Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json)
Hash identifier: Y1xxHj4mioK/MgaDjoD56pAszWeVNun6s7hVW4kligI=
Subject key identifier: 96:15:8A:DB:D4:45:34:1E:C8:8C:D9:C2:DB:A8:62:BA:CB:15:E1:2D
Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Certificate serial: 0BB4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
Manifest number: 0B9E
Signing time: Thu 30 Jan 2025 19:02:13 +0000
Manifest this update: Thu 30 Jan 2025 19:02:13 +0000
Manifest next update: Thu 06 Feb 2025 19:02:13 +0000
Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: J9YFlVATUhzcW3U7CWt0+M2JXO4pfyU/3Ada95H4iC8=)
2: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: ad0J4ZFgNbW6j5IO3p20cgw4SuRj+wZOS+Yi86cuNgg=)
3: CA822F60509111EF9E40402FC4F9AE02.roa (hash: d8wJLaTSx3ug8YFfB0z4CkmRghIBNJLaDDYkc85OkIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392
Validity
Not Before: Jan 30 19:02:13 2025 GMT
Not After : Feb 6 19:02:13 2025 GMT
Subject: CN=679bccb5-e08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:90:8a:46:7a:97:e9:ed:7f:48:3f:49:9a:
5b:2a:4e:5c:7f:7b:74:5c:9b:bb:d6:82:8a:07:c2:
b6:57:de:d9:f1:7a:fc:de:e6:70:69:50:24:28:d1:
d5:c4:68:fa:63:0f:e4:74:02:2c:c6:33:0f:2a:67:
79:3e:a4:8b:f3:77:5f:17:2b:d4:4e:84:bc:53:5f:
40:7f:c8:7c:fc:92:83:e9:e7:65:ec:f4:5f:8d:a0:
3b:52:dc:57:76:e8:74:39:f9:17:86:5e:c4:5c:20:
10:44:61:57:45:e6:db:10:8f:53:77:ea:8a:fb:8e:
bc:3f:63:dd:27:ef:bd:02:a5:26:0b:f1:ee:db:0b:
8d:36:db:b4:db:3a:55:b1:b9:ea:3c:8a:df:67:74:
9d:94:14:53:2d:c7:1b:63:8d:7e:bd:c1:bd:75:55:
97:72:06:0b:b1:2a:f6:d6:a2:15:61:d2:99:de:b2:
6f:67:9d:97:d5:0d:ce:9e:05:9d:bc:c5:7d:35:8f:
3f:bc:95:86:b9:79:85:f8:37:b9:ac:c1:f7:a4:ce:
11:c6:4b:f8:f0:51:91:d6:1d:ce:0b:8c:fd:8f:82:
43:93:36:33:f9:b0:0b:98:01:ee:d7:2c:7b:a0:6d:
05:57:4a:c9:f5:5f:3f:08:de:9d:f4:bc:ae:69:61:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:8A:DB:D4:45:34:1E:C8:8C:D9:C2:DB:A8:62:BA:CB:15:E1:2D
X509v3 Authority Key Identifier:
keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3b:14:d2:14:46:dc:cb:42:60:b1:0e:34:7e:17:a5:98:41:
11:e5:9c:47:06:23:c6:2a:5b:fe:cc:10:b8:c0:5b:c3:63:5f:
05:ca:a9:5f:32:d6:d9:bd:40:1c:96:87:45:26:43:ec:76:4c:
8a:33:90:ce:85:75:b7:e2:ef:14:c7:7b:76:68:36:aa:3d:5d:
3c:11:30:29:a7:46:1b:f2:dd:3e:10:fd:1e:26:59:d1:69:c6:
9c:51:5a:8f:e2:d6:c1:e8:3f:aa:7e:c6:8d:3b:56:cd:bd:af:
f4:f9:3a:f4:57:ef:b1:0e:fa:6e:48:69:70:b5:71:2a:fa:4a:
eb:1d:12:f4:d7:ac:fe:3c:a4:d1:f2:cd:ba:2d:a8:9d:bc:a0:
03:19:22:f8:98:95:b1:4d:5e:34:78:5e:66:fc:16:61:0c:8d:
51:87:37:d1:72:f3:72:74:8d:63:c8:b2:67:88:ce:d0:d1:ca:
94:81:83:46:16:2c:09:aa:1e:aa:13:01:0b:98:9e:fd:07:3e:
bc:d1:29:34:0a:80:af:fd:3c:cf:5f:38:5a:48:30:02:02:b3:
f9:bc:a3:ad:3b:85:91:28:29:2d:1b:89:0c:e7:2a:83:50:2c:
e0:f3:58:3e:8e:dd:19:63:5f:aa:14:69:17:f0:fc:b8:f5:2d:
58:f0:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:31 2025 by rpki-client