Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: dcsfd19lx1N6NKbD/iC97iAA2pY3sP2Kz4rDlqPyoIQ=
Subject key identifier: EE:93:68:89:B0:76:90:60:85:03:15:40:9B:36:09:EB:C7:59:71:20
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 173F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1626
Signing time: Fri 31 Jan 2025 16:55:30 +0000
Manifest this update: Fri 31 Jan 2025 16:55:30 +0000
Manifest next update: Fri 07 Feb 2025 16:55:30 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: IPmErgHuw2wz17cvTtfaTXjjRQGv+uZURFtL7Hs3OwY=)
2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: F7+/UI/IdrG7UJylIwMQeWeh8x4KccRZsFSY0IMAJig=)
3: 48B0725E93A711EFBD8CB217C4F9AE02.roa (hash: S7eQBM+TbQ7WFHLw1f9zEWkAvM/PcOBxQDKJUnp87ig=)
4: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: G9R6UKF81vPpeZEj71HVNBUREkX7yk3WJ1Q6tTRHYYM=)
5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: kIvT/50E2laNc1gLfjO5rKE/sWwcpe4nrifpeBT23BI=)
6: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: j6prxSOt5QlgU/NV/soMWbDX95ZjTIwaOn33GpJLHDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5951 (0x173f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Jan 31 16:55:30 2025 GMT
Not After : Feb 7 16:55:30 2025 GMT
Subject: CN=679d0082-9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:56:84:19:9d:ed:ce:b8:72:e3:8e:73:e9:
93:cc:d6:21:d4:38:f7:44:98:ae:a4:72:52:d7:62:
05:64:87:27:9d:4e:89:69:d2:42:6a:00:fb:cf:8a:
2b:19:53:58:96:e4:2a:58:30:6a:1f:0c:75:b0:9d:
92:94:47:b1:64:79:f2:dc:04:78:83:47:b0:ea:28:
35:21:97:f3:02:41:b4:6c:bb:33:13:30:06:59:f9:
ff:63:2b:98:f8:5e:76:c6:11:c3:af:27:fb:e8:38:
15:73:3c:e9:e9:b8:aa:25:04:c4:d9:f1:fd:f3:fc:
57:a6:0a:7d:e1:83:93:d6:b4:83:de:ff:23:14:ed:
ba:87:ae:fd:be:d7:9e:55:ee:ef:28:98:a0:84:17:
60:44:a6:3a:48:85:fb:8e:89:f7:16:22:ad:0b:d2:
a1:8e:34:86:d1:d3:3f:90:aa:9c:b8:c5:57:ed:36:
1f:42:ee:98:ec:aa:79:2e:c9:93:05:fb:3b:b7:ea:
73:53:b4:92:c8:a0:2d:15:9b:cb:82:30:8f:fc:c2:
20:1b:ec:a0:d3:09:8a:66:cb:12:dd:08:0f:7d:e9:
45:6b:67:86:9b:12:34:0e:23:18:50:13:39:39:63:
d2:dd:24:bd:40:ff:c4:4c:51:fa:23:63:68:2f:cd:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:93:68:89:B0:76:90:60:85:03:15:40:9B:36:09:EB:C7:59:71:20
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:1d:6b:3b:d1:f4:fd:36:83:d6:79:e5:6b:df:b5:c9:40:36:
e4:ed:af:a5:87:59:8b:eb:72:74:c3:7c:6b:d1:09:fc:84:1a:
ea:dd:08:81:92:eb:5c:c6:88:77:24:a1:3c:6c:36:86:d2:8c:
a5:e2:13:46:df:77:45:7b:b4:6d:66:bc:e9:f5:3b:ff:5e:0f:
cd:d3:02:fd:3a:c8:2f:cc:e5:cb:08:5f:a2:fc:80:54:7c:89:
24:69:7d:6b:45:44:c6:23:91:7d:2c:c0:38:29:16:1c:22:96:
1e:38:d7:92:de:9b:99:b6:5c:05:27:d1:88:ad:ab:73:ba:d9:
6e:c3:08:5d:c9:da:81:00:c2:e2:31:0d:5e:32:0c:87:b0:b0:
e7:e5:94:e4:70:7d:58:b6:80:db:cc:fe:63:7f:50:d6:d9:2f:
f8:bb:32:96:f6:37:b0:84:d7:31:7a:3a:79:2a:e7:e0:23:86:
c8:1e:58:0d:98:20:df:cf:a3:45:98:9a:d7:16:de:7f:d4:3e:
92:d1:04:42:1e:68:63:1b:f7:b5:82:80:bf:64:94:11:60:37:
cd:c9:b8:b3:73:15:39:ba:53:b5:ae:42:8d:3d:57:56:9a:37:
a6:c4:54:f8:5a:29:d1:21:d4:3e:d4:ed:4c:0b:f1:b0:4f:01:
3b:32:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:27 2025 by rpki-client