Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier: 6STYfOs/NLD1F5R220u054ZvKTy0VFRNV680A5aAA1A=
Subject key identifier: 8D:94:16:52:57:68:C2:AA:BD:D3:D6:C3:36:24:3F:82:F5:50:AB:0F
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 09C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number: 0998
Signing time: Thu 30 Jan 2025 20:11:13 +0000
Manifest this update: Thu 30 Jan 2025 20:11:12 +0000
Manifest next update: Thu 06 Feb 2025 20:11:12 +0000
Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: NIgFgv5Y+TXx0HcHC4XkRQqlkwKnyxrdFJIu+PjNG/Q=)
2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw=)
3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: lfBwwOjjkJPzorGSrjFmgyYNK8ta/zHBe8Kj7Bzu0ac=)
4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: /SND4cbujhT7TqEgt/0aWxeQoWtrbzsjgSVcPJIkIEo=)
5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: 6v3m90vLYNtp4AY7tUO3B6KEXg7uMMxAcXi3ddcOJ74=)
6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: Y4DJ8WF2RUGHabm+AWJoTCeaPDdvIhxKo59oQbeVOD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2498 (0x9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: Jan 30 20:11:12 2025 GMT
Not After : Feb 6 20:11:12 2025 GMT
Subject: CN=679bdce0-2804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:18:4d:a1:e3:dd:d1:ae:2d:06:92:a3:4e:
24:dc:35:20:e4:30:5d:05:16:4c:5f:65:c1:0a:4b:
31:12:41:49:09:0f:ec:7a:00:ec:ab:cb:b3:98:a1:
fd:38:f1:8a:c1:b0:3e:9c:b9:10:17:22:a3:54:5d:
7a:eb:af:56:f1:00:cf:d8:6e:a1:8a:54:44:1b:d9:
41:6d:04:ef:b9:1f:5e:14:95:d5:0a:b7:44:3e:f4:
a6:ae:bc:3c:8a:53:53:f0:02:eb:77:29:fa:8d:c2:
2d:f6:61:a1:17:ca:d8:0e:14:88:90:1c:41:72:97:
80:b4:6b:a6:22:be:e9:3c:94:5b:1f:72:50:5b:55:
25:60:c0:64:63:a2:99:dd:d7:56:f0:d0:b1:bd:ac:
7b:d6:f8:c4:53:9c:c2:82:56:0b:68:ac:e2:7f:b6:
6b:aa:b8:65:42:0a:77:70:91:c2:30:4f:55:34:77:
da:84:c2:a3:d5:ef:4f:0d:47:9b:38:3a:e3:d2:b4:
ea:84:2a:06:af:93:6c:7c:e0:87:77:37:18:1c:d4:
0f:f3:53:21:a6:da:99:2b:ae:52:c0:aa:f6:2b:6c:
c8:8b:9a:ff:4a:97:91:43:0c:90:c5:44:23:a9:2b:
82:45:00:d0:a9:dc:0a:2c:6d:a8:17:b8:98:04:aa:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:16:52:57:68:C2:AA:BD:D3:D6:C3:36:24:3F:82:F5:50:AB:0F
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:a7:fe:88:e7:5f:76:8f:0d:26:7d:d3:67:2b:70:9e:77:
f0:e9:66:ed:bc:7d:da:25:c6:23:02:eb:5b:ab:52:6f:0f:1f:
68:ea:f3:64:7d:45:ec:99:08:92:12:2e:a2:d4:d2:37:d5:e7:
9d:ae:33:0c:f8:44:74:2c:db:bb:41:6c:0e:8b:85:66:e5:5a:
9b:73:e3:87:99:33:7b:f8:db:89:2e:8b:fe:cd:39:4f:93:18:
1f:d3:e2:4c:0c:60:ef:23:c9:09:ce:8d:f0:42:3e:d1:46:bc:
9e:ea:1e:f4:68:26:de:7b:a8:77:cf:f0:54:57:8b:37:30:4a:
f2:40:46:28:67:78:3a:18:5c:bb:87:ff:54:f1:3e:e9:5d:9b:
77:80:37:fd:3b:94:2e:b8:75:3a:de:74:c8:4f:bd:5d:71:b0:
dc:33:fa:52:c2:3a:08:8d:d7:bb:10:ce:fb:8e:d5:16:8c:bc:
29:bd:b8:11:f1:39:fe:b4:9a:ef:1e:75:cb:12:bd:2d:7b:8e:
8c:13:a5:85:da:e2:4b:55:43:82:73:c3:6b:b5:41:69:0f:75:
82:5f:24:90:88:0e:06:1c:af:cd:c1:a0:c9:ef:fc:37:00:b4:
4b:ad:04:11:5f:97:0e:64:c4:40:1c:c1:f8:f5:28:fc:21:39:
f2:9f:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:33:54 2025 by rpki-client