Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json)
Hash identifier: t+t3BL/GkCJWHjvxsh+/W0rQ/NM7awylUrdRB8eUZX8=
Subject key identifier: 30:0C:04:E0:17:2A:E8:B9:E5:23:C2:82:D9:AD:30:A5:B9:BD:C2:24
Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
Manifest number: 95
Signing time: Fri 31 Jan 2025 05:29:14 +0000
Manifest this update: Fri 31 Jan 2025 05:29:14 +0000
Manifest next update: Fri 07 Feb 2025 05:29:14 +0000
Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: wzTeG8JeFpv+CGJFfxvPYyYzuMdQ9gu9UyzdVgQsfeE=)
2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: DdKCynIF2QkHo2PO8684k4cU1Szr4+DYT4h1WAaKo1Y=)
3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: oQGf8UeNLRAoFQkfiIvmUxfekUFi9chn7l63adDoD3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Validity
Not Before: Jan 31 05:29:14 2025 GMT
Not After : Feb 7 05:29:14 2025 GMT
Subject: CN=679c5faa-ef5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:ea:49:cc:b7:10:c8:a1:9b:6a:82:3a:28:
39:e7:4e:8a:0e:88:69:d3:36:18:75:22:52:37:fc:
9f:93:a9:e8:02:9b:1f:7b:41:d0:ef:d8:a7:04:b0:
f3:3f:5e:ba:19:57:08:21:07:d4:3f:51:f1:56:9a:
bf:60:17:88:03:7b:15:78:40:1b:3e:98:2f:ae:d0:
5c:58:bd:f0:a6:96:24:b0:58:9c:8c:bd:c3:81:ab:
cd:b8:a9:f0:35:5b:32:63:40:d1:d0:56:fe:cc:7a:
21:41:23:14:cb:75:0e:7f:0b:0c:6a:5c:22:36:b8:
f7:dd:8a:ac:0f:f0:59:6a:4d:b9:c1:c2:76:e5:5b:
cf:4a:b2:a7:52:42:07:63:07:34:3d:f7:67:6b:55:
7a:11:22:5f:b1:9c:72:ca:b2:95:d0:0f:0c:eb:07:
c9:23:49:2b:0c:29:0a:68:58:56:dd:dc:cb:c0:88:
3a:63:cb:c6:9c:8b:92:e9:eb:69:77:4d:1e:ca:6a:
e3:61:11:24:93:69:3f:81:2d:2b:14:bb:76:ae:ed:
12:c2:c6:ca:b4:49:cc:f5:58:01:c8:b3:bd:2e:60:
4f:e1:d1:c2:a7:89:45:3f:55:d8:8b:d8:2e:6d:e3:
be:5d:6b:7c:f9:a7:54:08:4d:0a:fe:fc:2d:c2:9a:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:04:E0:17:2A:E8:B9:E5:23:C2:82:D9:AD:30:A5:B9:BD:C2:24
X509v3 Authority Key Identifier:
keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:72:de:c3:f5:47:31:1c:8e:ae:5a:13:7a:32:bd:02:7d:d4:
c0:27:fc:6c:86:f7:14:98:0b:fc:ed:58:b1:04:60:5c:44:47:
51:97:b3:d7:36:b4:ef:58:77:28:63:c9:de:ef:a4:bd:07:bd:
d9:6a:d2:28:56:3f:12:3e:8e:aa:8c:4c:5d:1a:a0:89:68:73:
5a:35:7b:25:19:44:d1:fe:da:f4:72:d5:bb:f2:f8:fa:68:f0:
5f:90:e9:68:33:72:f2:54:5c:2f:a6:ed:58:cb:b7:aa:20:37:
5b:c6:4c:0c:1c:03:83:4c:9e:82:c6:07:7d:34:cf:3f:17:29:
00:58:f3:a3:01:a4:53:6e:62:f7:cf:33:2a:c9:fd:0d:e7:e7:
c5:de:dc:68:47:66:f7:df:aa:24:87:2c:76:33:15:9f:78:2b:
8d:fd:25:a2:0b:92:b8:bf:68:6e:1e:6d:7c:28:7e:7e:b6:6c:
b8:cd:03:f4:50:18:e0:d7:9e:51:40:ba:65:69:1a:ee:7c:89:
fe:72:b8:4e:9a:30:fb:96:95:1a:0a:80:40:bf:d3:fa:dd:6f:
00:52:9b:37:57:88:b6:89:59:cc:be:a7:da:81:b6:78:d9:69:
9b:fe:af:03:72:4b:ac:8e:3f:d5:34:19:e0:78:92:b5:54:f6:
70:99:de:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:21 2025 by rpki-client