Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier: FDUbXaM+HH3a+pcijWg4gT+cXwsNDtUq/48CxsixJ2Y=
Subject key identifier: 9F:BD:42:AF:57:D9:DA:00:89:08:0D:A9:64:F8:30:A7:16:B6:BE:31
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number: 020B
Signing time: Fri 31 Jan 2025 02:10:47 +0000
Manifest this update: Fri 31 Jan 2025 02:10:47 +0000
Manifest next update: Fri 07 Feb 2025 02:10:47 +0000
Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: VhyIFXmckwIVa3cXEwWPuGbu09YffsZqtK0wPgFq72Y=)
2: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: PCTX1P2d3fRflAHqzzXSaFtOX5cSgvLNCmPW7UGSTiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Validity
Not Before: Jan 31 02:10:47 2025 GMT
Not After : Feb 7 02:10:47 2025 GMT
Subject: CN=679c3127-9f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:bc:c9:99:7e:0e:3c:ee:a3:47:e8:04:d4:
39:a5:ac:ae:e4:8b:00:aa:c7:57:f2:3d:7f:78:99:
44:b0:1e:07:eb:61:5f:91:ae:3a:72:04:08:1e:b7:
ca:e4:46:fc:3f:8d:86:4e:db:65:42:06:0c:ff:ea:
11:23:24:47:f5:0d:bf:e6:66:42:20:1b:e5:ce:ba:
28:6f:64:53:52:ed:6c:51:17:0a:c4:70:b8:1d:b1:
fa:b4:d1:5c:3d:73:1c:2e:aa:ff:cd:b1:f1:c9:e1:
bc:d6:19:36:3a:78:e4:ea:c0:34:d1:d6:33:0e:df:
4a:7b:ad:f2:06:67:3d:06:8b:30:b3:b9:db:e6:32:
e9:b9:11:8a:1f:a0:5f:ac:08:c4:6c:73:e8:df:ea:
66:d5:cc:30:c1:3d:58:65:e9:02:a4:40:57:5c:3a:
76:c9:7b:32:ce:3c:c5:58:49:7b:66:f7:a0:95:5f:
6f:39:e1:80:bd:29:d4:86:26:de:c9:b5:60:b1:f5:
55:8e:9e:8f:c3:84:91:ab:eb:63:92:31:66:24:e4:
4f:b2:74:a9:81:1d:c1:44:7b:57:7e:eb:ff:dc:57:
30:b9:d4:01:e8:1c:be:71:f9:4d:17:53:ea:be:53:
71:d8:bc:19:b5:34:a5:fc:b1:75:85:a3:57:60:df:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:42:AF:57:D9:DA:00:89:08:0D:A9:64:F8:30:A7:16:B6:BE:31
X509v3 Authority Key Identifier:
keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:81:a3:9d:3c:9b:b8:09:cf:43:73:d8:71:ce:1c:d5:95:19:
75:2e:75:8f:ff:3c:94:2d:ed:bc:20:00:8b:e2:71:8b:11:32:
1f:73:43:b7:40:ed:84:4f:76:e3:65:77:f4:25:64:ce:90:5d:
69:66:51:8b:5b:7e:16:0a:d1:a1:92:0b:d8:09:e1:86:21:d2:
17:e7:e2:70:43:05:aa:a3:15:10:df:4e:70:fe:9d:ee:e3:0f:
97:54:ad:9f:48:b2:ab:2d:d1:b9:b5:57:51:e9:95:a7:60:8b:
30:b7:fc:55:3e:8a:a9:b4:7d:e5:ee:dc:f4:d1:bd:63:be:71:
c1:ef:46:ef:08:39:68:5d:08:cf:5f:6d:e0:4a:0a:c2:ee:5f:
3d:db:d3:81:ef:cc:3c:88:00:2c:cc:8f:07:0a:2e:81:37:a8:
e7:ae:91:2e:bf:9c:78:8f:13:96:86:14:74:5b:ef:b8:e9:9c:
0c:bd:a6:a3:c7:98:ce:c7:26:fc:cc:8f:5a:22:c6:f0:4c:8e:
ea:a2:3a:37:8d:9f:5f:fe:62:26:43:bb:47:fc:c6:26:65:1e:
d0:78:a7:1c:d6:90:6b:2e:42:5f:b2:5c:3c:8c:49:10:52:33:
ab:6a:63:67:ae:59:d0:4f:a0:55:98:6f:e3:46:c3:fb:ba:77:
4c:1a:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:07 2025 by rpki-client