Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier: SIOTl4DMv5L9cbljLKuO+Cw6zutaOP68t1YdEP7T5q4=
Subject key identifier: F8:D4:6C:AE:D6:11:62:5F:A8:01:DF:3E:4B:70:B1:2D:AB:74:B8:F6
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number: 09B8
Signing time: Thu 30 Jan 2025 20:52:40 +0000
Manifest this update: Thu 30 Jan 2025 20:52:39 +0000
Manifest next update: Thu 06 Feb 2025 20:52:39 +0000
Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: pCdlmwtthcLNOVX6ujfyYaNun7EV2qSy3oKQrxoBRdw=)
2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Validity
Not Before: Jan 30 20:52:39 2025 GMT
Not After : Feb 6 20:52:39 2025 GMT
Subject: CN=679be698-5a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:b9:a4:78:2d:d1:a3:53:f7:bb:0b:cc:39:
b8:4c:88:02:7c:6d:60:52:19:89:ef:d5:ee:2b:67:
6d:7c:f0:f6:c0:08:ef:7f:0e:e9:93:7e:25:ed:c5:
41:3f:06:cf:d0:dd:08:ae:d4:ce:42:69:4a:18:14:
48:5b:63:fc:3e:93:52:6c:66:86:2e:6f:d8:7d:7b:
c8:f5:9b:3b:76:5e:1c:8f:5a:ba:ce:2d:1a:a3:dd:
0a:d9:f5:86:9c:aa:06:7c:2f:78:05:9d:53:94:10:
fc:1a:eb:41:8f:19:6a:7e:15:0f:bb:f2:a6:36:05:
b0:b5:70:de:36:22:3e:70:17:c2:9d:cb:01:67:a7:
0b:51:ca:30:87:8d:7f:64:b8:b1:ac:7a:a8:40:50:
05:0c:f1:ae:74:47:d2:dd:54:34:40:d4:03:38:35:
10:3a:6e:cd:3f:a8:29:56:cb:7f:d7:5f:f6:cc:9b:
16:79:72:71:70:09:d4:cd:07:92:29:49:76:6f:3b:
a0:f1:ab:77:30:2b:67:3b:c2:d0:a3:94:9b:93:12:
7f:64:74:ed:89:d4:7f:03:2e:46:c2:21:dd:3f:ba:
21:95:be:a5:05:29:0e:27:1d:ac:87:ee:a1:a3:21:
21:03:72:e5:48:b7:c5:f4:d1:09:d6:d1:45:4b:8c:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:6C:AE:D6:11:62:5F:A8:01:DF:3E:4B:70:B1:2D:AB:74:B8:F6
X509v3 Authority Key Identifier:
keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:f4:a0:a8:09:f5:99:7f:2c:9c:08:a8:fc:c3:e7:3c:60:cc:
3a:cb:59:cd:e8:35:70:0f:ae:aa:9f:1f:9d:47:64:4c:3c:17:
d9:83:15:99:06:a5:38:1f:ae:c3:d6:07:eb:61:55:8b:67:38:
d7:03:9f:9d:5a:60:27:95:37:4f:d7:b3:04:af:49:af:32:aa:
86:78:e4:5e:a8:f0:f3:b4:59:6f:3f:55:58:07:03:03:b9:ab:
36:e4:e5:5f:07:29:5a:cf:88:31:e0:5d:97:6e:bf:54:d1:7a:
1b:11:0b:4f:d2:f3:2f:1b:aa:25:a4:f5:3c:49:fd:88:ba:58:
fb:f3:74:77:2c:ec:f1:20:77:37:f6:1c:0f:c7:9c:41:bd:20:
12:d8:af:93:08:6f:67:3b:fa:20:09:72:f2:d0:03:aa:c3:1e:
ff:47:72:77:6c:28:1c:a5:87:43:1e:37:00:7a:41:59:68:e9:
52:ec:dc:3f:6e:2f:fb:11:fa:47:1a:4c:9d:25:f4:d3:6e:11:
07:6a:34:10:c3:a1:8e:96:41:99:27:77:a8:d1:57:a7:05:64:
95:b8:a6:4b:f5:c4:ee:b4:fa:11:7a:ac:08:09:e5:e8:b4:ac:
a8:fd:1a:f4:13:da:ca:dc:0d:de:6c:a1:d9:89:41:32:bc:27:
7b:48:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:34 2025 by rpki-client