Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
File: tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json)
Hash identifier: MSSoVo4glNvcvh5ahBLLPKgITPQhgiJe4l0ZL8Y3q24=
Subject key identifier: E6:CA:DD:57:E0:C7:5A:70:A3:1A:3A:91:59:0F:73:75:F1:10:5E:29
Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Certificate issuer: /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Certificate serial: 125E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
Manifest number: 1257
Signing time: Fri 31 Jan 2025 17:06:28 +0000
Manifest this update: Fri 31 Jan 2025 17:06:27 +0000
Manifest next update: Fri 07 Feb 2025 17:06:27 +0000
Files and hashes: 1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: /0yNRUT2uk9tvohqHF0DKlzucSUNMjfp6gh0cySzyoU=)
2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: n2FBgQHuh988fwkOcnAooQ/jXQmiLgbdWeucP9Cz7sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4702 (0x125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Validity
Not Before: Jan 31 17:06:27 2025 GMT
Not After : Feb 7 17:06:27 2025 GMT
Subject: CN=679d0314-bf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:af:0b:82:1e:b3:78:f8:5d:4f:c7:a0:2f:
35:c4:62:39:e9:4e:7d:c5:92:ac:f2:6e:69:95:30:
16:4f:7d:40:d9:92:0e:8c:19:8a:de:48:a9:90:75:
e9:f6:76:f4:81:d3:09:52:5e:40:66:99:46:24:77:
c4:70:37:37:b4:b1:fc:44:d3:5a:59:e5:f4:25:86:
2f:ff:af:65:5a:b5:b8:b2:ba:82:7b:59:e2:ac:1b:
0b:38:61:eb:fc:b1:af:cf:61:0f:8e:3a:54:19:13:
2d:63:b3:68:48:84:04:69:95:ba:a4:8c:72:dc:4a:
95:61:84:17:40:64:59:20:1a:e9:c0:df:09:b4:ad:
6e:60:10:ee:f2:eb:b9:1f:6f:9c:60:42:18:ef:3d:
46:0b:e1:dc:49:53:47:6d:d2:fa:a8:58:11:24:73:
f5:09:13:b8:d4:39:b0:2b:eb:07:bb:7d:4d:38:e2:
52:c5:d7:07:0e:52:df:0f:eb:27:54:69:2a:bb:d5:
ee:5a:22:cc:e1:6b:0a:af:ce:10:ba:0a:b0:eb:11:
2a:3b:8c:d2:e0:70:7e:8f:9a:a5:bb:8b:a4:95:d2:
18:2f:b1:7e:58:e9:13:8f:c4:1d:df:81:2c:68:09:
7e:0d:3f:f8:4f:f7:63:ce:1d:30:0d:c5:0e:96:21:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:DD:57:E0:C7:5A:70:A3:1A:3A:91:59:0F:73:75:F1:10:5E:29
X509v3 Authority Key Identifier:
keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:8a:3e:77:0f:01:f6:bf:64:54:9c:ed:4c:f9:cb:af:c0:22:
88:b0:e9:25:fc:29:69:41:1e:ac:34:b2:01:a1:06:f7:0d:45:
b5:52:aa:80:9b:ff:2e:9a:cc:70:54:d4:79:a9:fa:11:c8:71:
5d:9a:be:58:cf:9d:ba:6f:04:62:b1:f5:74:82:2f:63:14:2e:
fb:10:86:2c:7d:a6:95:92:e2:79:27:6b:dd:f1:8c:e8:b9:c0:
dd:39:e6:4d:0b:88:2b:a9:ac:87:02:a5:c4:ab:82:8e:66:7d:
3c:ef:9d:90:af:ba:7d:0e:19:7f:cb:38:de:38:0c:c3:f5:5b:
cb:68:30:22:ad:99:3e:cf:d4:ee:c6:1b:75:92:29:f4:28:07:
1a:df:2f:b6:10:03:81:9e:ae:c6:2a:a7:05:14:a1:c3:8e:6c:
17:19:5d:72:79:98:64:41:d3:66:ed:c7:54:bc:25:9e:45:aa:
8d:03:13:bc:6a:d3:49:a0:b6:ea:cf:27:03:ba:eb:78:0a:24:
98:04:2b:17:94:04:58:73:2b:ad:92:cd:b3:a9:2e:60:ff:93:
0c:a6:df:16:d1:8d:8c:76:a7:8a:9b:b3:54:72:99:8a:ee:f1:
95:b3:43:03:f1:f5:38:11:74:fe:f0:b0:3b:3d:b2:b7:b0:02:
eb:7c:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:08:21 2025 by rpki-client