Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
File: ObsL_xT7a0tfhhNydNQlE_N1Okc.mft (raw, json)
Hash identifier: CURjsWsAH+jlSftTxO+AhVvuc5JyC6AS2sIJYptEZ+I=
Subject key identifier: 3E:4C:B3:B6:BB:91:C2:2D:BD:77:84:45:CA:4F:A0:31:9A:9D:52:5B
Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
Manifest number: 04D1
Signing time: Sat 29 Mar 2025 00:04:46 +0000
Manifest this update: Sat 29 Mar 2025 00:04:45 +0000
Manifest next update: Sat 05 Apr 2025 00:04:45 +0000
Files and hashes: 1: ObsL_xT7a0tfhhNydNQlE_N1Okc.crl (hash: 0ka4R0Uhcs84hl+HmNuiUW5ECCPOhh3JLE+oOG2R/M4=)
2: 5D4B0B5E153611ECA897546BC4F9AE02.roa (hash: fYltceYUoBqgTTGDszHZ6k9POl5N1iPgLRw9G0J0Rws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CC
Validity
Not Before: Mar 29 00:04:45 2025 GMT
Not After : Apr 5 00:04:45 2025 GMT
Subject: CN=67e7391d-3714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:39:39:19:0e:fb:dc:e8:a3:65:91:b6:65:
d3:06:a6:c0:6a:d6:a8:d5:56:2b:6c:a4:cc:1c:c3:
57:d9:35:a5:6b:fa:56:52:0b:1d:fd:bd:a1:78:13:
71:22:10:bd:61:be:20:51:44:5b:8b:04:a8:63:10:
ee:da:3c:2b:4f:9c:ac:b9:61:e2:59:95:ea:9c:c9:
bd:b1:e4:ac:c7:d6:94:28:c4:1a:0d:f3:9b:d2:08:
f0:f1:06:b2:7b:f0:2c:af:7d:60:ee:c2:76:24:a1:
a3:12:b1:63:51:4c:0d:e2:be:1b:47:da:c0:bc:8f:
52:74:ee:59:f3:84:d1:78:ed:bf:4a:49:7f:cf:20:
3f:9b:38:5b:68:f2:0f:ff:ab:c3:08:1c:ca:c7:b0:
0d:cc:cd:5e:62:61:a4:0b:20:18:3a:32:bb:91:b6:
c9:9f:ae:1c:6e:66:00:2d:f5:55:75:ec:16:05:76:
eb:d2:ce:13:67:dc:17:11:5e:1b:4e:6c:00:fb:e7:
4e:bc:de:f3:56:11:5b:2b:c4:2a:9a:6a:aa:38:d8:
86:82:88:8c:8a:ab:a3:13:02:62:e3:ae:e2:05:ba:
73:c7:87:40:eb:3c:21:95:57:1f:47:a8:b3:d7:d9:
75:5e:f9:e1:cb:47:e6:1b:27:e6:dd:89:ce:83:f0:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:B3:B6:BB:91:C2:2D:BD:77:84:45:CA:4F:A0:31:9A:9D:52:5B
X509v3 Authority Key Identifier:
keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3b:4b:ff:6f:77:97:33:18:70:2e:20:1e:a9:c0:6e:61:27:
a4:d8:0f:b0:94:b8:74:78:32:56:dc:9f:f7:98:dc:53:51:1d:
7e:41:22:60:e8:1e:69:5e:94:b3:2b:8d:b0:de:11:8c:2a:31:
4d:af:e6:0d:60:7d:81:70:bd:dc:7d:75:74:ff:d6:f2:6d:57:
a1:6e:a2:41:fd:ea:b4:ca:32:94:ac:fd:84:4e:28:65:dc:4f:
7b:15:4e:6f:47:8f:0f:69:de:5f:3c:bc:ee:03:18:c9:cd:96:
44:2a:d9:b8:69:d6:95:2d:55:26:29:e6:fa:4f:05:ee:6c:6c:
a7:c8:4d:ea:b7:dc:16:ce:da:29:a7:70:db:7e:a5:e6:93:f0:
c9:2c:c8:96:77:ff:20:b2:ff:39:eb:a0:9b:15:bf:9c:66:b7:
2c:da:d0:73:48:39:07:1c:6f:4f:fa:47:4a:88:57:72:fa:e2:
81:7a:02:44:f0:6a:09:95:54:58:cc:5d:c6:13:bb:07:e4:42:
28:3d:f6:96:b5:0b:b8:15:07:81:b3:69:3d:be:bc:03:11:18:
5c:17:af:b3:bf:89:14:95:dd:94:17:9c:2e:35:2e:53:7e:3d:
f3:52:12:ba:05:b4:fe:b4:bf:a4:0b:5e:a9:9d:02:5d:3c:83:
9c:cc:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:45:16 2025 by rpki-client