Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json)
Hash identifier: oLL3SgmggA15DvufrpHS3vChos6umajGPCeFCexVzDQ=
Subject key identifier: F4:82:12:58:E1:DC:C7:E0:00:0A:3C:E3:76:FE:6B:8A:84:98:50:67
Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0
Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
Certificate serial: 0B9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
Manifest number: 0B97
Signing time: Thu 30 Jan 2025 18:58:20 +0000
Manifest this update: Thu 30 Jan 2025 18:58:19 +0000
Manifest next update: Thu 06 Feb 2025 18:58:19 +0000
Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: oRkywGMHXStazpcanWenuJiy0QOjJ4bRNscgxTyi/M0=)
2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fuEIOJZ2g7nFL90Iih/ZQree35PAM4VcWuWuu09soDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
Validity
Not Before: Jan 30 18:58:19 2025 GMT
Not After : Feb 6 18:58:19 2025 GMT
Subject: CN=679bcbcc-7eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:14:9a:2d:93:f0:e3:90:30:5f:88:02:4e:
bf:5b:1d:8b:10:25:04:3a:c8:e4:ee:05:85:68:4f:
d9:11:6f:4d:d2:71:f6:99:51:b7:52:62:fb:3f:6f:
6d:c7:01:ff:1f:61:76:e7:75:3f:26:69:f9:3f:55:
58:a8:a9:d6:39:55:dd:8f:9a:f8:d9:2c:e6:06:c1:
90:a9:a7:3a:f5:b4:2b:a1:c1:a0:81:8f:be:7e:1e:
6d:ab:f1:1e:de:7e:8e:20:89:2a:82:47:90:39:d1:
ca:1d:03:4a:2a:3d:fd:95:9f:02:47:35:c4:27:b7:
a4:65:09:22:e2:30:0a:3b:23:ae:93:1f:e2:41:fc:
c8:59:29:ea:b6:8b:d5:3d:0f:6f:25:77:45:ca:8b:
b2:b5:9f:3f:90:84:fe:58:e3:42:38:e0:1a:d3:f7:
65:8d:9d:bb:bf:0c:7b:9b:b1:3d:4b:f3:87:87:2b:
1e:8c:0b:62:bb:29:99:d7:d7:37:25:d2:c7:b4:04:
be:e8:bf:a8:72:93:4b:7a:be:62:1b:08:0d:47:72:
11:49:9d:8c:f8:3a:3e:1d:1c:0f:8f:8d:07:9b:2e:
84:dd:8f:ca:69:3c:72:59:42:e2:1c:e0:01:e7:1a:
23:3f:5c:d9:87:d3:7e:5d:0d:d4:65:3c:0b:c9:51:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:12:58:E1:DC:C7:E0:00:0A:3C:E3:76:FE:6B:8A:84:98:50:67
X509v3 Authority Key Identifier:
keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:98:b6:cb:1a:de:2a:bf:63:63:2d:fa:09:29:cb:80:46:27:
79:04:68:44:44:be:9a:2a:1f:d8:8f:7c:c3:25:e8:7c:3a:4f:
60:48:6e:d2:be:fc:6a:02:3f:92:49:f7:c5:9c:f2:9f:e4:8c:
5e:66:fc:34:67:c3:58:9c:a8:78:35:c3:7c:4a:32:4e:13:82:
d0:db:46:d1:5f:e5:c2:9b:ad:b5:04:bb:cd:bf:df:4c:89:b0:
de:72:05:58:79:97:55:36:f1:0a:60:ca:15:3f:c3:61:96:2d:
d3:cb:de:19:c6:09:dc:3a:82:94:d8:0e:12:e8:08:63:72:21:
45:f2:ca:6f:67:bb:96:21:e2:28:9a:83:b1:48:fc:77:70:8a:
15:1d:e7:4d:15:54:04:54:a5:ec:9d:ef:82:86:79:88:82:de:
a1:85:88:18:fa:63:5f:83:73:fe:14:13:4f:d3:44:1a:9a:02:
c9:f6:48:49:e3:c2:3d:56:ab:0e:c2:8e:35:ac:d6:2f:73:17:
43:8f:81:86:51:1d:50:92:cf:30:07:9c:f4:a6:f5:b9:03:28:
74:4a:9d:af:6a:1c:e5:e0:0e:3d:f1:91:e9:9b:fa:de:6f:98:
54:92:da:46:7b:b1:2e:0b:4d:88:7c:d0:38:07:fb:cc:4f:11:
c3:aa:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:07 2025 by rpki-client