Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier: qf6ZPMFZ4uBWuipiFaWQFdourQcllpYtqwLDu1nKfCQ=
Subject key identifier: 65:4C:9D:B7:81:77:63:38:EC:26:CD:EB:4F:5D:81:EC:5B:DA:80:D7
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 04E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number: 04D7
Signing time: Thu 30 Jan 2025 23:51:31 +0000
Manifest this update: Thu 30 Jan 2025 23:51:31 +0000
Manifest next update: Thu 06 Feb 2025 23:51:31 +0000
Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: J+p6XrJs0PfBUK+91uR1Fk+dmM+6/nKP4+pND6CWC0g=)
2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=)
3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1249 (0x4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: Jan 30 23:51:31 2025 GMT
Not After : Feb 6 23:51:31 2025 GMT
Subject: CN=679c1083-0a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:d0:ff:83:d3:48:23:3b:e0:6c:31:3d:07:
4c:9a:67:7f:20:68:b5:b6:b1:6b:0b:32:88:37:f9:
9a:52:4e:5b:e0:bd:5c:de:9c:12:66:43:5d:6e:17:
b2:38:ed:c5:8e:48:da:5b:2f:fb:f9:e6:cf:2f:df:
87:74:09:c7:02:32:7a:1e:8f:b7:76:eb:8b:03:89:
4b:94:48:2c:dc:12:56:3c:0a:34:97:ab:db:e1:92:
a6:ed:b5:60:03:79:63:71:01:3c:77:86:90:ed:dd:
4f:e1:5f:e4:09:34:02:db:fd:a5:04:7d:ca:18:e4:
69:24:89:37:0d:a3:e6:35:3d:8d:40:7f:88:52:0a:
32:a0:20:aa:01:8f:29:6d:96:01:3a:70:f6:01:a7:
43:12:45:da:6f:31:13:a6:b8:2c:4b:43:06:1a:53:
c9:49:df:d2:0b:77:14:b8:e0:47:2e:7e:f3:23:39:
fa:d4:38:a5:45:b5:a1:56:c5:21:21:6f:27:dd:67:
03:fd:23:fa:8d:4c:05:47:cd:79:30:b2:c7:50:5f:
51:b3:8a:c5:79:89:cf:a9:ed:3b:f9:8e:0d:24:6e:
61:88:69:96:34:e2:67:32:f0:2c:fc:24:50:22:5b:
13:08:ee:f0:61:d0:d2:c4:96:97:be:ef:92:72:c8:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4C:9D:B7:81:77:63:38:EC:26:CD:EB:4F:5D:81:EC:5B:DA:80:D7
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:eb:8e:b2:52:3a:0d:dd:8d:51:21:90:2c:d5:d8:d3:d1:bd:
6d:f7:4d:e6:ab:e8:a5:14:a2:f7:e4:c8:6d:27:8f:b0:79:5b:
02:5e:26:11:28:bd:2f:b5:f4:cb:bf:9c:9c:20:5e:15:8a:8b:
e0:ee:c0:a3:22:30:7e:55:c8:ef:f0:63:d8:ad:36:2a:f6:3b:
b2:d4:8d:ab:99:53:26:cf:ae:e5:91:7c:d7:39:c3:60:45:d2:
f4:4e:87:a3:72:ac:c6:b7:89:88:2a:ab:fc:86:07:78:d4:d6:
96:e8:b2:54:c1:eb:ea:90:37:ee:03:2c:58:b6:78:1b:ca:d4:
a9:6c:10:3c:86:8f:22:fc:4c:7f:b7:da:b7:c0:23:c3:b6:67:
9d:79:c2:af:dd:50:7c:46:be:a6:89:78:28:d1:33:9c:cb:f8:
56:9a:4f:87:82:c8:a5:58:fc:1d:39:4d:dc:0e:c2:8a:f9:e2:
79:9c:7e:58:43:a0:f0:7a:5d:95:42:8c:1d:d0:c6:5b:a2:42:
f1:8a:48:6d:21:31:9d:71:98:b3:99:b4:50:de:e5:50:5a:7a:
df:35:9c:1d:14:8c:c2:b9:bf:09:d3:a6:26:be:64:5c:a5:c4:
be:3c:c3:1d:50:ac:93:87:54:73:86:21:65:f6:b8:bc:33:f7:
42:48:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:18 2025 by rpki-client