Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
File: OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json)
Hash identifier: b5tFh/5co5Z9R1jqGUULs5xMiGz4um6bNfFkBJQZvDM=
Subject key identifier: 5E:F4:F6:2E:9A:71:75:C1:1C:C4:96:55:55:26:71:B9:EA:35:64:11
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial: 0615
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
Manifest number: 060E
Signing time: Fri 28 Mar 2025 23:06:16 +0000
Manifest this update: Fri 28 Mar 2025 23:06:14 +0000
Manifest next update: Fri 04 Apr 2025 23:06:14 +0000
Files and hashes: 1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: 8yWu+CDmcay0hv47dN8VFM2pdmXX8KYLuwLF2s+wws4=)
2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: JP5QB1zVHjOC8Yy1kU6cPSVIQkrzd0sn+DomcdrK1tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1557 (0x615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FEF3
Validity
Not Before: Mar 28 23:06:14 2025 GMT
Not After : Apr 4 23:06:14 2025 GMT
Subject: CN=67e72b67-6998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:0d:8f:ec:5e:92:39:1e:b1:12:00:b7:29:
6c:b7:71:bd:41:c4:c4:c1:9a:e9:7c:e3:03:43:5c:
c1:14:fb:60:44:35:ab:1d:03:08:37:cc:0b:b8:a3:
a5:b2:e3:26:fa:e8:a0:47:a5:be:b5:c7:fb:38:57:
47:2f:97:1a:ae:7f:ec:f8:b2:e6:2a:23:6d:8a:ca:
97:77:e7:4a:ab:f7:af:c9:ca:16:15:89:a6:1b:05:
47:00:ce:38:c0:8c:ba:01:02:8a:41:fd:32:5b:25:
6d:be:96:57:00:a1:ad:82:73:8a:2e:21:37:3a:cd:
4f:72:1f:d0:53:d3:0b:d0:c8:de:3d:8c:dc:ce:55:
22:e5:47:7c:bd:e9:ce:53:be:a6:ce:8c:49:e7:03:
cf:d1:eb:a5:44:26:10:61:fd:43:7c:ac:25:03:02:
8e:8a:4e:ef:76:88:4b:a5:6d:15:3f:49:8e:6b:86:
d0:6f:02:f1:c9:01:17:17:4c:59:39:9e:61:26:2e:
70:6c:e0:06:7d:84:d7:d1:e1:67:41:64:01:fb:7f:
ec:63:07:b6:61:a5:e4:c4:38:d9:ca:5f:db:22:c4:
fb:e6:f2:c3:af:f9:51:43:f6:a6:dc:48:6e:1b:e6:
20:7d:67:aa:aa:64:a8:2f:20:46:17:b2:3c:92:24:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:F6:2E:9A:71:75:C1:1C:C4:96:55:55:26:71:B9:EA:35:64:11
X509v3 Authority Key Identifier:
keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:63:f9:08:3d:2b:ac:0e:d2:0d:0d:49:f1:82:d3:36:f1:96:
3c:d6:ef:85:65:e6:6e:d1:54:49:90:6e:07:0e:99:75:0a:7c:
d3:8f:d6:e7:ae:59:6b:f6:40:3c:27:47:4b:16:65:d6:45:1b:
1b:fc:8b:a5:4e:28:01:a0:59:88:66:1a:1d:a2:89:f1:04:b9:
14:28:f4:2e:e8:3f:9a:bb:e7:32:54:50:9a:5f:00:27:2d:08:
a2:17:74:c1:b0:19:65:30:7f:c4:f4:d1:62:ac:0b:9f:ab:e0:
28:3b:95:82:a7:b0:d2:d8:3f:83:4f:6a:23:cd:17:55:f8:21:
e1:cc:25:e6:08:c5:b3:88:db:2d:d6:8c:b9:26:dd:dc:87:27:
7a:54:bc:23:48:79:46:2d:09:2d:80:36:4b:24:e7:f2:ab:be:
2f:2f:41:78:28:8d:a7:65:25:03:94:22:3d:06:70:04:c7:5d:
28:9e:ce:bc:d6:52:59:87:de:3c:84:d9:24:9e:c2:32:9b:a8:
3a:c2:1b:7f:b4:43:38:56:94:2e:36:c7:c0:f2:27:44:58:fd:
66:cf:35:96:a3:57:a5:0e:c6:dd:c3:3e:83:8d:08:42:f6:ed:
ac:24:98:58:c7:4a:13:b1:40:25:00:1a:33:9b:c0:b0:9a:d5:
17:26:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:19 2025 by rpki-client