Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
File: TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json)
Hash identifier: KivjuFycg1W/HIXB5MUJ1higjZO43x9eOgY2WZNlPIE=
Subject key identifier: B7:8C:84:AC:43:E7:D3:A6:92:D6:F6:0E:08:91:22:83:E3:6A:97:79
Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
Certificate issuer: /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 06:02:33 +0000
Manifest this update: Fri 31 Jan 2025 06:02:33 +0000
Manifest next update: Fri 07 Feb 2025 06:02:33 +0000
Files and hashes: 1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: lbugPDYr2tEUhhK6gNcxfGyIVqF0bguEGSDwOlv2n54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
Validity
Not Before: Jan 31 06:02:33 2025 GMT
Not After : Feb 7 06:02:33 2025 GMT
Subject: CN=679c6779-62df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:12:ba:ce:f1:7b:1a:93:da:0e:05:6d:04:
09:1f:f6:67:b2:3a:78:7b:f2:aa:1c:7a:a1:ae:db:
03:ea:b9:ba:92:b7:d7:5c:47:36:d7:6c:13:ba:34:
7a:5c:32:93:30:d5:82:78:11:2f:c8:cf:d1:b4:b6:
02:41:1b:cf:5b:bf:85:19:32:cd:74:23:2e:7e:b1:
fd:8e:b7:b6:36:74:1a:58:49:36:14:19:73:36:24:
49:26:d4:86:e2:67:81:24:5a:2a:36:70:3b:46:35:
ce:fb:75:5d:8e:34:3a:3e:6b:38:83:a2:6b:7c:cf:
f2:f7:36:21:62:5a:2a:1e:53:51:72:34:cf:f5:76:
b0:15:5b:2f:fe:7e:2a:e4:d0:b7:2e:d9:6c:08:d9:
c1:96:2f:40:aa:b2:ca:5c:d0:fa:c1:d0:2b:bf:76:
40:42:0d:95:f1:5f:2a:16:ba:af:3e:bc:45:bf:62:
cd:5a:39:25:47:1b:b2:ac:64:95:3d:99:21:4e:df:
4d:58:66:a9:23:0c:ad:af:21:ec:03:80:3b:b0:b3:
2f:d4:ce:e0:f0:10:2f:d9:b6:42:37:80:84:e5:6f:
b6:07:bc:2a:f6:c1:8b:20:8c:8c:09:e8:55:c3:c7:
b7:c9:52:b3:0f:c4:2d:aa:08:1e:2d:17:77:7d:39:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:84:AC:43:E7:D3:A6:92:D6:F6:0E:08:91:22:83:E3:6A:97:79
X509v3 Authority Key Identifier:
keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c1:89:88:04:51:b0:c7:35:d1:9d:98:06:17:b9:55:cd:1f:
9d:01:3d:d3:fa:2a:19:5f:17:a4:06:8e:85:ee:c4:b9:36:70:
94:ba:1f:da:46:0d:ea:c9:d9:09:d4:33:e3:45:45:5f:ff:90:
7d:83:7c:84:aa:12:72:40:f3:39:53:87:19:9d:8d:b9:14:e7:
8f:00:29:de:69:b5:2a:73:fd:a4:19:c5:6a:86:f4:a6:a5:36:
0a:66:9a:d0:c8:32:4e:cb:7c:48:da:15:4c:75:b5:1b:9f:0f:
1b:d6:0e:ce:0e:5d:50:bc:c8:68:31:3c:2d:83:55:92:e4:9c:
e7:bb:72:3f:dc:04:37:1c:74:23:21:46:ad:32:b1:7b:05:75:
75:b7:45:e4:84:16:da:0f:34:e8:0d:44:b9:ae:89:ce:5f:c4:
fb:b2:e5:10:e4:b8:7b:ee:82:dd:b6:db:30:6a:9c:ab:1d:fa:
7c:c1:9b:c1:ac:f8:01:a0:33:66:93:21:24:53:14:b6:fe:c9:
b2:96:13:3b:2b:0a:47:6d:92:8c:7f:00:46:00:76:b6:eb:72:
63:18:93:ba:ba:3c:06:46:c1:52:23:7b:09:42:10:f6:20:d6:
8d:21:c5:28:8f:6d:82:f6:36:9c:57:3f:92:2a:2f:69:e6:3d:
80:24:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:10 2025 by rpki-client