Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier: F8Kw08xeU9qTotu81yf/ZhUcSm738Pw1maY5W/yc7SM=
Subject key identifier: 67:D1:72:85:2A:64:BC:F6:DD:3F:80:8F:45:01:02:26:BE:33:26:22
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial: 0851
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number: 0845
Signing time: Thu 30 Jan 2025 20:47:45 +0000
Manifest this update: Thu 30 Jan 2025 20:47:45 +0000
Manifest next update: Thu 06 Feb 2025 20:47:45 +0000
Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: Xq9t/yIaKN3W3E0EkByQb/PchjM6BlwO9NxYy6e2d8o=)
2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: OVL2vodt/AeNcQ/VG7TDRoihubsFrVHE/91iyWU1qa8=)
3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: j3P/lzXkhbJvg4pbwgOopu5SVTceOFM8ziHzhXEdZVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Validity
Not Before: Jan 30 20:47:45 2025 GMT
Not After : Feb 6 20:47:45 2025 GMT
Subject: CN=679be571-7790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:e4:e5:a3:e5:7a:1c:27:93:8b:9d:1e:9b:
bf:16:d5:f7:a0:19:43:87:af:35:ba:d6:a6:ea:a9:
e9:73:2f:c5:b3:31:7f:b1:e5:b6:d1:bf:21:02:9d:
7e:39:e9:76:59:80:b9:20:56:82:2c:94:ca:d2:c7:
30:a3:47:0a:53:28:d7:46:ac:43:ee:15:99:64:e7:
4f:e8:e2:1b:f6:72:dd:0c:80:eb:96:5e:23:ed:07:
8c:62:12:d8:ad:fe:a2:87:9c:7c:1e:bb:ee:be:71:
e0:c8:e7:38:f1:c4:ab:ae:83:1f:e6:fa:07:c3:b4:
0e:b5:c5:5a:9c:b1:90:07:6b:9b:94:bc:31:fc:3c:
b2:37:16:e0:0a:d6:3c:1d:48:8c:69:7d:9f:1d:cf:
71:ae:e0:1c:61:30:68:ce:47:be:f9:b2:9b:52:d4:
6a:c2:e5:a1:e8:0c:c7:6c:52:02:32:84:a6:97:b1:
3f:03:b8:6b:ca:f8:e6:03:68:a9:42:c3:1e:ea:4c:
4d:db:41:56:ea:63:5b:ef:4a:55:fa:86:4d:79:d1:
0a:2a:c3:2f:95:fe:d1:47:94:48:00:4b:c6:9a:82:
fb:ac:3c:57:39:b3:65:bd:4b:bf:58:c7:9e:1d:4f:
df:da:d1:b7:c2:f3:79:e0:c8:2d:20:1c:32:6c:8c:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:72:85:2A:64:BC:F6:DD:3F:80:8F:45:01:02:26:BE:33:26:22
X509v3 Authority Key Identifier:
keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:ea:4d:1a:8b:40:01:6d:4e:91:14:46:29:84:38:be:32:
db:f2:57:2c:e8:40:d4:d9:2d:91:1f:3a:8f:68:3c:42:2b:50:
32:30:d8:d8:47:41:63:d3:87:d4:c7:e8:b0:b9:7a:48:ed:b2:
8d:52:b9:3c:c6:eb:e9:01:17:53:7d:cd:63:3f:eb:56:3e:7d:
7c:88:17:99:04:ab:97:60:92:9c:fe:0f:78:8d:79:67:d1:a4:
bd:db:2b:82:c6:83:00:65:ed:f8:62:88:bc:cf:f4:62:81:06:
24:45:de:69:d1:86:b6:7c:90:23:ba:06:e4:20:b8:47:50:54:
f7:72:29:0f:27:3e:84:c0:ce:49:a6:31:3b:34:3f:e6:e7:ed:
41:ad:39:c2:de:e6:54:66:c0:62:03:fb:86:67:90:53:f1:ea:
de:f1:bc:e1:44:1c:9e:11:e0:a3:0f:14:ca:59:13:39:4f:70:
14:aa:1e:48:35:1c:1d:04:f7:de:70:fc:d4:ab:c4:73:c7:98:
ff:39:33:23:d4:be:6c:9c:a3:95:25:5c:53:74:50:64:4c:b3:
1c:22:fb:a8:8f:88:03:68:30:93:b1:5c:6f:7a:53:a3:9e:56:
97:f7:7d:35:ad:aa:c9:19:c7:8a:84:7f:fd:f3:4a:f1:e4:d5:
4f:6c:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:05 2025 by rpki-client