Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier: WfXJGtNr7BqUBvrI7KU/B6nJwTbzRI8h4ycBG5vEaYY=
Subject key identifier: 52:1E:D0:F8:C1:AA:C1:86:CD:E2:7D:29:B1:5B:EA:7A:39:FB:85:8D
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number: 0290
Signing time: Fri 31 Jan 2025 01:40:08 +0000
Manifest this update: Fri 31 Jan 2025 01:40:07 +0000
Manifest next update: Fri 07 Feb 2025 01:40:07 +0000
Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: jhd9RSWAsntl+BQQaSY4FyCKikWT7eHhSudQ51+2AW8=)
2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Validity
Not Before: Jan 31 01:40:07 2025 GMT
Not After : Feb 7 01:40:07 2025 GMT
Subject: CN=679c29f8-697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:a6:1b:b4:ce:b7:8e:b9:cf:19:f7:8f:2c:
0f:c3:84:10:34:67:68:9b:14:43:98:5f:a5:5d:70:
3f:41:c9:60:6a:fa:98:17:77:9c:b1:67:7b:ef:6e:
12:39:a2:2c:6d:7c:4d:51:e7:eb:2f:1d:7a:82:da:
db:53:a9:e8:fe:22:b0:a1:5b:6e:a1:69:5a:77:8b:
a5:4d:d2:d4:2b:e7:e0:07:f1:cb:37:9a:39:e7:0b:
b1:29:92:3f:fe:bb:0b:6f:a0:f1:14:47:8f:57:8e:
af:d6:0a:f9:69:ac:8a:56:b6:45:b6:17:60:d1:73:
90:93:d2:3c:f2:07:bb:0f:eb:ee:43:9a:23:f7:6f:
f1:ec:f0:ea:77:27:12:2b:50:90:a0:81:9e:cc:ae:
c3:a7:41:96:b9:af:9d:af:47:49:13:85:83:b7:89:
fa:10:dd:df:b0:f9:f9:04:55:67:69:ab:03:28:50:
1c:8b:70:39:40:89:c1:b2:af:94:d9:3f:08:56:b7:
08:33:40:b1:72:78:72:71:16:33:b1:b0:95:a4:2b:
54:e7:91:ea:96:52:b5:8f:58:46:5e:95:10:ef:76:
61:58:0c:6f:b0:82:a4:69:b7:51:c4:f2:85:19:cc:
d0:24:7f:f1:f1:36:00:7f:e3:b0:c7:1a:8c:17:a1:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:D0:F8:C1:AA:C1:86:CD:E2:7D:29:B1:5B:EA:7A:39:FB:85:8D
X509v3 Authority Key Identifier:
keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:a1:fd:3c:d8:b0:bb:1a:db:19:3e:fb:55:40:8a:e4:6a:
42:23:71:e4:24:15:68:11:8c:dd:44:eb:b2:9c:d5:f8:b0:a9:
c8:db:a4:ab:a1:56:d3:27:2e:e5:7b:22:d1:d7:ff:f4:18:f5:
23:71:43:c7:ac:e7:31:49:a0:35:09:2b:1d:73:7d:8d:f3:fa:
ea:c9:85:05:9c:1c:60:b1:fc:08:e6:95:65:1c:91:71:50:bf:
54:a3:eb:f0:bc:b6:87:eb:fe:99:9c:5c:4a:51:0f:08:11:6a:
a8:6a:e0:6b:0a:2a:ce:ac:80:a6:e0:74:f0:88:5d:af:b9:b5:
7a:00:05:4c:76:97:12:c0:c3:28:05:e6:e9:09:f8:71:07:ec:
85:71:2d:c9:14:93:a4:de:7d:a2:84:9c:69:16:83:7d:77:ec:
05:26:9b:3e:55:ac:5b:ef:e1:70:0c:7c:34:ee:cf:a4:c7:cb:
04:34:af:fb:97:bf:17:39:aa:c8:58:b5:9c:54:d7:f8:86:2f:
31:be:d5:60:92:a4:5c:f3:37:2c:29:61:97:3f:72:19:10:35:
94:94:13:fd:b9:3f:ba:21:dd:1b:eb:ac:a8:58:41:31:4a:3c:
ab:49:c5:95:41:1a:ff:e7:8c:3e:ba:6c:ae:e8:0f:66:af:b1:
e4:c0:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:45 2025 by rpki-client