Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft
File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json)
Hash identifier: EXtoy7euTWNmn+28d14n1qvq/rDQFU7mAGP5Leop1Hc=
Subject key identifier: 1C:FA:3C:BC:F9:66:3D:28:FE:E9:E0:DF:55:08:CC:D0:55:2F:D1:75
Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89
Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft
Manifest number: 50
Signing time: Fri 31 Jan 2025 06:18:45 +0000
Manifest this update: Fri 31 Jan 2025 06:18:45 +0000
Manifest next update: Fri 07 Feb 2025 06:18:45 +0000
Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: WUAKYT7qfG6VyyWzZ3RcdeuHoOtPA92/zq4Wr43aesM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489
Validity
Not Before: Jan 31 06:18:45 2025 GMT
Not After : Feb 7 06:18:45 2025 GMT
Subject: CN=679c6b45-08d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:38:9b:cd:d0:ac:08:d6:df:7f:8b:ef:44:
cb:db:b9:fa:40:85:51:76:ec:8a:85:30:c5:d8:78:
21:35:1d:ee:9f:dc:33:c8:6e:62:04:39:ed:b7:0b:
9e:c6:bb:f9:b0:61:8d:d5:d2:3f:6d:f4:a1:46:c3:
22:e6:46:05:1a:b4:48:f3:c9:67:aa:3a:ac:a7:cf:
07:3f:d1:6e:d0:43:a3:a3:6e:f0:60:de:c3:1f:64:
61:23:a3:1b:aa:42:05:e8:8d:c0:1f:10:1d:d9:73:
fe:aa:20:f8:2b:f5:3b:bb:43:e1:93:a4:97:89:89:
74:b4:ad:9d:c4:d8:3a:ca:54:9d:ff:87:6f:57:89:
30:6e:ff:fa:f8:86:c4:24:69:dc:e6:0e:c7:b7:3d:
c4:44:d9:10:5e:18:20:59:25:95:ff:82:46:07:ee:
7f:ac:3e:04:8e:8c:7c:4a:83:1d:ae:31:e2:96:a0:
c7:fc:fa:20:99:0b:ba:b3:cd:56:ff:77:4a:e8:2e:
db:99:3a:85:c8:8d:b2:02:f3:64:f2:d5:dc:8c:45:
4b:1e:d4:29:26:75:57:b1:5f:77:c9:6b:2b:a0:73:
e2:23:22:dc:f1:23:fe:16:ca:6a:c5:a0:0e:1e:95:
95:30:29:0f:63:91:74:fc:7f:2c:fb:a0:2a:45:56:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:3C:BC:F9:66:3D:28:FE:E9:E0:DF:55:08:CC:D0:55:2F:D1:75
X509v3 Authority Key Identifier:
keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cd:8a:b0:df:98:6c:6b:06:44:64:1b:56:23:7a:58:7f:69:
ed:c9:e5:94:75:c2:cd:79:30:6d:e6:8c:d9:f3:1f:86:f5:d0:
a0:22:f4:76:9f:09:d8:ab:6a:da:41:8e:67:f8:87:b8:5e:47:
95:f3:10:2b:e0:a1:9b:60:ed:82:0d:eb:e6:36:85:e7:c4:a4:
f1:16:74:61:55:2d:e6:e1:f1:f2:f2:1b:4a:fd:7d:ca:73:6a:
aa:f1:45:7c:73:4f:2e:a8:bd:8d:1c:5d:dc:73:f0:b7:4e:f0:
42:2f:b3:2e:fe:ef:af:7f:bf:84:20:dd:b5:e3:5f:6d:59:3a:
cd:1f:f7:02:9f:ca:32:08:95:3e:c1:2e:48:d4:7a:59:7f:ba:
8b:ca:03:10:63:30:28:c2:2c:b2:10:8c:ef:3f:00:6d:23:47:
29:de:38:35:4f:b9:b2:43:9e:63:16:b9:23:c6:2c:71:bf:89:
3f:e7:52:6e:40:8d:73:59:d4:f7:82:3a:13:d8:e1:c6:bf:00:
b8:ab:f0:1c:b6:67:08:f3:4e:59:d4:81:b9:6e:7f:30:fd:51:
8e:e3:6d:3d:2f:fa:2e:d5:95:c8:b1:7e:be:c3:c2:4b:b2:f6:
2e:98:de:27:06:df:f1:31:ef:1d:28:bc:ab:a0:0e:64:a8:8f:
73:fd:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:34 2025 by rpki-client