Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json)
Hash identifier: ojzaWE+Bp7dS7ospNJ683gZdeniVRBHhQCHpXE6fG9A=
Subject key identifier: FD:72:DA:84:65:4F:D9:6B:2E:F5:72:E6:89:50:2B:C7:95:3C:CC:85
Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
Manifest number: 021E
Signing time: Sat 29 Mar 2025 03:45:19 +0000
Manifest this update: Sat 29 Mar 2025 03:45:18 +0000
Manifest next update: Sat 05 Apr 2025 03:45:18 +0000
Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: s6/1PFGOG5mdCTa8bbO3EBIJM0xit3IhJ5tH2MgPw+E=)
2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=)
3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91463ED
Validity
Not Before: Mar 29 03:45:18 2025 GMT
Not After : Apr 5 03:45:18 2025 GMT
Subject: CN=67e76cce-77c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:e1:e3:92:6c:ce:d3:36:7c:82:f5:e4:01:
ea:a8:ce:16:b8:70:6f:3d:2e:70:47:9e:56:12:0d:
8b:ec:36:ea:2a:ef:05:f8:ce:8b:ab:c6:f9:a0:12:
94:e5:03:a2:60:b4:e5:80:a1:76:26:71:f4:7a:14:
db:79:55:9e:a3:c7:db:62:d4:9c:cf:d5:b2:34:a9:
1c:9a:f3:7e:25:18:c4:99:fa:e4:50:ee:1c:ee:90:
7c:ef:6e:28:e0:a9:24:26:87:30:6b:c2:b5:35:e1:
a0:ba:43:2a:6c:74:11:8f:8c:17:27:79:b5:fd:c4:
cb:a7:91:da:bc:d9:30:d3:5e:97:c4:76:79:84:3a:
1b:44:76:c4:3e:64:de:03:6d:09:60:5e:f0:e8:80:
7c:0b:fe:85:76:b7:96:c0:26:ad:97:59:8b:29:cb:
3e:c9:5f:65:18:5e:ce:43:cd:42:e1:74:ac:46:77:
5b:9a:a0:17:27:10:52:88:1f:11:72:96:c6:6a:a8:
ec:13:80:4a:cb:26:63:26:9e:81:8f:ca:cd:9b:64:
ff:94:5a:8a:2c:7e:93:89:66:7a:37:02:f4:18:dc:
a3:d6:a6:27:5b:1a:17:c7:92:7d:14:2c:1d:8e:b2:
11:ae:07:8e:e2:7b:e4:89:03:09:06:fb:b0:67:1f:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:DA:84:65:4F:D9:6B:2E:F5:72:E6:89:50:2B:C7:95:3C:CC:85
X509v3 Authority Key Identifier:
keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:6c:d3:07:98:b2:27:13:16:07:99:ba:57:de:e2:00:13:
80:3d:df:98:4f:df:7b:22:ca:e3:92:7e:c5:6c:ff:de:ff:3c:
c0:d8:73:a1:26:98:f3:da:82:b0:05:51:ae:49:54:37:9a:96:
3e:2c:6d:3b:1e:22:e1:21:65:c6:c7:4f:cb:a6:e8:72:f9:b4:
cd:29:04:9f:4c:ca:56:ca:5a:53:3d:10:be:14:1a:8a:64:bf:
69:30:66:37:24:f0:f2:f1:d0:7e:5a:b7:6f:ee:2f:51:9e:f6:
e8:30:00:88:5f:16:14:f3:9f:06:19:ff:f5:6f:ad:3e:43:89:
1e:2d:4f:d3:7b:82:04:1d:ba:30:ed:e6:19:8f:c1:ee:09:9d:
29:86:09:1f:8b:11:e0:31:9b:8d:78:15:c4:82:b6:61:97:df:
cd:79:31:0f:bb:9a:53:00:82:41:f4:43:1b:41:a6:f5:69:c2:
38:2f:16:fe:8d:30:41:33:33:26:1b:60:60:ef:a4:cf:52:b5:
7c:fe:cc:ad:09:29:08:3f:80:b0:4a:6d:b6:29:17:5a:fd:85:
30:bf:04:9e:b4:7e:ef:eb:e7:47:ef:f3:1c:11:1e:0d:b2:c8:
27:22:24:f3:69:62:36:38:40:2f:05:58:6b:24:d6:08:c5:22:
e9:f6:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:34:08 2025 by rpki-client