Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
File: oDlpuv_Weqt11JODf6HHxp_7Jxc.mft (raw, json)
Hash identifier: Pz6vdA0XyZioI6Rks2bG5bruBeNXHaL6XbVcnINV0AM=
Subject key identifier: E5:53:EB:2B:C0:7C:E9:60:6D:91:D9:9E:94:A0:D1:49:4E:4B:80:F8
Authority key identifier: A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
Certificate issuer: /CN=A91CA496/serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Certificate serial: 2A70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
Manifest number: 2A07
Signing time: Tue 08 Apr 2025 15:37:15 +0000
Manifest this update: Tue 08 Apr 2025 15:37:15 +0000
Manifest next update: Tue 15 Apr 2025 15:37:15 +0000
Files and hashes: 1: oDlpuv_Weqt11JODf6HHxp_7Jxc.crl (hash: bj3t4quaMOsxUhW2IF85tocUGSDV791TEMZj0bkM0mE=)
2: EE3DDD2401AA11EDB7DF7B4BC4F9AE02.roa (hash: Jrpra1DN6Qua5gOtuyS7ZwYqohrmR0qUmCq00umz0cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10864 (0x2a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA496, serialNumber=A03969BAFFD67AAB75D493837FA1C7C69FFB2717
Validity
Not Before: Apr 8 15:37:15 2025 GMT
Not After : Apr 15 15:37:15 2025 GMT
Subject: CN=67f542ab-2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:4e:f8:1b:ec:fd:bb:16:a9:5c:4a:d7:06:
08:98:37:4d:8e:a1:0e:ea:a5:93:33:9b:c8:e3:bc:
32:76:d4:80:18:ca:c5:58:cf:30:15:51:45:34:95:
45:80:e0:a5:c4:15:8c:63:22:46:68:65:e0:ce:2d:
6a:1d:cf:9a:ab:89:f6:3d:4a:aa:fb:51:61:44:b1:
4e:b3:5f:2c:53:f8:51:1d:c2:ec:2b:80:db:c6:7c:
52:0f:8f:33:db:eb:a4:26:70:03:34:9f:a5:0e:39:
d7:95:ed:13:55:3e:56:3f:bf:37:2e:07:eb:df:9c:
8c:8d:90:17:df:45:3e:7d:be:2a:54:02:c1:ac:18:
38:34:98:d6:8e:0e:71:91:be:3a:e0:e7:0c:5a:b3:
80:ab:df:7b:32:c4:ec:85:94:a8:99:2f:f3:51:9d:
13:3c:e1:65:2f:48:2f:33:9a:8b:08:b8:c8:94:59:
1c:9d:10:8a:57:c2:d2:a7:b4:8a:06:ca:91:ad:67:
52:6e:23:2b:29:90:a1:3b:54:02:3d:8a:1f:28:2d:
dd:ad:62:5b:6c:fd:e0:f4:42:e3:27:fe:ce:4c:99:
64:95:ac:87:eb:c3:64:f7:e6:4a:c9:a6:67:69:3c:
38:0f:a1:92:ee:2a:cf:3e:f1:73:fd:60:dd:4a:fd:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:EB:2B:C0:7C:E9:60:6D:91:D9:9E:94:A0:D1:49:4E:4B:80:F8
X509v3 Authority Key Identifier:
keyid:A0:39:69:BA:FF:D6:7A:AB:75:D4:93:83:7F:A1:C7:C6:9F:FB:27:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oDlpuv_Weqt11JODf6HHxp_7Jxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA496/FB12A2783C0F11E4B788FF4AC4F9AE02/oDlpuv_Weqt11JODf6HHxp_7Jxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:8e:5c:df:02:9e:12:de:c7:ed:2f:00:c5:fe:fa:83:53:
1c:f9:b5:27:eb:c1:e5:7f:80:10:93:95:12:93:ef:fd:c0:f1:
9a:fb:54:33:42:c7:be:e5:74:f4:41:2a:1a:fe:55:a3:06:df:
dc:db:9a:c3:7f:d6:6e:4b:bf:31:08:2d:97:2f:6c:22:b0:f3:
9d:ff:f3:f4:8b:ea:20:2c:52:fd:d4:3d:c5:7d:8e:f2:61:51:
65:cc:e5:c5:62:38:e9:08:24:48:b9:de:07:d4:ba:9c:1b:e8:
b5:ac:0a:76:dd:44:ea:28:6c:7d:db:00:cc:67:f9:04:eb:bb:
63:0e:cd:89:79:3f:6e:cd:df:5b:5b:b9:9c:57:73:b4:5e:c1:
df:85:e6:d5:de:f0:3a:45:22:46:47:a3:46:6d:72:61:54:bb:
1a:47:ab:0d:23:1e:e7:44:db:d9:b9:fd:f9:d7:2e:7b:d8:9e:
4e:11:41:ef:ef:c9:1b:6a:0d:5e:c0:24:31:75:09:92:50:e8:
1d:58:6b:b4:4a:2d:31:71:e1:ec:f6:25:06:74:34:25:aa:95:
d5:0a:35:61:c3:d5:7e:04:67:41:cf:ff:73:82:ff:04:6a:e3:
44:f9:32:a1:a2:44:86:74:ad:62:44:f6:7b:5f:0c:7f:b6:2e:
bb:ac:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:43:46 2025 by rpki-client