Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json)
Hash identifier: lzjTVty/8TtXOfhpWUpafU7hLejLk/ch/4m0x4vhQds=
Subject key identifier: BB:3D:89:FA:BE:CB:24:83:DA:CA:57:99:AB:55:4D:47:B7:AF:91:CB
Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Certificate serial: 0C6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
Manifest number: 0C61
Signing time: Fri 31 Jan 2025 18:11:12 +0000
Manifest this update: Fri 31 Jan 2025 18:11:11 +0000
Manifest next update: Fri 07 Feb 2025 18:11:11 +0000
Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: /3VAdcYzNIx3T6cYcR1f4SYNScYEEzYQG6H7ZTiSGNk=)
2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: Anh2GximFPk7REReNBXULcTH3P6lLG5IbasX9kKM4Fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3178 (0xc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Validity
Not Before: Jan 31 18:11:11 2025 GMT
Not After : Feb 7 18:11:11 2025 GMT
Subject: CN=679d1240-4b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:d0:56:ef:cf:8d:6b:a0:24:53:bd:ef:83:
13:23:b1:8a:1e:d9:c1:8b:a5:dd:bf:d8:00:21:07:
ba:e5:7d:33:28:9e:30:24:77:0c:db:08:d6:df:04:
92:a6:16:1a:6b:cb:5f:f9:94:f2:07:1d:c7:35:f4:
15:f1:93:69:87:08:27:ef:a4:9c:b3:43:40:95:b9:
ac:dc:08:7c:22:55:0a:90:a2:29:6d:34:24:e9:bc:
e4:17:7f:db:ea:6f:b6:38:9e:1a:02:b0:cc:7f:c9:
8a:02:21:46:3f:cd:2b:3a:de:63:d6:a4:6e:b0:2b:
be:62:b5:5a:52:0f:e2:f2:06:98:55:14:70:a6:c0:
e9:14:58:d2:67:77:d3:67:fb:95:35:b7:42:de:e5:
25:d4:a1:6a:3e:47:5d:6e:c9:50:29:da:50:bd:31:
0d:ca:a3:af:09:60:a1:d9:39:c9:47:2b:42:e5:55:
6d:46:83:e0:3c:7d:bc:75:1e:29:73:3c:ad:31:d2:
84:4e:aa:f1:62:76:46:76:c8:c7:5a:ca:07:74:45:
09:2f:4e:7b:da:98:86:d5:8c:c5:fb:2d:aa:53:f1:
2c:e5:cf:8f:e0:9e:c0:e9:9f:40:2c:44:ca:3d:c7:
3d:60:d6:0d:52:89:52:d4:9f:61:36:b6:5e:17:2e:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:89:FA:BE:CB:24:83:DA:CA:57:99:AB:55:4D:47:B7:AF:91:CB
X509v3 Authority Key Identifier:
keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:ec:cf:ef:5a:e6:eb:b7:c6:35:fc:0c:77:c7:87:2d:7a:
e4:d8:80:1c:a5:30:5e:55:cb:7e:44:23:19:0d:68:fb:64:3d:
69:db:71:5e:8d:7e:09:8a:46:9d:17:d9:86:e6:5c:bb:f5:5e:
81:92:96:62:cc:ba:59:0c:14:fd:49:93:18:48:29:c5:92:73:
ba:a2:a0:ed:da:87:32:56:e7:24:0b:22:82:41:12:a8:a6:86:
bf:b8:67:90:5b:c0:fd:26:da:2e:2f:4b:cc:61:f7:17:30:1b:
7a:6e:c1:e8:0d:d4:5f:f9:f7:d2:69:b8:83:3d:da:4c:9e:87:
a8:07:0a:d9:82:6c:a8:d8:6b:36:94:0a:f0:c9:4e:22:be:58:
f3:48:37:69:32:c2:4a:71:d1:7b:90:93:1c:79:4b:0e:0a:18:
ba:4d:4d:6a:43:cb:2c:3e:ff:05:e8:0c:67:05:bd:73:f1:fc:
cd:13:71:c1:fe:ce:b1:38:e9:0a:49:38:c4:b0:25:fd:0e:e9:
96:4a:bc:e3:46:ec:d0:22:83:bf:b5:c7:1e:0c:59:7a:a9:67:
e9:98:c1:93:81:50:99:9d:7b:b9:41:a6:94:fa:6a:de:53:49:
61:31:59:b0:ee:6f:14:26:ab:8c:58:e0:05:3a:a1:9e:01:42:
94:a2:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:11:59 2025 by rpki-client