Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: lquS2pbeWbezNS2ZxCAogYAoW7ilIAOpPVVhKqMw+rI=
Subject key identifier: A9:72:90:7E:DF:5A:9A:DF:61:66:87:F4:50:5E:B4:88:AC:50:85:84
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 18CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 18C1
Signing time: Fri 31 Jan 2025 16:28:41 +0000
Manifest this update: Fri 31 Jan 2025 16:28:41 +0000
Manifest next update: Fri 07 Feb 2025 16:28:41 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: 0lZCEBIbL1b/9KCLYXiW5VWbO8ehDQPj2I2PWx6ZkuA=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6350 (0x18ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Jan 31 16:28:41 2025 GMT
Not After : Feb 7 16:28:41 2025 GMT
Subject: CN=679cfa39-c56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:86:7e:3d:11:7f:88:f4:14:3e:34:24:2a:
fe:26:7b:35:4b:97:ee:28:dc:85:40:77:e2:c9:67:
e2:0e:94:f9:7a:55:af:28:2f:68:57:2f:39:b4:66:
c5:3b:a7:06:20:ec:35:72:b6:eb:a1:20:e4:d4:67:
59:df:f5:11:b8:ed:8c:ba:14:52:fb:8d:cc:bd:59:
1d:e5:ac:3d:07:54:32:c4:dc:35:5f:4e:8f:ef:6f:
44:98:8b:39:67:8e:f3:6c:77:56:80:52:88:55:cf:
a6:51:80:cb:13:c7:29:cf:9c:64:79:2f:19:61:06:
07:ad:aa:38:0a:79:bd:72:ef:25:4f:5d:55:0b:0c:
6f:5d:d1:42:8d:77:e0:16:90:c0:30:71:35:fc:c8:
30:39:bf:1e:36:39:91:14:d4:3e:ca:22:30:28:2d:
3f:2e:de:20:a2:ac:73:dc:c8:60:83:2d:a5:40:5f:
25:3f:1e:a8:b3:2f:91:a7:29:66:86:39:36:9d:3c:
ba:ed:19:9a:91:07:58:52:5a:a1:1d:d4:86:31:12:
ad:f1:6b:ee:9b:cc:dd:a8:8f:74:4e:10:3d:86:79:
0b:55:d2:c7:98:b3:6c:bb:c5:5e:4f:db:4f:f4:0f:
fd:a3:da:61:87:5d:8c:19:00:8b:f7:1a:9c:12:ff:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:90:7E:DF:5A:9A:DF:61:66:87:F4:50:5E:B4:88:AC:50:85:84
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:01:b6:98:f8:cc:85:8d:c1:f6:42:5a:0b:76:13:8c:fe:e5:
f8:43:40:cb:f2:af:cd:3d:5d:c3:26:0b:5b:00:ff:05:ec:68:
27:2a:f4:89:61:01:1a:4f:e6:07:82:98:fd:7c:26:45:af:eb:
07:b1:07:19:9d:82:76:82:ef:db:a8:ec:a8:d0:06:4c:d8:02:
80:f0:b8:ef:39:04:93:27:31:7a:a7:b7:52:58:c1:74:ce:f8:
50:2c:f9:64:96:9c:c5:ac:97:ed:6b:14:63:aa:8e:b2:6a:f9:
a1:a9:8b:e1:b0:fa:e4:19:63:75:4c:a8:c9:2c:0e:d2:f8:18:
f7:79:df:10:66:45:f2:3c:fd:b1:6b:15:8d:80:13:76:21:3b:
db:6f:33:ae:4b:70:da:27:e7:b1:1c:05:77:fe:63:b2:a7:2c:
69:d5:85:52:b5:9b:68:db:82:cb:f1:d1:c4:c8:a5:2b:ab:65:
b2:e0:8e:a8:ac:81:75:27:07:5c:dd:cc:80:2d:5f:91:b9:bc:
9a:dd:68:bb:56:03:99:3a:af:46:18:ee:e7:cc:b9:71:e8:ac:
7b:27:55:82:6e:b6:47:d0:ad:51:73:be:36:76:f8:50:e9:35:
9b:c9:97:3c:fd:2f:2c:74:d6:b3:e3:51:10:b7:28:3e:69:39:
1b:fd:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:58 2025 by rpki-client