Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File: TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier: aTtvp+BGi9MH3j8A01+j3NkbzfV9Kuu3xhX/ERCTtTU=
Subject key identifier: 60:38:2D:C1:2E:0A:0B:37:C9:95:EA:61:07:FA:A8:69:E9:B3:DC:D3
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number: 81
Signing time: Fri 31 Jan 2025 05:43:30 +0000
Manifest this update: Fri 31 Jan 2025 05:43:30 +0000
Manifest next update: Fri 07 Feb 2025 05:43:29 +0000
Files and hashes: 1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: ILAAi7/gUV+vcLCxfG/jTq5q92gLs9wZYvZw8cFsDdk=)
2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: gxFq4TGudmApxCmCB48V39AuCdBYRdeV/qO3X4yaetA=)
3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: ophTAyTavYYvv+S2dKtdeyoYjEN6drMlrbOrhmzxr1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Validity
Not Before: Jan 31 05:43:30 2025 GMT
Not After : Feb 7 05:43:29 2025 GMT
Subject: CN=679c6302-ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:57:51:52:e4:e6:96:5d:c0:20:95:2b:e4:
47:ad:ef:01:73:3b:f5:04:49:33:58:19:ec:33:97:
8d:38:2e:4c:08:dc:df:77:71:27:30:d4:ca:f2:f2:
38:3a:27:de:2c:13:a2:ee:21:4f:7a:63:71:4f:0f:
b8:ff:95:32:73:cc:f7:67:16:b4:c8:2d:3e:b8:77:
8d:a7:a4:82:5b:0e:da:53:50:74:0c:ad:8c:c9:62:
a1:3c:82:95:27:97:00:4f:0b:06:2b:d5:6f:c9:b5:
a5:23:bc:2b:29:67:fe:35:4c:1a:d7:45:11:ff:4c:
a3:da:85:07:44:2d:2a:be:1f:16:bf:86:a5:52:d1:
f4:da:5f:73:66:03:50:f9:c1:b4:9f:f6:4f:38:89:
6c:fa:63:da:db:f0:13:b4:94:0b:f4:56:7d:67:68:
89:1a:ad:e3:11:c8:24:2a:1b:3a:50:91:d6:fb:de:
06:c5:7c:7b:a1:2c:bf:ba:51:e3:b3:af:1b:28:95:
53:1f:c3:2b:a2:d1:ad:87:be:f9:5e:66:af:69:da:
52:62:31:76:05:fe:07:0b:55:e8:24:4a:6a:86:57:
57:30:2a:b3:a1:ed:42:f7:27:84:79:61:06:19:98:
59:c0:18:cb:9b:57:5e:98:4b:a6:dd:e8:49:db:19:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:2D:C1:2E:0A:0B:37:C9:95:EA:61:07:FA:A8:69:E9:B3:DC:D3
X509v3 Authority Key Identifier:
keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:fb:97:72:80:0b:87:c2:ad:0e:9b:09:55:16:e7:34:2a:3e:
2d:1e:29:71:65:3a:c7:a2:ec:e7:79:d6:35:c7:bc:c8:6e:c0:
2f:7e:db:7f:52:73:c3:74:d0:76:ae:02:c4:4c:16:c6:c4:88:
d7:c9:c4:ed:6f:77:3e:bd:39:9a:03:fb:07:8e:52:dc:13:48:
94:a8:0c:a0:96:97:7c:f8:0b:ba:89:8c:da:c7:54:0c:ab:c6:
63:74:2d:66:19:f1:4a:b2:9a:06:a8:8a:db:1c:68:c3:0d:6d:
3f:ee:36:ab:4b:a3:95:6f:18:c8:57:61:f3:20:e1:32:80:4e:
3f:9e:0e:55:b7:34:20:ac:28:71:c5:3c:a9:4f:32:9d:cf:45:
b9:ca:95:a0:81:51:c0:c8:69:d1:fd:bb:3e:bf:dd:90:81:b7:
27:57:c4:fb:fa:d9:cf:c6:3a:07:92:2c:f2:ff:82:88:0e:eb:
65:e3:d2:ec:77:cb:d2:08:4e:6e:86:be:38:9d:57:f9:28:8d:
59:28:42:ab:37:cf:74:a2:f0:b3:ad:bf:67:8b:fc:20:93:b9:
15:bf:91:8e:46:94:6e:7b:f8:a0:c8:45:43:fd:40:95:99:5d:
cf:7d:40:cf:1c:34:37:92:4f:03:44:75:b4:12:ac:b1:75:24:
1a:56:b3:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4
RkFGMUQyQjcwHhcNMjUwMTMxMDU0MzMwWhcNMjUwMjA3MDU0MzI5WjAYMRYwFAYD
VQQDEw02NzljNjMwMi1lYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyFXUVLk5pZdwCCVK+RHre8Bczv1BEkzWBnsM5eNOC5MCNzfd3EnMNTK8vI4
OifeLBOi7iFPemNxTw+4/5Uyc8z3Zxa0yC0+uHeNp6SCWw7aU1B0DK2MyWKhPIKV
J5cATwsGK9VvybWlI7wrKWf+NUwa10UR/0yj2oUHRC0qvh8Wv4alUtH02l9zZgNQ
+cG0n/ZPOIls+mPa2/ATtJQL9FZ9Z2iJGq3jEcgkKhs6UJHW+94GxXx7oSy/ulHj
s68bKJVTH8MrotGth775XmavadpSYjF2Bf4HC1XoJEpqhldXMCqzoe1C9yeEeWEG
GZhZwBjLm1demEum3ehJ2xnXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA4LcEu
Cgs3yZXqYQf6qGnps9zTMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx
NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH
NmZNSzkwcFl4bWVQcngwcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCv+5dygAuHwq0OmwlVFuc0Kj4tHilxZTrHouznedY1x7zIbsAvftt/
UnPDdNB2rgLETBbGxIjXycTtb3c+vTmaA/sHjlLcE0iUqAyglpd8+Au6iYzax1QM
q8ZjdC1mGfFKspoGqIrbHGjDDW0/7jarS6OVbxjIV2HzIOEygE4/ng5VtzQgrChx
xTypTzKdz0W5ypWggVHAyGnR/bs+v92QgbcnV8T7+tnPxjoHkizy/4KIDutl49Ls
d8vSCE5uhr44nVf5KI1ZKEKrN890ovCzrb9ni/wgk7kVv5GORpRue/igyEVD/UCV
mV3PfUDPHDQ3kk8DRHW0EqyxdSQaVrOx
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:32 2025 by rpki-client