Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
File: tLSrnzywRDD9ZNTuKt0IReRNV_8.mft (raw, json)
Hash identifier: 0MDTbjqVx8isfLTNnbJEBw87jPtDRnLH3A2/9fwPEp8=
Subject key identifier: BF:9F:57:2E:BF:90:EB:BB:B0:D8:C2:0E:4E:E7:E1:9B:BE:96:2F:31
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Certificate issuer: /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 02:55:07 +0000
Manifest this update: Fri 31 Jan 2025 02:55:07 +0000
Manifest next update: Fri 07 Feb 2025 02:55:07 +0000
Files and hashes: 1: tLSrnzywRDD9ZNTuKt0IReRNV_8.crl (hash: A9zLsmgtwFItYAwOQFTaYD/Y7vDIhyVXOTEyAsJ5wbQ=)
2: BDBF9A0666D011EF861D9840C4F9AE02.roa (hash: bHUERkg8bGXKbdYgVMtl9i6ispE9ShleXxD/LHmjK+I=)
3: 717DC7D4688011EEB1FB1959C4F9AE02.roa (hash: voTdqkVIgk5PrL5fF3IbG6qj2hjdu2WrO//xgYy60xA=)
4: D70560A4989E11EFA7941866C4F9AE02.roa (hash: VuQtoAP+dq92tNhzdN8t9PjSxeKVTCVjTa2Vb/TaBDk=)
5: 34C93324F8B211EEB9088A75C4F9AE02.roa (hash: 1FFvNKh1Awacr8s+sY4YAQXmMU9FD58//Y/2p9QbgM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Validity
Not Before: Jan 31 02:55:07 2025 GMT
Not After : Feb 7 02:55:07 2025 GMT
Subject: CN=679c3b8b-7901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:a4:17:1d:53:c0:e4:c4:3f:72:34:5c:5f:
6a:8f:77:a5:3c:a5:8a:d2:02:1e:b6:18:13:d4:4c:
94:ba:96:6d:a8:3a:1f:aa:7e:92:e3:89:d4:60:aa:
31:78:72:22:ee:2d:e7:a0:c8:e1:e9:b9:89:ca:4a:
2b:6c:bc:48:c0:8e:af:79:7a:38:48:94:db:b5:c0:
29:bc:bf:54:ef:62:36:0c:2f:4f:33:e8:4c:e7:c2:
9c:c4:c9:6f:41:17:35:80:41:12:19:c7:23:f6:16:
e4:24:9d:45:f2:5b:82:50:93:6e:f6:53:b4:24:4c:
fb:10:79:8d:5f:73:d7:6d:fc:06:57:10:af:a9:91:
6e:ac:eb:77:dc:27:4a:2a:82:a5:0d:a1:1e:e0:08:
6d:10:f2:ab:a8:a7:76:30:cb:3d:8c:09:93:86:27:
a2:83:bf:f3:fd:21:6f:6c:af:55:93:62:4b:08:72:
3f:26:9a:3d:39:10:1a:24:f7:10:4e:a1:a1:bd:e0:
b9:8a:e3:9d:4c:2a:a5:c0:6e:7b:fd:63:c4:da:d9:
61:5d:e2:36:2a:c1:6a:ea:38:04:6f:1a:35:91:aa:
30:1e:bb:6b:36:7b:fc:30:ba:83:81:15:9f:ea:a2:
15:0e:ec:70:46:75:61:e5:34:7d:8e:ef:04:dc:91:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:57:2E:BF:90:EB:BB:B0:D8:C2:0E:4E:E7:E1:9B:BE:96:2F:31
X509v3 Authority Key Identifier:
keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d0:bb:da:0d:32:7e:8f:71:3d:b8:72:65:9d:18:df:47:ee:
c4:1b:d7:a4:08:cd:7f:0f:2f:9b:e8:7d:32:a6:a7:31:78:21:
61:da:8f:d0:84:d1:ef:a4:09:66:e0:cb:e7:35:2c:f2:4d:a4:
0c:25:e0:24:27:81:86:7b:ea:21:ea:7c:78:74:54:35:a8:06:
84:58:90:1b:50:a4:d8:f4:61:b3:ea:03:05:eb:b9:a5:90:e8:
f0:ac:46:8f:97:d3:75:9d:85:da:60:85:81:43:c2:c4:ec:5d:
a8:ff:be:17:34:59:06:76:39:45:4e:ba:01:a8:55:ca:7e:7c:
5b:fa:ae:05:ce:7f:49:26:55:03:f4:11:e7:e9:1b:dc:08:c8:
f0:80:42:2a:4b:0e:5c:f9:b7:79:94:7e:c3:fd:6d:38:2a:3b:
25:cb:b1:fe:60:82:ea:89:8b:5b:4d:47:26:9a:8e:d2:5f:c2:
61:3d:eb:e0:cf:6b:cd:a1:8d:e3:10:7e:4f:09:df:f0:12:74:
a0:b4:39:81:46:18:d9:57:ec:13:a5:99:68:12:93:c1:c7:e1:
fc:38:9d:d6:51:d0:60:b7:ec:14:65:ca:76:9a:cc:1b:fb:bc:
60:7c:38:45:9e:7c:80:05:c6:12:de:11:f6:c9:cf:d2:63:85:
33:e7:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:19 2025 by rpki-client