Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json)
Hash identifier: l0n84WeiArWTAAjYkHBrfnscgbHB4yxy3dhFbijuB3o=
Subject key identifier: 57:BA:0A:28:5E:06:B1:9B:23:21:78:77:0B:12:17:84:23:11:3A:D6
Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Certificate serial: 06A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
Manifest number: 068D
Signing time: Thu 30 Jan 2025 22:19:21 +0000
Manifest this update: Thu 30 Jan 2025 22:19:21 +0000
Manifest next update: Thu 06 Feb 2025 22:19:21 +0000
Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: JuWuJ8/Dh/jrKS64esxtTpFiXNXCJMymOL8OisAizOE=)
2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: gAGSLxf5tFApE12cv2B6l8rBNTtC/4BB/4TsOzWKxtk=)
3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: yIVzk4uXvD0YPL4yuXzlhtAAemUdmmIw9l3qjodWsVI=)
4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: Fb/SlWPpuirXxScQ8K2j3QvFK2QuAZBQm5YwL5xNiGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Validity
Not Before: Jan 30 22:19:21 2025 GMT
Not After : Feb 6 22:19:21 2025 GMT
Subject: CN=679bfae9-b2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:e0:cd:e4:4e:76:4f:13:b6:28:6a:f4:5b:
35:7b:9b:d9:07:4e:98:3d:8e:fa:ab:f9:46:ca:de:
e6:dc:13:c3:62:c2:08:a4:b2:c7:a2:c8:d5:30:33:
54:7d:c8:3e:82:c2:7a:e6:70:22:e0:bb:20:9f:d2:
8c:a2:de:c4:85:53:db:47:fb:6d:b4:a2:a6:a3:14:
81:11:8b:6a:77:15:6e:48:9b:67:51:ec:56:12:c4:
7c:11:88:3d:6b:6d:aa:90:70:92:0c:96:26:6d:c0:
40:fb:db:24:20:f7:dd:cb:66:32:68:44:39:85:1a:
b8:a7:d1:33:19:e4:51:50:2a:47:19:ab:1e:62:2d:
10:fa:fb:e7:b8:ba:6c:3d:d7:ab:0b:25:fa:f9:0e:
e7:25:43:6d:98:51:e1:e3:b3:96:22:67:0e:d6:4f:
5a:f0:d2:d8:f6:44:c2:25:2f:63:7b:cb:fd:60:c5:
bd:aa:c6:61:56:ab:e3:12:f9:00:2b:a7:ef:9c:08:
f8:2f:e0:cb:cf:90:04:eb:46:d4:f6:eb:fe:10:ce:
22:94:e4:d4:b6:4e:c4:24:95:2e:cb:25:c9:94:24:
08:36:4e:df:a4:1e:a2:81:57:2e:c0:45:b3:cf:38:
3e:d1:6b:db:ab:3e:cc:8a:28:04:03:69:8a:36:d6:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:0A:28:5E:06:B1:9B:23:21:78:77:0B:12:17:84:23:11:3A:D6
X509v3 Authority Key Identifier:
keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:08:eb:aa:82:34:93:02:7a:44:e1:8c:b6:21:ed:11:ed:3b:
2c:c3:9d:bb:b0:3e:f5:40:07:3b:e0:2d:af:8d:f9:e2:19:43:
65:91:f3:8c:7c:2e:23:19:72:16:0f:5b:9d:64:ae:72:b9:8e:
b1:44:a6:1d:c3:53:ee:d7:73:04:fd:d1:c2:98:bb:28:21:fc:
0e:ae:66:c5:93:eb:66:5a:4a:62:20:f7:79:15:51:b5:8b:d5:
78:ee:b5:0c:f8:0c:2d:c7:ba:ce:78:2a:2f:50:0b:e4:20:fa:
e2:8b:1d:44:e4:90:e9:83:d1:a5:90:a8:3b:8e:5d:92:c0:cb:
85:ee:01:33:8d:23:c4:d1:2c:d1:eb:0c:52:d5:1c:bf:7f:d0:
4e:32:ba:5b:f9:7a:61:6c:dd:bf:d0:25:aa:45:68:11:33:26:
11:25:c3:11:ea:90:9b:74:a7:53:5b:0a:c2:28:89:c8:30:df:
b8:1f:38:13:a0:ce:f6:95:58:52:da:d1:49:5e:36:42:ad:02:
26:55:16:65:59:4c:68:58:8f:63:6c:4a:1b:ed:ad:73:52:da:
14:8d:d3:bd:38:48:f7:66:64:0d:e8:73:2e:10:e9:43:2d:11:
3a:0e:d8:17:91:7a:cf:7a:db:89:9e:a2:9c:f9:fa:05:53:01:
5a:3d:e4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:28 2025 by rpki-client