Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
File: OhbEBL_tNHJEowpa__ZuSZKqKCE.mft (raw, json)
Hash identifier: SqgQP8AqKj1dJ36WmEGKx1VHMhJVVN767vEOg9gt8B8=
Subject key identifier: 6E:B1:03:35:BD:74:1E:E2:30:1B:4F:D2:1C:D3:FD:24:83:EB:CC:96
Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
Certificate issuer: /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
Manifest number: 0424
Signing time: Sat 29 Mar 2025 00:37:49 +0000
Manifest this update: Sat 29 Mar 2025 00:37:48 +0000
Manifest next update: Sat 05 Apr 2025 00:37:48 +0000
Files and hashes: 1: OhbEBL_tNHJEowpa__ZuSZKqKCE.crl (hash: IZklvQPnYnVMoop91i+inqZkkVi5QwTuN87f6Q09Lso=)
2: 9D77DCA4599A11ECA574BF52C4F9AE02.roa (hash: /fF1tdSaYFH2w1w+0HXHgYqEthaF4A0sGCD2uCBxpiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A65C4
Validity
Not Before: Mar 29 00:37:48 2025 GMT
Not After : Apr 5 00:37:48 2025 GMT
Subject: CN=67e740dc-c904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:b9:97:bf:fc:3d:59:9c:c1:5f:c2:d7:da:
19:66:8e:b1:23:8e:f3:58:30:c2:86:e2:eb:4b:1d:
4b:cb:d9:be:1a:ff:65:6e:39:7e:21:46:87:f5:fe:
34:d7:37:cf:23:9c:ec:c8:ad:d8:c1:48:1e:9c:5a:
60:a4:2b:38:b9:b9:82:4b:d8:e7:6c:f9:58:e4:aa:
b5:2d:bc:4a:1c:11:ab:bc:65:c4:ae:e7:9b:90:f6:
74:1d:5d:74:f1:b6:17:67:70:33:e2:dd:5d:7d:6b:
c0:d0:1e:38:0e:b0:e1:50:90:fe:93:a0:da:5d:ce:
d6:fe:41:6d:09:b5:69:4e:8e:4d:93:68:92:14:1c:
1e:26:ec:34:87:56:88:c4:42:83:11:9e:01:45:0e:
35:e7:2f:9d:45:ba:24:b2:5a:13:f0:e9:89:19:cb:
75:d2:74:1f:b3:38:7e:12:d0:5e:be:25:1b:ac:2a:
51:95:ae:8e:e9:7f:be:3d:6b:cf:8b:ad:32:05:86:
ef:e3:9c:11:a7:bb:d3:78:dd:3b:d1:c2:33:f2:d3:
c4:8c:8b:ee:94:92:cb:7f:c9:3e:80:41:e3:4c:e8:
18:f2:a0:25:15:49:19:c4:a7:35:13:b8:f4:df:4b:
64:01:5f:13:99:cf:78:66:d0:92:99:63:fd:ae:98:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:03:35:BD:74:1E:E2:30:1B:4F:D2:1C:D3:FD:24:83:EB:CC:96
X509v3 Authority Key Identifier:
keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:87:ad:d6:0e:f3:57:d4:c2:8a:25:8e:f1:df:cf:da:de:90:
3b:cb:cd:5a:c6:84:3f:3f:46:03:85:8f:83:17:da:ae:cd:b1:
b7:50:4a:7b:bc:73:0a:6b:95:54:5a:f8:15:f9:c1:f1:8c:84:
33:49:e0:e2:f1:7f:8f:18:d2:06:cb:51:ea:bc:5d:28:63:3d:
d4:2a:b4:ec:e1:ec:51:fc:52:0f:a6:79:c0:7e:72:46:c4:67:
8b:8d:96:08:f9:ed:f0:6b:d0:c6:35:54:75:da:65:47:56:16:
63:12:a1:e7:74:a3:8c:57:37:58:27:41:56:1c:e4:30:73:7b:
9e:52:ec:c7:35:27:28:b6:09:78:7e:be:b0:fa:f4:c2:a6:4b:
a3:50:fb:67:42:7c:1d:2d:6d:ad:15:11:88:9b:90:a3:20:5d:
51:d8:93:18:8a:38:d3:db:29:e2:12:9b:6d:cf:c4:b3:64:e9:
65:d5:74:2e:41:e4:b9:a1:49:9d:7c:3b:c1:35:28:c5:e2:c7:
92:49:ae:80:69:7a:12:0d:b6:7f:43:cc:6e:02:72:84:ee:34:
d9:c0:c0:7d:20:78:4b:76:1a:22:ca:bb:92:2c:0c:ab:5b:85:
ab:98:a0:d7:5b:14:30:dd:81:55:ff:ee:ca:58:32:04:e1:72:
22:68:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:36:54 2025 by rpki-client