Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json)
Hash identifier: +1kxCzVLh5Kvv7RimGKpPXttRdHD1YltVMdikC4BrSc=
Subject key identifier: F0:29:E6:7B:83:6D:EB:F6:AF:D5:FF:2C:DC:7B:F3:D3:26:FF:81:61
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial: 0FA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
Manifest number: 0F9B
Signing time: Fri 31 Jan 2025 17:30:08 +0000
Manifest this update: Fri 31 Jan 2025 17:30:08 +0000
Manifest next update: Fri 07 Feb 2025 17:30:08 +0000
Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: LBD9SLZeJhCLHgLiY4fTObMQrwLE7FDuf8DhxCsJSrY=)
2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: sgkWXRSJ1BUZupF4Dk2efL+RNcogul9NMOpS+wB5yj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4006 (0xfa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Validity
Not Before: Jan 31 17:30:08 2025 GMT
Not After : Feb 7 17:30:08 2025 GMT
Subject: CN=679d08a0-891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:63:66:a6:5b:d3:15:11:7f:68:a6:2a:2a:
ae:53:75:33:f5:fc:61:8a:d5:d9:02:65:e0:a9:79:
1c:51:db:14:76:ca:c1:eb:1e:78:3d:3c:f8:29:e3:
90:0b:52:a8:d1:78:25:1c:89:1b:96:40:84:99:dc:
63:62:6f:d4:ed:f4:20:db:8f:c6:d6:90:26:09:4a:
42:a8:bb:43:48:23:d4:08:06:9c:d7:44:48:df:60:
ba:2d:4e:71:ab:af:04:ff:1e:ca:ec:6f:6e:bb:c5:
23:15:67:9d:37:7e:ea:7c:b2:e5:b4:cb:40:a0:b0:
54:8f:4a:ed:d5:b3:95:61:fe:e8:9e:81:b0:c2:1e:
bd:e2:45:27:e0:c9:4a:85:8d:17:ad:53:6d:ec:cb:
a8:e4:b0:6b:9c:dd:bc:0e:54:54:b5:82:9b:81:27:
76:67:68:c0:c3:09:b0:e1:5c:3f:c2:11:61:05:3b:
c6:15:e6:e3:db:02:cf:14:e3:7b:a4:d5:e7:e6:61:
19:2c:97:81:df:b9:4b:06:d3:af:d2:c6:f6:3f:3d:
c9:45:c9:f9:14:de:d1:6c:3b:e3:a1:76:03:ac:06:
2c:cf:9a:2e:da:8c:c3:69:1e:9e:2e:5e:6a:39:37:
01:17:8b:01:f2:67:52:36:db:df:d1:6f:4b:c7:cd:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:E6:7B:83:6D:EB:F6:AF:D5:FF:2C:DC:7B:F3:D3:26:FF:81:61
X509v3 Authority Key Identifier:
keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:6e:db:a6:7c:1c:84:a5:49:4b:27:e9:c6:52:4c:4f:ed:
d2:08:a4:43:19:ef:cc:17:9e:92:bf:50:53:30:5d:ea:01:27:
6f:7b:cd:89:46:fa:f8:55:48:b9:2a:77:11:4a:39:2d:72:1f:
a7:7a:87:fd:1a:ea:db:97:61:18:86:9c:12:a2:b5:0d:8c:8d:
0a:a3:a1:f5:7b:7a:23:db:83:8b:cc:93:dc:96:1f:34:56:f9:
b0:e8:21:2c:7d:c2:0e:9f:43:9f:8b:41:13:80:b8:1b:93:5d:
27:28:83:17:b8:40:96:13:42:66:4d:10:14:cb:9f:28:7f:97:
84:41:59:54:bc:be:cb:f8:7f:06:02:0a:9e:2d:cb:a3:17:61:
59:08:1d:ae:c5:b0:b7:03:dc:68:6a:ff:91:a0:99:8b:b5:4d:
ca:72:60:32:32:99:a1:83:de:29:64:eb:37:db:24:65:c9:e8:
e8:64:ae:45:3c:32:68:72:92:2f:0b:38:90:22:f7:4a:c0:e0:
3d:e9:0f:b8:fc:1b:04:6a:f8:32:65:72:7e:21:79:f8:08:82:
fb:9c:34:4b:bd:d7:19:e8:fa:a9:9e:f9:b0:01:96:ed:33:77:
7e:d7:04:e0:10:3b:a7:5f:e8:4d:85:af:7c:48:ec:ae:02:ce:
04:56:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:12 2025 by rpki-client