Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json)
Hash identifier: I2QX0sXgtrQPmxptDBDsMCLEesIk/EDTg0qrJ6FOYpI=
Subject key identifier: 11:8A:AF:5E:1D:9B:C6:D3:36:F3:2E:AA:87:92:69:6C:BC:01:7A:F0
Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
Manifest number: B2
Signing time: Fri 31 Jan 2025 05:08:16 +0000
Manifest this update: Fri 31 Jan 2025 05:08:15 +0000
Manifest next update: Fri 07 Feb 2025 05:08:15 +0000
Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: K6Gc+r3cTF8KI5SKoD+JyA6kw3R4dIGP0ISxmttDR1o=)
2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 4aEk8Fo4ZtjX2t7vRJE+qDahRN/pzY/Ldf8wIZXNlMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Validity
Not Before: Jan 31 05:08:15 2025 GMT
Not After : Feb 7 05:08:15 2025 GMT
Subject: CN=679c5ac0-c174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:a5:ef:3c:f0:d0:ba:dc:8e:0e:30:e4:44:
d4:02:3e:b7:21:6b:51:a6:c1:13:02:ac:41:54:54:
75:f4:26:bc:4c:57:0c:19:7a:ca:af:aa:c1:60:12:
00:cd:75:ac:ab:76:95:58:88:88:b2:95:de:0b:33:
74:76:9e:85:bd:2f:e1:ed:65:9c:d0:8e:d8:8e:28:
1f:d3:72:a2:12:9b:21:25:44:ec:d0:d2:8c:6e:b3:
ed:1e:3b:f2:56:cb:e8:8e:e5:f8:58:f4:c9:45:4e:
15:c9:b3:fd:49:44:01:4f:3f:44:58:53:7d:69:ab:
c9:83:ac:d6:e2:0b:07:2a:a9:f5:0b:10:e4:6e:cb:
08:f8:90:76:60:57:0d:82:3b:cc:ef:ee:80:66:75:
01:a7:cc:e3:51:cb:d8:a9:c8:a4:d9:ea:91:07:21:
2c:9a:75:dd:99:c5:09:ba:da:b1:c4:83:54:ab:44:
5f:7a:ba:79:87:b2:48:5d:b3:91:84:70:62:a6:a1:
09:d9:0d:97:bb:b0:47:76:c6:05:0a:35:c4:22:d9:
e5:9c:f1:0e:8f:c7:0b:cb:7f:22:d5:cc:ce:12:cb:
1c:0b:12:77:f6:da:94:1b:81:d9:9b:a6:52:ce:a1:
eb:96:63:37:75:84:34:a1:40:f6:46:98:2d:cd:23:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:AF:5E:1D:9B:C6:D3:36:F3:2E:AA:87:92:69:6C:BC:01:7A:F0
X509v3 Authority Key Identifier:
keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:ed:e3:01:ab:e8:60:0d:7d:ba:02:83:70:1f:f3:15:04:
45:07:80:61:39:5b:23:5d:b1:6c:b5:c7:1a:8f:fb:52:64:9c:
5c:58:66:3e:60:e5:a7:40:ee:97:81:f1:0f:83:33:4b:9e:2b:
9f:18:3a:d1:d7:1c:ab:b6:44:51:05:2d:4f:01:b3:da:57:95:
3d:6d:58:db:20:56:1e:4d:c4:53:c5:44:52:be:93:3f:9a:b3:
ed:a8:61:4f:97:a5:a2:ad:46:94:7c:f9:96:82:bf:f4:c5:e7:
d2:34:25:bb:84:38:9d:a0:9f:7e:18:39:d9:aa:3a:60:bf:95:
4e:dd:4c:5f:15:e4:37:e7:c9:05:1e:34:f3:fc:0d:19:96:4f:
a5:8a:d5:2c:dc:25:46:12:f2:f5:99:28:24:e7:f4:48:e8:9f:
04:2b:1c:0f:59:f8:e9:34:71:49:f6:a1:0c:8a:d3:c8:2c:f4:
21:c4:89:50:fd:58:c0:03:8a:e5:82:61:ac:9b:02:bc:d2:7c:
ff:30:fb:b8:c5:dc:f0:44:fe:f0:41:22:96:3e:67:1e:bb:f6:
b5:b2:44:0f:b5:fa:5d:eb:dd:e5:f4:5e:53:56:f6:50:97:ea:
21:d4:11:20:08:34:0e:e6:09:df:7b:6a:9c:fa:f3:d7:ec:e5:
57:c7:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:33 2025 by rpki-client