Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier: WYXznDzz1YmaE2ufJyhVEUptIy6XqMtjJAdU4kf6XKQ=
Subject key identifier: 58:54:48:F7:81:38:DF:F0:B1:0C:D5:A6:27:18:FA:0C:C7:75:F0:7D
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0AD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number: 0AC3
Signing time: Thu 30 Jan 2025 19:34:41 +0000
Manifest this update: Thu 30 Jan 2025 19:34:41 +0000
Manifest next update: Thu 06 Feb 2025 19:34:41 +0000
Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: swKn9uQFghfIyIypR73caWdAx1CZdmsqZhE8MH6yZB4=)
2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2775 (0xad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Jan 30 19:34:41 2025 GMT
Not After : Feb 6 19:34:41 2025 GMT
Subject: CN=679bd451-8b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:94:de:99:23:b9:1d:8e:49:31:eb:fa:f3:
e6:f3:9f:f2:a9:d2:12:47:af:62:ab:62:3b:06:36:
43:99:b8:5b:ad:b7:86:75:c6:00:c3:26:e3:97:ec:
f1:2d:ae:c8:d5:02:18:6e:42:cc:7f:d6:9a:28:d2:
e4:0d:ae:ae:25:11:a8:22:ec:dc:82:ce:f8:c4:ff:
e4:61:6f:08:f4:38:e9:c2:30:d8:83:78:07:8e:fd:
b9:cd:12:2b:dd:b8:91:b3:19:d9:ed:94:ac:10:59:
59:79:96:04:ac:3e:42:50:a5:67:62:da:2a:48:7e:
91:28:4b:4b:9e:56:73:94:d4:91:50:82:54:96:1b:
35:e9:c6:af:c1:98:bc:3f:3f:02:52:ad:53:71:7c:
c2:76:c3:c3:c2:3a:9b:23:6c:be:ec:4f:f9:b3:2a:
45:2e:7a:ea:85:89:7a:a5:c4:2c:ca:6e:55:06:a1:
aa:6a:70:62:fa:8a:bd:fa:4d:0f:95:e6:03:22:d5:
57:76:b8:d1:c1:90:ba:92:54:0d:6c:26:0e:16:62:
cf:f8:fa:c6:68:dc:2f:86:20:24:a2:f2:93:cc:f2:
48:40:f4:31:dd:6d:4d:52:1d:de:ec:85:c5:79:af:
fc:37:54:39:87:56:48:a3:37:8c:63:94:90:87:2b:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:48:F7:81:38:DF:F0:B1:0C:D5:A6:27:18:FA:0C:C7:75:F0:7D
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:54:18:65:a2:2f:77:d2:d8:f5:0d:53:59:aa:4e:bc:c7:6c:
32:9a:8a:0e:3c:9a:7d:b5:a8:51:71:60:82:ea:0d:f2:c9:3c:
f7:96:05:05:e6:85:7d:0f:2f:7e:30:f5:fc:ec:82:10:c9:8d:
b5:93:de:1d:e5:66:2a:cf:07:97:8c:98:3e:00:8b:5d:a5:9e:
75:34:d2:0a:79:17:fc:c9:ab:5b:45:5a:59:06:72:21:36:cf:
b0:ca:26:37:0c:4a:80:28:b2:5b:90:40:b6:4c:b7:4e:ad:39:
ce:60:66:e9:1b:4a:47:9b:2a:df:cd:da:9f:45:b8:23:23:73:
fa:03:8d:3d:0b:1f:79:b5:02:7e:57:40:4c:e5:1f:3e:8b:75:
97:60:3c:cf:d4:35:c4:a2:fb:48:f1:59:b7:8d:15:10:e9:58:
27:25:53:fa:15:4d:53:70:64:8f:45:d5:e8:fb:9b:87:a4:7d:
02:72:be:4e:58:38:0b:45:6a:40:f0:4e:60:94:4c:7f:94:20:
88:6f:6e:fc:b9:ff:5a:f2:c0:03:ab:78:da:4f:b5:da:4a:4b:
05:1d:c1:08:4e:ca:dc:b3:ba:78:66:7c:6b:5d:8e:c7:80:88:
cc:72:99:66:31:9d:15:8f:d1:6a:7b:bd:b8:2a:ed:ef:28:d4:
4a:a3:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:50 2025 by rpki-client