Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier: d2m1OZXYY7KBn6W3xvXQDtN9JC58iVKDCNpHeMaO39A=
Subject key identifier: 8C:77:90:3E:83:24:18:39:83:E5:0D:32:32:FB:7B:44:4C:97:C7:4A
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number: 020A
Signing time: Fri 31 Jan 2025 02:09:49 +0000
Manifest this update: Fri 31 Jan 2025 02:09:48 +0000
Manifest next update: Fri 07 Feb 2025 02:09:48 +0000
Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: R9beXskaOZuUtCKqBlqS68BBV79VGc4EA8atqBwaHZQ=)
2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nhFejZbPmF/mHGnNhHKJIEbR5bZWtdWdp3ZM+fASALI=)
3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: vBxsFzT5gC7QzQ1XTLVC3PqbT6UzqTD7wUR9KYNT0TI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Validity
Not Before: Jan 31 02:09:48 2025 GMT
Not After : Feb 7 02:09:48 2025 GMT
Subject: CN=679c30ec-1fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:e2:e6:19:7c:11:66:c3:1f:a2:1e:0b:ec:
4e:91:06:6c:72:65:3b:b5:e6:05:62:4e:5a:f4:6b:
b1:cf:6b:70:35:14:84:7b:3f:ab:be:17:b8:f0:16:
3a:ea:7f:03:e6:21:2f:bf:de:ed:c2:9e:bf:30:1a:
7f:3b:c6:49:7e:80:7d:62:4c:ed:95:98:d7:c2:dd:
46:0d:62:34:33:db:a2:a2:94:51:b9:e7:93:d7:99:
0c:c1:03:58:f1:68:6a:de:7a:b5:d5:e4:60:bd:86:
59:c8:a7:18:b8:2b:b3:8e:4b:85:4a:78:29:02:ae:
a5:04:80:8f:d8:89:d7:21:7c:e2:80:34:2d:0c:fa:
21:40:77:ee:8c:47:8b:7e:14:2f:02:48:06:3f:1d:
ef:ba:65:7e:0c:93:ca:56:c7:21:9e:59:e3:70:ca:
1f:4f:ea:d1:b0:33:23:af:c4:ba:0d:27:97:59:0b:
61:49:ab:a1:7a:78:7b:d3:e1:2c:06:5c:b8:41:99:
07:64:58:28:1a:11:2f:f8:2d:d3:07:9f:b6:20:b8:
fd:8f:27:be:e8:2a:0b:c4:1e:78:92:59:e5:5e:f6:
72:32:21:cd:49:b8:5b:c7:7a:de:12:58:d8:9d:71:
55:5f:63:e2:10:74:f1:74:ac:07:a4:75:15:62:f6:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:90:3E:83:24:18:39:83:E5:0D:32:32:FB:7B:44:4C:97:C7:4A
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:35:e9:3d:7f:3a:a8:c9:fe:7f:18:e9:83:cd:64:c1:73:ad:
dc:53:71:93:91:79:78:48:2f:20:76:a7:a5:10:4e:66:af:97:
51:16:fa:7b:73:41:ed:5a:20:82:c8:d9:8e:0b:13:2a:61:20:
b6:17:5e:d3:52:fc:51:54:9e:cf:6b:b2:9b:6b:78:af:97:b5:
6d:42:39:3b:3e:1d:d6:fd:d9:4e:44:24:37:34:ea:a3:00:69:
d2:7a:c8:42:12:e8:67:69:9e:7b:54:df:e6:53:ae:37:8d:79:
35:3f:0a:20:75:e2:e4:bc:1a:4f:0a:d8:9c:fa:97:a0:b2:c9:
91:29:65:5e:a2:50:7a:1c:04:f6:f8:7f:0f:db:e7:9e:6c:c4:
26:ea:28:5c:e4:d2:7f:48:cc:5e:bc:dd:62:bd:72:9c:cc:de:
0e:74:9d:d1:da:14:6a:fe:7c:ce:09:67:0d:e8:63:c1:9b:ef:
52:d5:37:e4:41:8b:66:c4:39:44:b2:0a:2b:96:a7:5f:c5:6b:
89:f7:13:2a:2c:38:a5:12:db:00:09:0c:49:80:42:94:06:fe:
b0:b9:ae:50:cb:b0:28:b4:e4:22:2a:8b:b8:f6:37:ee:0d:a8:
c6:ac:f7:e6:90:3e:07:7d:a9:1c:b2:c6:49:bb:31:97:5c:d0:
c0:6b:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:12 2025 by rpki-client