Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier: DAgM/7tghE6wwhs3aftyv8QNz0v+FnIaRY2xRHr/PWc=
Subject key identifier: 8F:CB:27:57:DC:69:64:15:D2:D1:68:41:F6:04:67:63:87:63:B6:B4
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial: 052F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number: 052A
Signing time: Thu 30 Jan 2025 23:33:58 +0000
Manifest this update: Thu 30 Jan 2025 23:33:58 +0000
Manifest next update: Thu 06 Feb 2025 23:33:58 +0000
Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: ef+2gvJdHpQyyjFgtvR6vVm58xTuYR+GT9VsDlZl3aY=)
2: 529F69FCE5CA11EBB98C5577C4F9AE02.roa (hash: iGGEAjUC0++42POw1gb2SZmwmNS0zkkpPN27YBry/aI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1327 (0x52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Validity
Not Before: Jan 30 23:33:58 2025 GMT
Not After : Feb 6 23:33:58 2025 GMT
Subject: CN=679c0c66-b662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:ea:46:22:f7:83:16:cf:e6:cf:a8:5f:99:
a1:8f:86:4b:63:8c:58:1d:16:61:7b:ba:1f:70:92:
54:7e:d4:a9:6b:6f:72:00:40:f8:40:0c:29:e0:db:
0a:a2:72:98:d8:62:2a:d3:de:1a:19:0a:47:db:d4:
63:ea:66:3d:4b:93:7e:8b:c8:55:3c:f1:63:2c:bb:
94:d0:89:6b:c5:53:68:d1:f1:1c:10:66:54:07:28:
94:32:ca:26:78:6e:cd:e5:a2:35:14:e9:25:2a:8b:
46:3f:08:2c:e1:84:b6:e7:fa:00:ab:d3:4f:e1:b7:
8d:66:b1:0d:9a:71:98:af:60:1d:81:47:e4:27:0d:
c5:89:58:79:e6:89:d5:8e:18:4e:8b:6c:5e:1e:76:
e8:a4:8e:01:9d:94:16:6b:06:df:8f:35:a8:fa:f3:
7d:df:e4:2a:87:03:48:5b:0e:27:80:c4:55:8b:f3:
c7:1f:a0:ea:81:a9:2a:80:02:5e:2e:38:2e:fb:87:
b1:13:e5:46:eb:1c:e4:63:c8:67:cc:47:24:82:ca:
32:3b:bc:02:3e:14:52:6d:76:ee:63:5a:52:8e:00:
c5:ac:75:b4:05:a1:a8:3d:7b:15:86:65:46:c9:74:
9e:f7:28:dd:b9:a9:b9:0f:28:70:4d:7c:fc:99:7c:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:27:57:DC:69:64:15:D2:D1:68:41:F6:04:67:63:87:63:B6:B4
X509v3 Authority Key Identifier:
keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c7:d4:6a:0b:e3:1a:80:70:6e:0a:22:05:28:08:99:65:70:
c0:f8:b5:64:e2:9a:50:75:7b:99:fe:12:1e:68:2c:1e:ce:f1:
e5:c1:9e:57:dd:69:d4:04:9a:b5:8a:e4:6e:1f:e1:00:2a:51:
eb:f3:97:1a:1b:9c:fa:84:7e:f8:a8:44:c8:c2:cb:d3:50:36:
26:f9:a1:f4:71:98:eb:f4:7c:e0:6f:05:15:75:fd:d4:b0:80:
15:81:1e:c8:92:b2:0d:e2:ad:7c:bf:a7:f8:df:c1:2e:60:06:
2c:07:cf:82:69:07:bc:b4:67:34:c3:11:56:cd:3a:5b:9b:92:
26:94:32:de:64:30:77:d9:b7:1c:ef:9d:d5:0d:a4:a0:5e:0b:
98:42:9b:28:70:af:2b:5c:65:02:f8:b3:21:90:4a:26:57:e9:
00:79:4d:dc:8b:e7:92:df:ed:73:55:f6:6c:4f:37:78:bf:cf:
6e:cd:ce:90:cc:70:90:ba:a9:18:b1:8e:89:c9:e6:7a:57:91:
2c:e8:5f:22:4b:b7:c1:e5:51:b2:f1:50:d2:7a:cb:0f:5c:da:
b5:89:20:b4:cf:60:52:54:4a:77:5a:bd:5a:32:d3:be:8f:58:
2a:52:9b:b8:94:2b:55:11:f6:a1:2a:0d:6a:5d:c4:46:a8:f6:
52:f4:54:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1
NzZGOEMxMDUwHhcNMjUwMTMwMjMzMzU4WhcNMjUwMjA2MjMzMzU4WjAYMRYwFAYD
VQQDEw02NzljMGM2Ni1iNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMnqRiL3gxbP5s+oX5mhj4ZLY4xYHRZhe7ofcJJUftSpa29yAED4QAwp4NsK
onKY2GIq094aGQpH29Rj6mY9S5N+i8hVPPFjLLuU0IlrxVNo0fEcEGZUByiUMsom
eG7N5aI1FOklKotGPwgs4YS25/oAq9NP4beNZrENmnGYr2AdgUfkJw3FiVh55onV
jhhOi2xeHnbopI4BnZQWawbfjzWo+vN93+QqhwNIWw4ngMRVi/PHH6DqgakqgAJe
Ljgu+4exE+VG6xzkY8hnzEckgsoyO7wCPhRSbXbuY1pSjgDFrHW0BaGoPXsVhmVG
yXSe9yjduam5DyhwTXz8mXwUowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/LJ1fc
aWQV0tFoQfYEZ2OHY7a0MB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0
QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2
Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcx9RqC+MagHBuCiIFKAiZZXDA+LVk4ppQdXuZ/hIeaCwezvHlwZ5X
3WnUBJq1iuRuH+EAKlHr85caG5z6hH74qETIwsvTUDYm+aH0cZjr9HzgbwUVdf3U
sIAVgR7IkrIN4q18v6f438EuYAYsB8+CaQe8tGc0wxFWzTpbm5ImlDLeZDB32bcc
753VDaSgXguYQpsocK8rXGUC+LMhkEomV+kAeU3ci+eS3+1zVfZsTzd4v89uzc6Q
zHCQuqkYsY6JyeZ6V5Es6F8iS7fB5VGy8VDSessPXNq1iSC0z2BSVEp3Wr1aMtO+
j1gqUpu4lCtVEfahKg1qXcRGqPZS9FSf
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:22 2025 by rpki-client