc:b2:c1:77:4f:a0:5e:cb:9c:2e:eb:bf:
a4:4b:04:46:26:d7:f0:7f:7a:a2:af:80:8c:f1:ff:41:f1:79:
f1:2d:66:11:98:b4:f3:0e:22:25:c4:8f:43:47:16:f8:de:14:
e7:78:a5:c4:27:b3:a6:21:ca:8e:00:1d:cb:f5:40:86:06:e5:
aa:2c:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:43 2025 by rpki-client