Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json)
Hash identifier: 5EM7lgDQ+uDyhjzZBzaz0/prB4nqGnCORc6FOQyRqFo=
Subject key identifier: B5:E3:D5:40:47:22:EC:B3:DC:B2:FD:C3:98:CE:A6:38:00:45:43:5C
Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
Manifest number: 0297
Signing time: Fri 31 Jan 2025 01:37:20 +0000
Manifest this update: Fri 31 Jan 2025 01:37:19 +0000
Manifest next update: Fri 07 Feb 2025 01:37:19 +0000
Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: lGfEaPvmnwgXc2bLaIfJe1A0+wJKUudB/nsdIlI+gmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03
Validity
Not Before: Jan 31 01:37:19 2025 GMT
Not After : Feb 7 01:37:19 2025 GMT
Subject: CN=679c294f-57c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:c2:c1:e6:89:45:52:2a:1a:cc:69:09:47:
29:50:94:f5:e5:70:7c:c0:63:a2:f7:93:9c:8b:21:
55:c6:f6:5b:57:ce:25:f5:89:f6:6c:5f:29:5e:bf:
1d:87:8a:1c:97:88:3d:02:be:49:8f:b0:7f:31:df:
5c:d1:44:59:a2:15:a2:6d:dd:b2:35:da:6d:9e:a0:
76:1f:9a:df:b8:79:58:aa:00:75:29:29:e3:f6:85:
37:c3:f2:1b:49:35:7e:e2:22:a3:2e:f7:23:26:01:
a0:8a:6d:c6:99:92:c8:3a:4b:b8:0a:6b:b6:a5:0a:
5c:dd:d0:54:4c:ac:d1:4b:1f:25:91:27:0f:2a:5e:
5e:0c:da:20:9f:e4:7a:4a:a6:ab:04:de:2b:10:5a:
c3:2f:b8:9e:db:fa:b1:c6:af:1b:de:8e:80:b1:2a:
e5:ef:55:eb:09:2f:2a:d3:44:53:4f:46:8e:a0:1b:
e7:54:ba:a5:fd:a1:6d:a0:89:d3:da:8d:55:fa:f3:
a9:14:07:67:b9:35:f3:7e:ce:48:5b:3b:17:03:f8:
78:6a:7e:d4:ca:a3:40:b7:d4:5d:12:d8:c8:06:56:
61:7f:9c:41:86:e7:95:5a:e2:14:7f:e7:45:db:1d:
24:36:e9:d9:b1:7c:9a:e1:61:83:2d:63:1b:6a:91:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:D5:40:47:22:EC:B3:DC:B2:FD:C3:98:CE:A6:38:00:45:43:5C
X509v3 Authority Key Identifier:
keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:05:31:0b:ad:01:ac:46:7b:ad:67:02:bc:4a:ca:41:5a:9e:
07:77:55:65:67:56:9c:33:6c:70:66:ea:76:62:39:ec:e7:34:
84:58:96:ec:cf:26:b8:68:56:a1:94:9b:78:e8:d8:43:f2:ff:
55:a9:1b:ab:a3:90:e2:47:71:ba:05:af:21:d8:c6:ca:15:4e:
84:71:df:85:9d:58:36:1a:9d:4a:0c:9e:65:5e:66:ef:ad:ca:
cb:40:64:22:7e:3c:7e:bb:9c:e5:ee:26:44:5d:cb:41:d5:a6:
ab:fc:59:a8:53:ef:f9:f4:1f:26:d9:5b:45:60:82:b9:b6:4f:
98:ee:a6:27:64:5b:be:fc:2a:8c:f0:34:10:ea:c5:8d:96:32:
8e:b7:62:e3:e9:8f:1a:30:61:76:84:15:91:71:41:7f:3a:c7:
91:57:c4:f1:08:d2:89:65:45:3c:6b:5a:66:9d:f5:b0:45:03:
35:f7:f3:df:aa:f4:d0:ee:c3:9b:93:78:b6:7e:9d:25:6d:36:
3b:19:ab:21:28:1a:a3:b6:9a:2e:92:8c:30:9b:5d:41:ad:c7:
8b:a7:d1:6b:03:14:08:32:20:df:3a:89:fb:1a:b5:41:8d:23:
7d:6e:24:2e:7e:62:51:3d:d3:ea:cc:78:f4:a8:aa:5e:ae:7f:
10:91:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:57 2025 by rpki-client