Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier: jaATJuF/YfW0zO596HSkaWejeBTbtyyuWWSAx5G7h00=
Subject key identifier: 44:C2:B6:61:33:DD:4F:B1:5C:03:BD:87:D6:88:63:C7:CA:C3:11:95
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial: 033A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number: 0336
Signing time: Fri 31 Jan 2025 01:09:01 +0000
Manifest this update: Fri 31 Jan 2025 01:09:01 +0000
Manifest next update: Fri 07 Feb 2025 01:09:01 +0000
Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: O3/cAwVXJ8g99qeZQA/CV7hkCJWcsSkZY16MhHvD1XU=)
2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: TdSkmklXk1H4TogCKQu6LKS6MtXDIHAbYnJtQJNtXOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826 (0x33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Validity
Not Before: Jan 31 01:09:01 2025 GMT
Not After : Feb 7 01:09:01 2025 GMT
Subject: CN=679c22ad-5d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:b6:06:ce:bd:3a:53:43:5a:98:eb:55:e0:
6f:a9:1e:c1:58:ca:61:73:77:80:c6:3c:6c:0a:75:
c2:01:d4:5d:a7:b9:d0:f4:8e:5f:f3:86:e2:e5:31:
99:0f:20:29:ae:06:45:52:65:06:bc:e2:06:6e:5f:
35:24:61:21:cc:00:b9:70:8c:9a:fd:69:bc:67:bf:
e8:e6:5c:9b:f4:2b:ff:82:b9:dc:c2:1d:02:92:88:
10:21:39:77:45:30:42:6c:aa:6e:af:f1:d0:b5:8d:
ce:d1:50:e7:e9:f1:f0:0b:89:b1:db:65:5c:3c:99:
fd:f8:8c:cf:e0:5a:f0:36:a8:35:ba:e8:ea:2e:36:
c8:06:c3:95:a9:05:7f:b6:03:39:ae:6b:78:c5:f0:
07:d3:1f:36:49:fa:78:2c:d0:15:22:54:45:d8:b4:
b6:72:dc:65:8c:93:58:a9:9c:2c:41:84:68:c3:63:
19:e2:5f:e3:33:59:03:d1:cd:18:34:ea:7b:d0:50:
96:6d:14:af:11:87:04:78:b9:4f:c2:2c:ad:1e:d4:
b9:11:88:96:54:76:41:e9:7d:92:fd:47:fe:c7:34:
64:1d:95:ee:6f:35:f2:66:54:95:83:43:73:a5:82:
54:f4:25:ff:6e:21:a5:29:60:7b:d4:18:77:d1:6a:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:B6:61:33:DD:4F:B1:5C:03:BD:87:D6:88:63:C7:CA:C3:11:95
X509v3 Authority Key Identifier:
keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:1b:02:00:af:69:c7:b7:c2:67:a3:da:e8:67:8c:84:dd:ba:
07:f0:ee:1e:18:f4:1a:d0:cb:30:e6:75:80:fb:c4:0b:b4:ea:
b4:5e:56:b6:dd:c5:7f:a9:06:12:87:7f:dd:84:03:11:c8:ff:
2e:43:60:31:b9:35:25:e4:f5:80:6a:44:32:f2:3d:e1:03:d9:
42:1d:1d:4f:0b:0f:20:2a:28:97:2c:dc:06:42:d5:0c:56:f9:
91:c7:31:71:23:ea:22:f8:17:51:e0:04:fe:04:bf:8b:c5:f9:
78:2c:55:3f:d0:5e:50:77:7a:d3:1c:f6:fd:44:2e:6a:d6:bf:
a2:b7:84:bc:51:28:5f:65:fa:d2:31:6f:c6:a7:30:84:9c:7e:
ec:4f:a6:8d:fe:f5:cb:49:cc:1b:79:40:41:a7:8f:c3:72:a1:
7b:d9:de:7b:a1:3a:e4:0a:9c:70:b7:39:f5:03:76:77:03:27:
6d:38:09:05:d3:b2:a7:b5:2b:d7:6a:4e:93:d8:70:b8:63:38:
58:da:23:c4:8d:ff:ab:c1:db:d8:c4:55:d6:b4:00:4a:e1:c7:
f1:f0:a6:46:a0:5d:ca:04:71:28:9c:a9:9f:fe:65:32:38:70:
c7:71:97:31:30:95:95:eb:b4:36:51:2d:68:57:19:0c:9c:88:
24:5e:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:11:59 2025 by rpki-client