Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft
File: tsh7tYco929vkKCd_WuqGtTnO8o.mft (raw, json)
Hash identifier: o6Dwk/wSRnmCsc6XaQj2UJW9b+hRIqjn1ctY8/S3WYE=
Subject key identifier: EC:1B:56:0F:46:C4:C6:83:AB:B9:0F:FA:83:F8:D5:3F:FF:83:B6:5D
Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA
Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA
Certificate serial: 0C2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft
Manifest number: 0C1B
Signing time: Fri 31 Jan 2025 18:23:47 +0000
Manifest this update: Fri 31 Jan 2025 18:23:47 +0000
Manifest next update: Fri 07 Feb 2025 18:23:47 +0000
Files and hashes: 1: tsh7tYco929vkKCd_WuqGtTnO8o.crl (hash: TSy5vB3QEpNXcHAX4es+9sNopBl9ae3tt9x+4hQlkpg=)
2: 2B633118DF2F11EFAD7BEE6BC4F9AE02.roa (hash: LCBsasgUklncuTCZqxiSNtZe0VPDq700osnXP0sG1fE=)
3: A4EAEA20DF3011EFADFD6611C4F9AE02.roa (hash: RJdln3FLEsn4eZij8Wwt5wimrA1i6QzmaDYN3ERTRv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA
Validity
Not Before: Jan 31 18:23:47 2025 GMT
Not After : Feb 7 18:23:47 2025 GMT
Subject: CN=679d1533-0948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:ff:92:1e:e5:20:95:45:21:5a:1e:e7:40:
08:0f:6d:c3:5c:db:1b:79:0d:ab:d8:52:68:d1:e9:
47:39:b7:6e:0e:3f:3e:a2:7a:d6:ef:51:2f:e2:25:
26:8b:e0:d1:4e:d7:be:40:9c:3d:9e:e2:52:6a:15:
22:be:88:e5:c2:57:26:44:aa:d3:22:8a:ef:e3:01:
2b:7a:d9:e8:8e:60:6a:94:cc:bb:df:5c:0b:2d:ea:
d0:d0:99:29:b5:2a:6f:3a:61:4a:b6:e7:83:43:f0:
de:37:01:fb:d6:be:4d:e2:13:af:9b:9e:17:2b:88:
62:26:cf:a3:d3:1c:64:fd:f8:2b:f3:03:14:5f:49:
d2:a6:66:dc:32:4e:29:5d:98:01:74:91:61:c5:71:
56:ee:da:af:6d:15:ac:bc:a0:89:52:e2:a8:79:c0:
63:e4:7b:03:63:a5:9d:51:6a:3b:10:5e:11:8a:bc:
d9:9e:2f:96:4b:55:15:d7:f8:c0:42:36:20:2d:93:
7d:88:78:eb:8d:16:0e:8e:5e:4a:f3:6f:d0:50:83:
91:ab:69:9e:de:cd:4e:6c:47:1f:8f:4b:cc:aa:15:
fc:fe:0b:67:5d:6f:d9:83:04:72:bf:cd:fe:d4:91:
f4:ec:e0:fd:1a:6d:03:2d:63:3b:22:75:a1:3a:b3:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:56:0F:46:C4:C6:83:AB:B9:0F:FA:83:F8:D5:3F:FF:83:B6:5D
X509v3 Authority Key Identifier:
keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:3d:98:24:9b:18:12:51:b6:d9:c6:d5:48:4c:71:ab:a3:86:
00:0d:93:70:d7:ae:56:06:eb:b3:34:af:0c:09:6f:09:43:4c:
aa:77:b4:d9:1a:a6:d5:24:bc:4b:99:9b:96:fb:4a:dd:e9:61:
29:fe:5e:b6:44:42:fa:d2:c1:de:90:1e:cc:b8:d2:12:24:3a:
64:dd:4a:f0:65:01:9d:75:d7:1e:18:13:4d:fe:72:1a:56:94:
74:b5:65:29:c4:ef:8a:d7:55:26:ee:d1:ce:c6:71:63:c7:4a:
33:c6:6c:e7:ed:91:8b:f5:37:38:56:e6:c0:0b:3c:10:17:c8:
18:01:6d:5d:ad:60:98:48:d2:1d:47:fe:ce:31:d1:1d:46:ce:
98:68:74:fe:a4:7a:d7:1a:c3:ed:6f:5d:20:e8:6e:ed:7c:13:
5a:9d:1e:d5:73:53:37:2b:5f:3f:1c:fc:a4:b5:2f:31:0d:38:
11:d6:cd:c1:ac:62:06:86:4b:5e:92:85:45:49:5d:b2:ec:62:
c3:85:10:ff:bb:73:55:18:1f:b0:1b:23:db:32:bd:4f:2f:46:
3c:09:af:93:5f:92:1d:ac:f3:98:b5:27:24:00:02:75:92:fe:
db:ef:d3:ad:07:88:b2:3f:cd:6b:77:d4:aa:60:77:f6:d0:53:
51:0c:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:33 2025 by rpki-client