Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
File: tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json)
Hash identifier: oLDdQeiea9U22Cdflu6KH9s8ISxg5A6d1I0U3BXX5Ik=
Subject key identifier: 21:18:D6:1A:33:1F:83:CD:92:77:01:BA:25:CE:00:64:33:7C:3D:66
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Certificate issuer: /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
Manifest number: F0
Signing time: Fri 31 Jan 2025 04:25:37 +0000
Manifest this update: Fri 31 Jan 2025 04:25:37 +0000
Manifest next update: Fri 07 Feb 2025 04:25:37 +0000
Files and hashes: 1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: B/ocskrJabvUfqnRjUeQRW+rAefstv1P/SaTTXl01M8=)
2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: f/jpE5cHuMY3Uawe+lXgAaJQ4nT2A65yBQRPGfiONwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Validity
Not Before: Jan 31 04:25:37 2025 GMT
Not After : Feb 7 04:25:37 2025 GMT
Subject: CN=679c50c1-2620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:4d:50:06:fa:1d:37:d0:08:cc:c7:d4:68:
2a:b6:9a:33:94:ac:20:d4:10:1f:03:4a:4f:2b:ae:
3d:34:7f:8b:0d:ea:40:91:50:9a:72:04:e0:45:50:
00:57:f3:49:5e:cd:1d:ee:7b:4c:2d:7a:06:98:ac:
fe:f7:bf:63:7c:cb:6c:b3:6b:04:1b:65:85:40:b0:
44:95:7f:a4:fd:0b:c5:50:af:ae:e4:1f:e7:72:e9:
84:7b:b1:a5:f7:8d:63:43:7f:75:5f:f4:58:43:e9:
a8:95:d6:f9:b7:ff:45:5d:5b:32:76:15:c4:9b:9b:
20:2f:be:70:38:d4:04:96:e1:79:e2:98:b5:56:4e:
4e:64:dd:5f:e5:f2:29:38:14:5e:de:19:91:06:df:
30:05:a1:78:a0:0e:49:d3:57:e2:31:ad:5d:bd:cc:
b0:70:e2:6a:11:90:90:b4:3c:d8:8e:07:a9:04:37:
46:35:79:22:c3:ec:54:e4:b2:d9:d0:7e:bc:9d:ec:
f9:95:66:2a:be:48:51:a1:19:20:fa:ae:68:f6:34:
2b:75:d6:65:d9:4c:a5:1a:8d:10:59:7a:86:fa:17:
bd:b6:30:f6:45:5b:fa:32:c6:d8:1c:cc:a1:74:51:
b3:66:51:2b:fb:41:60:ed:ec:0c:07:5b:8c:56:54:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:D6:1A:33:1F:83:CD:92:77:01:BA:25:CE:00:64:33:7C:3D:66
X509v3 Authority Key Identifier:
keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6c:e5:93:15:8d:60:0c:61:89:db:fb:98:1c:99:eb:dc:b8:
a6:26:73:44:11:96:f0:9a:9d:df:bd:82:d6:bd:1d:ce:84:ba:
a6:f6:d1:05:01:99:77:84:9e:65:ae:f3:f0:ca:cb:e1:ca:1d:
4f:44:49:d9:3a:13:11:1a:0b:f7:5e:c6:1e:6e:70:6d:ff:f6:
b1:a2:f9:d4:db:cb:68:b2:d8:11:8e:28:10:86:a1:77:b8:23:
2e:0f:81:1b:49:b8:84:19:48:78:48:0d:67:c1:e5:fe:5d:13:
b6:a9:0b:e5:e1:1f:18:24:dd:7a:b6:50:90:94:61:a9:0b:d2:
cc:91:e7:9b:e7:67:b0:a2:16:65:0f:ee:75:e9:91:78:26:bc:
1d:0b:6a:4f:41:7e:1b:19:97:6c:21:17:db:27:b7:40:ed:01:
b0:11:c4:96:33:88:a7:b0:74:16:ff:9a:14:ca:df:3a:94:5c:
c0:66:0f:24:0b:e3:24:26:72:65:f1:a5:f3:1c:3d:70:b0:86:
cc:2e:01:ad:27:5d:a3:14:ac:6b:73:e1:4c:69:b9:80:fd:be:
04:ab:5e:f5:8c:cf:a4:2a:79:11:fc:c9:49:27:3d:b7:a6:68:
3a:54:62:da:a2:5b:11:25:c1:ec:43:33:11:fb:6a:a3:86:13:
d2:90:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:15 2025 by rpki-client