Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier: wMA4Wm3HvI+ai+ttgz8bcmLyn59rJz6qrgR5wJYz1/w=
Subject key identifier: 92:20:B5:82:D6:74:DA:B7:31:5D:F2:DB:0A:4D:C8:80:48:52:58:12
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial: 03CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number: 03C3
Signing time: Fri 31 Jan 2025 00:42:42 +0000
Manifest this update: Fri 31 Jan 2025 00:42:42 +0000
Manifest next update: Fri 07 Feb 2025 00:42:42 +0000
Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: l+ALVZdR+NAGFO4x4kD7e74KizeR/DYaBb9tBNFH0x8=)
2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: vU7fQooVaJk/8bmjfMJwzmIcKpCJVNxNvX0SFPwtzeQ=)
3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: GmAluyp1SMa2XHtQwLg3qsZiugrvAjRv/8qqPdWoOr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971 (0x3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Validity
Not Before: Jan 31 00:42:42 2025 GMT
Not After : Feb 7 00:42:42 2025 GMT
Subject: CN=679c1c82-be26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:9c:a4:05:71:61:39:49:a4:7a:27:d9:65:
d6:bd:84:ec:a3:5d:5a:6e:f3:33:31:b4:12:a5:74:
28:a3:be:7a:98:03:cc:b2:82:a3:66:e0:0c:27:8a:
88:ae:1f:db:52:a5:61:31:b3:08:cf:d8:8e:ef:54:
b7:a7:2b:ef:ff:1b:58:3e:45:d4:6f:53:52:69:50:
ef:58:05:6e:fb:57:86:e1:e0:df:59:91:25:0d:a2:
cc:83:24:fe:bd:86:ab:aa:73:e5:34:a4:9b:a3:78:
6b:2b:f4:f7:1c:3c:f0:56:1c:1d:7b:44:95:88:cf:
8c:53:b2:c9:11:5b:2a:98:5b:ed:fe:37:b5:9d:6f:
16:c6:5e:b7:8b:1c:44:30:05:56:2c:65:22:d8:ab:
d6:e6:5a:5f:37:b0:a0:d3:8c:ea:23:5b:e8:c7:8e:
22:a2:6a:85:1a:fd:39:09:5d:86:2a:d9:7f:7e:8a:
20:31:f0:8e:56:08:20:3b:96:c7:1b:1a:33:ce:42:
3a:e7:87:88:be:05:bd:6b:cc:26:66:02:d8:72:6a:
a4:74:0d:88:d3:aa:42:25:59:23:4d:dd:9c:46:4a:
60:66:86:92:c6:c1:3a:3a:b2:ad:60:08:6b:5d:ad:
05:87:2a:e4:db:57:57:b6:a6:d6:00:2b:1f:bf:ff:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:20:B5:82:D6:74:DA:B7:31:5D:F2:DB:0A:4D:C8:80:48:52:58:12
X509v3 Authority Key Identifier:
keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:c1:7b:cc:d6:ae:98:dd:26:8b:85:a7:36:d5:15:c9:d8:50:
01:35:bb:ba:2c:12:4b:6f:b3:67:2a:33:70:95:f2:2d:97:78:
6c:48:e6:43:ff:4c:55:3f:1f:9d:04:a9:96:c5:2f:0f:a0:b0:
e0:c1:f2:1c:15:9a:d3:46:5a:f9:11:9c:1f:71:3f:16:ed:6b:
7f:9a:ee:ff:4d:6a:23:8f:ac:25:1a:33:0b:10:21:4c:ca:74:
fc:c8:2b:87:de:6b:cb:f2:ce:4d:a9:e7:63:92:0b:73:6d:2b:
7d:e8:fa:3f:21:bb:39:43:6f:35:11:de:f8:8c:4e:be:67:87:
08:f0:b0:cf:66:2b:17:88:38:ad:d0:ce:6b:9e:d8:66:01:a4:
81:2e:9a:a9:26:11:30:6d:0d:c0:81:f6:9c:41:c9:2e:bc:bb:
a2:15:01:ca:11:fa:5a:fb:77:5f:e5:39:ff:67:e8:2e:18:0c:
d6:c4:b2:c0:ac:b3:13:a8:37:ee:45:c9:30:cb:ac:d8:88:dc:
ce:16:0e:53:95:d8:e1:61:93:58:31:54:98:72:1f:1d:e0:3e:
aa:c1:b8:95:07:96:79:2f:8c:4f:05:9d:d1:6f:c7:10:a9:85:
b7:96:5d:db:03:34:bb:d2:0b:0b:ee:17:81:64:ae:a7:7c:c3:
5e:fa:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:16 2025 by rpki-client