Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
File: oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft (raw, json)
Hash identifier: 9LzXwnZzJOKMLkEN8Med8xIdc9L/ZNEZZ9cRzC79aaU=
Subject key identifier: 49:04:BA:B3:6A:A1:1A:11:BB:26:EB:BE:20:8D:D3:36:43:23:EE:B3
Authority key identifier: A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
Certificate issuer: /CN=A91E43F6/serialNumber=A0BA462F29F825A402096A32CD74F7A28CBCFEE1
Certificate serial: 05BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
Manifest number: 05B5
Signing time: Fri 28 Mar 2025 23:22:23 +0000
Manifest this update: Fri 28 Mar 2025 23:22:22 +0000
Manifest next update: Fri 04 Apr 2025 23:22:22 +0000
Files and hashes: 1: oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl (hash: Iek4K2mzm9FBwpOBwMLpy8VxGY4vsmqvwFQlduTW+R4=)
2: 27560994BA0611EB8B424C22C4F9AE02.roa (hash: pqRxueuRQ9Xk1G5bNOlc+yk8F/47WS7KRa617CuzluU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1466 (0x5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E43F6
Validity
Not Before: Mar 28 23:22:22 2025 GMT
Not After : Apr 4 23:22:22 2025 GMT
Subject: CN=67e72f2f-32be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:a8:68:82:a2:05:82:3a:6b:e2:9d:94:5f:
3e:1c:4a:04:40:a1:b4:a4:0b:56:c2:23:6c:38:c7:
fd:4c:11:d9:2d:88:8d:1a:09:03:f4:9d:6d:7a:a9:
57:a0:b1:2f:73:de:12:cc:8b:8f:df:9f:84:8d:19:
4c:40:a4:4d:35:e4:4f:fe:06:62:c8:31:fc:b7:39:
af:bc:ca:0c:ae:05:a6:05:bb:82:e2:13:8e:3d:e7:
cd:84:24:1a:d9:95:ee:8a:54:e5:c6:b5:1d:c6:a0:
6a:cc:d4:fa:65:62:c5:d2:25:5d:e6:4b:57:3b:3d:
92:df:49:b5:b6:1d:3e:c5:db:5b:e3:72:34:ca:7d:
de:b5:b4:31:58:df:fd:87:07:a3:40:7c:7d:ff:40:
89:7f:57:54:5c:d8:20:25:b1:b8:b2:70:fb:b9:d7:
e2:54:3b:55:82:8a:4e:b5:b1:96:f2:3c:c0:6d:e2:
0f:51:97:d6:0a:6f:77:c3:ee:d4:cd:96:d9:e3:eb:
1e:9e:2c:7c:9e:5a:06:63:2b:18:13:c8:62:bd:c1:
11:dd:0a:b7:f1:04:ab:ea:19:1c:2b:0a:b2:19:51:
25:62:7c:d7:26:9f:9c:1f:ad:14:b7:5e:43:6b:ef:
4c:34:21:a2:24:54:41:c4:49:29:45:6f:a8:b8:b7:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:04:BA:B3:6A:A1:1A:11:BB:26:EB:BE:20:8D:D3:36:43:23:EE:B3
X509v3 Authority Key Identifier:
keyid:A0:BA:46:2F:29:F8:25:A4:02:09:6A:32:CD:74:F7:A2:8C:BC:FE:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oLpGLyn4JaQCCWoyzXT3ooy8_uE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E43F6/2D2F2186BA0411EB97F5B41FC4F9AE02/oLpGLyn4JaQCCWoyzXT3ooy8_uE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:42:43:aa:25:24:f4:fd:01:bc:64:83:ba:99:a0:f9:c0:2f:
5a:f9:7d:6a:68:b7:14:1b:51:09:22:86:fc:7c:eb:47:66:ef:
13:2f:02:04:bb:19:59:97:bc:66:52:6e:0f:ab:97:03:23:23:
3e:54:e9:db:8c:e2:ed:de:f9:3d:9c:88:d0:4d:40:87:59:e3:
bd:1b:7a:3e:fa:bb:30:37:6e:2a:f4:9c:98:b4:7d:af:7d:24:
93:eb:6b:8d:d8:db:ce:c0:65:cb:af:d3:96:1f:bd:56:94:75:
69:6b:05:6d:bc:ca:79:c9:6f:0b:0a:fc:f1:eb:43:d8:4a:e8:
0a:ab:9c:04:24:33:48:a6:85:19:73:8c:ab:29:45:56:78:d5:
9e:f2:de:42:07:59:88:3c:4b:64:4a:a3:dc:58:1e:5d:3f:79:
bb:d1:e0:44:30:88:d4:4f:40:00:46:77:33:a2:f9:fe:e2:9b:
97:3a:24:fd:22:1e:45:e3:0c:82:c1:87:ea:08:af:33:db:29:
1b:bc:a5:20:96:31:f7:05:12:95:e9:d7:ba:ed:ff:85:17:a1:
e4:3a:b0:10:e1:09:dd:76:8d:0a:34:43:15:6a:fd:de:67:98:
1b:40:d4:4c:07:39:db:60:5b:79:22:04:67:65:95:ce:3f:8e:
56:bd:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:56 2025 by rpki-client