Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json)
Hash identifier: NT4F/ZLhhw6lX5hiwGSJyCl5ZW5hqTaN9IULkUdl67s=
Subject key identifier: 5F:D9:C4:C5:51:BD:0A:A1:DC:91:42:3C:13:D9:28:96:5D:7B:29:03
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
Manifest number: 3E
Signing time: Fri 31 Jan 2025 06:36:58 +0000
Manifest this update: Fri 31 Jan 2025 06:36:57 +0000
Manifest next update: Fri 07 Feb 2025 06:36:57 +0000
Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: pUKnoPiMJYbqrC3MgzfrVb+hB1zbqW+k3MxNRHvA2ZA=)
2: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=)
3: BB701D0A8C5211EF8F13723AC4F9AE02.roa (hash: xQtZ27HCMJDhRu2GTHStInAtAmFTEPOOnXaNIlpTnQQ=)
4: BA7E9CDC8C5211EF8F13723AC4F9AE02.roa (hash: oRcI0RAcajaeSK1ybyUg5l6tgEwWUvh9sWy8LSWR+Ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Jan 31 06:36:57 2025 GMT
Not After : Feb 7 06:36:57 2025 GMT
Subject: CN=679c6f8a-3155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:eb:d1:58:c4:6b:93:15:76:4a:6d:8f:1e:
81:fb:41:df:da:7a:e3:09:22:18:93:4f:ee:d5:9f:
5b:2e:a6:be:ee:32:a0:06:49:14:a6:bd:cb:33:91:
b7:6d:9e:21:80:fd:16:de:c0:2b:da:8d:08:db:13:
10:99:e2:b5:44:ac:61:87:ba:da:3b:48:ac:06:29:
88:51:84:4a:1d:08:59:9f:c0:c5:74:64:9c:5f:2e:
f8:26:4c:6f:12:f2:f9:c2:12:41:1d:d1:d4:60:56:
b5:93:4d:dd:2d:d3:01:21:74:91:6b:e0:e6:24:9d:
2e:33:1c:da:96:d3:d5:41:71:4a:c7:ca:20:fa:13:
41:d7:22:24:c0:c3:81:54:24:9d:8f:b5:3d:f2:78:
a7:11:a3:30:ca:84:a9:28:62:36:03:83:3b:67:2c:
bd:1b:e1:79:dd:76:dd:ac:34:1d:7e:4e:cb:88:a9:
47:9a:f5:1c:6b:aa:3c:1e:ef:33:ca:19:e8:b0:b2:
ea:78:6c:60:36:cb:54:84:36:1f:f3:95:c4:10:e3:
d8:79:1f:6e:ee:6c:63:95:d4:54:7c:7c:98:d9:44:
0b:5c:42:3a:17:7a:c8:60:6f:54:40:f6:8a:35:78:
8d:3f:a1:61:9a:94:9f:50:5d:81:94:c6:30:bf:aa:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:C4:C5:51:BD:0A:A1:DC:91:42:3C:13:D9:28:96:5D:7B:29:03
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:71:73:4f:40:1a:29:0a:c7:49:4e:c8:af:3f:44:38:84:
01:05:f0:2f:a6:bd:7d:d2:6b:85:cb:1e:71:36:23:ef:4b:4c:
66:92:92:d6:67:c1:25:1e:f5:7c:20:ce:6d:6c:c2:db:6e:ab:
0c:91:8b:55:59:8a:07:13:0c:2b:59:23:e6:e7:4a:83:8f:e8:
b4:33:aa:34:a3:27:ab:89:4b:9a:a3:f3:0a:b1:8c:56:6f:c1:
13:3d:6c:6d:75:f7:3a:02:2e:bf:21:e3:d1:fa:0f:e8:a2:37:
ab:6c:db:5d:66:7c:60:90:51:b0:9b:58:bd:29:89:6c:d3:3a:
81:9e:8e:4b:76:42:bd:46:9d:95:24:b0:ca:8a:d2:25:59:ca:
11:8f:c3:e3:db:d2:e0:36:f7:29:6b:d2:92:1a:e1:fc:d7:d1:
9e:33:ae:fe:9c:a9:6e:f4:77:ec:d4:68:25:61:6b:07:55:11:
2a:32:09:be:03:83:e5:da:4b:a8:9a:15:e2:50:1b:56:6c:1e:
fb:a3:c7:a0:ab:42:eb:b0:24:af:22:b4:92:91:71:f3:d4:33:
d7:04:02:09:70:27:1e:27:d0:8d:c6:fe:42:b8:af:3e:c2:7e:
23:2b:61:5b:26:96:5f:38:08:9d:a1:e6:97:6d:ee:85:24:7b:
a3:77:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:50 2025 by rpki-client