Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: 3VLCW30mqPpn9nYWYRDg3sKBPFKU2wRvaE3w0E5ZdtE=
Subject key identifier: DD:F2:74:21:98:57:3E:87:29:83:67:7F:FD:E3:DF:FA:E8:D2:D3:A8
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 018C
Signing time: Fri 31 Jan 2025 02:49:07 +0000
Manifest this update: Fri 31 Jan 2025 02:49:07 +0000
Manifest next update: Fri 07 Feb 2025 02:49:07 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: aHCH00xNf9cH7nvsmZPKrbPubF1VvoDwm1wFsw5RQhg=)
2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=)
3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Jan 31 02:49:07 2025 GMT
Not After : Feb 7 02:49:07 2025 GMT
Subject: CN=679c3a23-e619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:99:b3:0a:f4:d9:83:ad:90:2f:1b:70:0c:
21:a9:09:00:5c:4e:d8:1c:50:ba:c7:20:d5:f1:0b:
8e:61:68:c9:00:b5:97:34:45:03:4a:cd:1d:67:71:
96:fd:f2:94:fb:ed:5d:48:30:88:05:48:13:7e:ea:
56:3a:2e:ce:b8:ea:83:fe:fb:e9:ac:fd:d5:fc:e5:
39:49:fa:28:e3:5b:b8:03:d5:53:ad:22:86:20:eb:
ae:fa:5d:5c:a0:07:a3:a8:2f:b8:91:86:ee:e8:9b:
34:b3:a1:9c:3e:b3:bc:58:d7:7c:b4:d8:f8:50:1e:
50:fd:14:da:e2:ba:77:82:f2:fd:3f:92:ee:96:ce:
c2:af:00:34:e5:cf:ea:64:b9:d9:33:66:a8:06:78:
73:3e:38:1c:ab:18:75:43:7f:69:c3:d8:d6:80:0a:
e6:05:64:29:0b:b1:cf:0e:a6:dd:f3:45:60:e9:01:
b6:87:f1:7e:0f:25:8a:e3:96:ae:bf:d2:48:5d:e6:
4d:5b:6a:d2:67:6c:23:a2:7e:b9:ea:c3:08:19:2b:
93:de:4a:56:22:a1:00:97:48:18:e5:d0:03:37:7d:
1f:6b:2b:8f:b8:a0:35:3f:f9:3c:bb:5a:45:ce:3a:
79:a5:70:4b:6e:e2:2b:0c:f9:e4:9a:cf:b7:47:42:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:74:21:98:57:3E:87:29:83:67:7F:FD:E3:DF:FA:E8:D2:D3:A8
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:1d:38:83:f1:ec:a8:cb:ac:01:e7:f3:a6:86:70:7a:1d:65:
e2:83:3d:9f:9f:f5:18:72:89:55:e1:47:83:3b:fb:47:f6:d1:
f7:52:1d:33:94:b2:0f:15:6e:79:05:29:9a:47:ea:8d:e9:bb:
34:ac:6e:ed:d9:58:04:76:74:10:5d:6e:a1:8c:df:a9:0e:f9:
da:43:d4:94:7e:45:1a:12:ac:d6:cf:26:5d:33:cd:cf:ee:be:
b7:ba:76:7c:09:d9:87:fb:71:ad:4d:05:61:4a:d6:30:fd:3a:
64:ec:6e:f8:4f:5b:2d:c2:b4:16:b9:61:3b:a5:d5:c1:37:4e:
dc:a9:9f:20:ca:f7:47:d3:b1:01:d1:fd:a1:cf:47:29:1d:6e:
67:ab:88:41:b6:be:c3:7d:07:c6:dd:d4:2d:a4:59:e2:fe:9e:
4b:89:40:05:8d:a4:b1:5f:55:6d:67:c4:f2:d9:92:63:87:73:
5a:7e:fd:06:51:d0:b1:56:65:60:d1:48:9b:7e:f5:1f:31:c6:
4e:9b:bc:b7:20:88:f5:fd:a9:83:8a:0c:b5:5a:4b:93:7b:3a:
74:24:be:3f:cf:2e:f8:2f:26:d2:59:00:f6:00:b6:61:0d:54:
22:da:20:b2:f5:6a:04:c7:0a:5b:52:a0:df:ef:3e:4d:15:31:
89:78:83:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:30 2025 by rpki-client