Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier: QqSBGJkJdLFq0TZNm/jMiD0Vdw1b04yGAoXfzYwtx2c=
Subject key identifier: 40:F8:66:34:69:95:34:9B:35:AE:D1:8C:A1:CC:5C:5A:3E:B5:1B:BB
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 11EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number: 11C4
Signing time: Fri 31 Jan 2025 17:11:51 +0000
Manifest this update: Fri 31 Jan 2025 17:11:51 +0000
Manifest next update: Fri 07 Feb 2025 17:11:51 +0000
Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: 6g54VwONI5VL4BMDppE69YDC7zdHfcnQl6+nmWDF6C0=)
2: 5604A238BB1C11ECBF12EE13C4F9AE02.roa (hash: NHWCUf8+AtbmzXnzmeZbtvKsPoQGJHCu3CTJE2iZ0Gs=)
3: 1DFE0A801E4211ED82CEED40C4F9AE02.roa (hash: IaKEMLHH7TpnUMP23vsjzKsi2qtWY17a/delPudkIiY=)
4: 41D236B27D2D11EDAFFEDF7CC4F9AE02.roa (hash: ZuZht7+LuqC9WsAxewTrmphz+5ViA4U2gImtlisiNCY=)
5: 54581848BB1C11ECBF12EE13C4F9AE02.roa (hash: aM+kflsjZ8tUuwjbVXKbKLGYT8Wl/jFCbN4S+5LlhQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4586 (0x11ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Validity
Not Before: Jan 31 17:11:51 2025 GMT
Not After : Feb 7 17:11:51 2025 GMT
Subject: CN=679d0457-e5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:6a:41:3f:8b:d7:5b:12:7d:98:16:11:af:
85:0b:a7:b9:bc:bd:95:c7:a1:8c:96:dc:10:8f:36:
04:32:85:ac:d8:ba:99:13:44:58:a9:d0:4d:fc:86:
22:6b:56:08:31:c5:ab:94:92:85:a8:77:f9:63:86:
30:b5:ca:96:8f:3f:7a:2b:02:22:0a:9a:d7:0d:69:
6c:c4:2d:5e:22:f7:5b:c7:4a:38:87:2e:b5:a9:c1:
2e:db:50:92:34:e1:cc:a2:42:fb:74:d0:59:8e:22:
41:c4:c4:6d:96:7e:90:36:61:e4:d0:70:56:40:a3:
5f:a4:f7:3d:92:2b:ab:a6:a4:67:db:21:d1:5b:a6:
71:f0:d9:5f:8b:a5:15:d9:40:4a:f8:83:20:ea:8f:
fb:2b:b0:ed:38:07:99:e3:0e:76:1b:f3:44:be:9f:
70:ad:dd:8b:e8:23:57:ea:87:93:cf:a8:e2:ca:dc:
44:99:8e:f3:bd:68:08:ca:4e:f9:87:fa:2e:1f:c3:
50:8c:5b:ba:53:4c:58:46:0b:cd:fe:65:c9:47:47:
44:72:ca:07:d4:c9:d6:1a:ac:f0:8e:1e:2b:0d:02:
56:c5:5a:94:58:e7:fd:9a:58:23:5e:6a:1a:4b:3f:
0f:c1:ab:3b:6d:f9:83:34:eb:ed:e4:57:66:e8:67:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:66:34:69:95:34:9B:35:AE:D1:8C:A1:CC:5C:5A:3E:B5:1B:BB
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:22:96:43:ea:6a:ed:91:84:56:d4:90:91:09:25:bf:f5:59:
a9:e5:af:0c:31:92:4c:7f:6d:4c:b4:b4:66:96:cd:49:4b:e9:
ad:42:b2:70:b3:1e:36:88:03:d7:37:2b:5f:d8:c5:23:70:e8:
00:13:af:8e:ef:12:16:16:b5:13:9c:e1:af:b6:5a:e2:46:35:
b0:5b:f3:13:6a:32:96:21:46:cc:7b:1d:6e:a1:2b:a2:85:92:
f8:06:28:46:4a:1a:90:cf:8a:d7:77:eb:86:53:6c:4f:64:93:
ae:df:5d:35:b2:85:02:7b:c7:56:bd:56:2c:a7:8d:1b:ff:04:
c6:78:ae:8b:74:1e:0f:c2:71:7c:f8:2c:6b:72:f3:58:7c:a9:
83:96:99:07:3d:11:d4:4e:16:1b:53:26:11:09:8d:39:df:a4:
f8:f0:19:a0:a0:df:9a:be:d3:8a:d1:7f:ac:9e:e0:6e:99:69:
8b:44:04:fe:a2:34:a1:a7:fb:54:ea:de:82:55:d4:75:4d:f2:
00:ac:0a:29:4a:12:18:73:fb:34:eb:d7:5d:36:dd:18:80:2d:
3d:1b:1e:eb:30:b1:de:ac:f0:7e:a7:d8:5c:ec:97:4e:65:9f:
86:90:90:fb:11:a5:ca:76:fc:5f:e1:fa:99:82:bc:64:d6:0c:
8d:c2:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:50 2025 by rpki-client