Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json)
Hash identifier: utCxSPTeHRa80cWEdFj91zoDZFWyTS0ZyVcCZPQbC94=
Subject key identifier: CD:90:68:CC:0A:45:6C:47:01:51:48:A2:B6:EB:76:0C:91:25:27:B1
Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE
Certificate serial: 07BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
Manifest number: 07B4
Signing time: Fri 28 Mar 2025 21:23:56 +0000
Manifest this update: Fri 28 Mar 2025 21:23:55 +0000
Manifest next update: Fri 04 Apr 2025 21:23:55 +0000
Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: 3i3SJ14e7esjDpvTbvG3IJ6TokAsIwONmTeLdyKSe/Y=)
2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: bbD/CkiY8PoLpDlyreN0bTO0yQS0iLZL1KAfcB5xBxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911020B
Validity
Not Before: Mar 28 21:23:55 2025 GMT
Not After : Apr 4 21:23:55 2025 GMT
Subject: CN=67e7136b-ee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:66:6a:ca:e4:92:20:da:f2:10:1c:48:a4:
29:8f:68:af:eb:1b:90:1d:49:b8:d8:69:c2:b6:a4:
af:c1:b8:83:1f:9e:a5:c5:ed:47:a6:61:42:f3:b6:
b0:1c:98:c3:fa:61:02:19:ab:ff:86:98:b3:8c:a5:
4a:70:da:41:88:cf:4c:1d:94:62:1c:fe:85:e7:88:
0a:3a:d1:57:03:6c:da:60:21:02:da:78:1c:ae:ea:
1b:09:4a:33:19:67:32:dd:4b:38:01:4f:66:26:bc:
72:5f:c7:81:d9:34:6f:9f:73:91:2e:f9:c9:bb:2c:
a8:ae:62:2a:ef:44:ed:73:f9:2f:24:29:65:f4:96:
5b:28:6b:f4:93:a0:a2:53:0f:0a:ca:fb:f6:65:8c:
de:06:19:2d:e6:4e:aa:5d:75:4d:b6:64:34:66:49:
b4:e7:f5:56:fb:56:28:8f:4e:76:b8:73:6f:f7:9c:
da:d7:bd:09:2d:bf:f3:55:00:d2:72:6d:40:0b:1a:
81:73:ba:21:e2:98:42:ea:00:87:d3:3c:eb:f1:78:
d4:f9:d2:d2:8b:10:32:25:2c:5a:22:d3:d3:62:1f:
3e:37:c3:36:45:e4:46:b7:34:1d:a6:7c:eb:be:8d:
21:02:f0:2e:55:5d:ea:17:80:e6:68:b2:26:5d:b7:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:68:CC:0A:45:6C:47:01:51:48:A2:B6:EB:76:0C:91:25:27:B1
X509v3 Authority Key Identifier:
keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0c:a5:7a:4b:32:c1:20:ee:1d:fd:63:7b:30:3f:2e:78:76:
00:9d:43:ab:77:a6:0d:0a:35:f0:d5:54:30:0e:b7:6c:85:47:
36:08:d1:ef:70:63:59:a7:3b:d0:52:22:b3:66:03:da:65:fb:
da:a9:bb:2d:ea:51:de:54:69:31:a2:cd:b6:48:42:95:27:81:
82:a4:b4:73:05:58:be:10:a4:f8:ee:6c:82:e2:07:24:d3:c6:
ce:a5:df:33:d8:01:aa:f6:05:88:4f:e5:78:87:0f:35:ce:52:
82:f9:12:b9:02:dd:b2:bc:49:db:6b:ed:ce:d2:51:8f:47:6d:
f0:16:ff:65:45:3a:af:92:38:2b:05:33:78:20:86:de:9e:5f:
b6:1e:93:d6:4d:09:2e:8e:81:02:c3:00:45:64:2e:3b:20:00:
32:21:c6:d9:19:99:0d:4a:c3:cf:a3:17:8e:3b:f4:89:fe:14:
56:ad:0f:06:14:97:2d:d1:3b:56:8a:95:ff:4f:25:16:55:01:
b0:80:9e:b6:98:6f:81:f9:9d:e6:6a:10:6a:ba:69:22:e3:e4:
ae:94:e8:2d:d2:7d:98:d7:19:70:23:59:a7:bc:24:80:0d:84:
59:b8:95:ba:9b:9a:85:70:ba:c6:96:c0:a9:f1:d0:e8:f9:2d:
2e:80:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:48:09 2025 by rpki-client