Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier: m06zeGUFgbwUqAzcfntiVi/MG1l3pSVCbJr5m+aRm2M=
Subject key identifier: 9B:11:17:BA:32:F3:0C:68:C2:E6:91:C4:7F:9A:1B:23:89:61:F8:11
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0DBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number: 0DAC
Signing time: Fri 31 Jan 2025 17:55:05 +0000
Manifest this update: Fri 31 Jan 2025 17:55:05 +0000
Manifest next update: Fri 07 Feb 2025 17:55:05 +0000
Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: IpW0LxYYebNanMPcyDlSB7ou551sP2D5xtTSkC12VAg=)
2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 3NPXcNsi26X2NuLDFnrNuZlOxEwbtdhE/ZNaHoNQNAw=)
3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: 9ef3bsd1YWEQ0cPGMtCDhRdH7824+50itsw2PqzlK9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3519 (0xdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Jan 31 17:55:05 2025 GMT
Not After : Feb 7 17:55:05 2025 GMT
Subject: CN=679d0e79-a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:e0:7b:cc:d4:81:8f:7d:d0:7b:30:b6:9d:
5c:92:60:b0:f7:05:b7:aa:c2:08:35:fa:11:ef:9f:
de:f1:5b:11:eb:19:8d:2b:c4:00:fe:46:58:24:f8:
2e:98:14:31:7c:df:85:75:da:fa:ef:ac:22:ac:dd:
ca:4e:af:f0:6f:c8:db:02:f6:1d:d1:98:44:da:d1:
08:4d:8e:a4:f0:20:d8:79:bd:96:82:ec:0d:77:8a:
75:d8:72:84:5a:bd:6e:e4:86:af:96:12:fe:e0:ef:
f6:70:5f:54:5f:65:e3:6b:82:f5:e2:e8:a1:48:b8:
6d:be:72:3b:79:5d:a3:c4:82:83:6b:72:d6:ee:ee:
ba:8f:e3:a3:1c:89:ac:11:8c:13:a2:6e:ff:60:a2:
4a:db:85:14:c1:ef:79:8e:e5:51:b0:98:db:95:b9:
df:be:23:a2:95:f3:0c:90:ff:81:ac:08:4f:85:28:
8f:0b:fa:4f:9f:a8:b1:71:33:63:2e:0e:ab:55:5e:
5d:09:96:c2:b8:17:aa:ee:5f:46:4e:07:6e:4d:a4:
e4:74:c2:5e:75:67:0a:28:d4:3b:76:ac:18:73:f5:
29:4b:d7:ce:d3:a2:fd:08:87:b1:a7:5d:ce:54:48:
be:66:4d:a3:8e:c2:68:0b:46:0e:15:41:ff:73:f3:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:17:BA:32:F3:0C:68:C2:E6:91:C4:7F:9A:1B:23:89:61:F8:11
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:47:95:e8:e1:49:da:3d:c9:f2:5e:7a:9a:e7:b3:c5:e4:3c:
ad:b9:c0:2f:1a:5f:b3:b0:80:af:1b:a3:d2:16:13:9e:b8:e8:
99:8c:49:77:7c:f6:52:70:37:0a:ed:ac:90:bc:42:23:40:ed:
a0:0d:95:ba:86:c4:32:5c:98:81:62:df:b9:d9:b7:08:9b:81:
0f:ef:91:37:c2:1b:36:be:25:be:90:c9:d4:e0:be:89:b6:50:
99:8f:c6:15:6f:38:5a:4c:5b:31:e5:d4:ad:a5:ad:2c:b4:1b:
1c:05:4c:59:1c:f9:8a:cd:00:56:d0:90:d6:d8:73:d6:20:09:
ac:f8:6c:8c:e9:9c:c8:b8:b9:a8:80:7b:03:4e:29:56:7f:36:
1e:42:34:13:cd:ee:d9:e8:9c:98:76:84:ff:59:86:19:a8:ef:
5b:66:70:85:4f:b1:33:9a:da:c0:b2:6e:7b:25:f1:5b:63:5b:
3c:11:f9:95:46:d9:f8:02:d1:18:01:92:a8:b8:d2:fb:df:51:
7e:02:ff:01:64:cf:aa:4c:79:ea:37:fb:41:b7:eb:44:f2:88:
34:6e:d9:5b:35:fc:f2:05:4d:74:e7:fd:64:ed:b6:17:1e:ed:
d7:10:e8:c3:50:64:84:f7:99:fd:ee:3c:8d:3b:4e:0c:7e:b4:
64:9e:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:58 2025 by rpki-client