Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier: JprCrTBzshomCIXcOjda+4o1GLzqHzPE0fZjTIhhXxI=
Subject key identifier: 4C:11:48:B1:37:79:24:A5:2D:36:66:2B:DB:2C:49:D0:5A:A7:97:34
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number: 0136
Signing time: Fri 31 Jan 2025 03:37:29 +0000
Manifest this update: Fri 31 Jan 2025 03:37:29 +0000
Manifest next update: Fri 07 Feb 2025 03:37:29 +0000
Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: wGdCHPOp5KWQGIGqYHMUXg6nQsk3LDya569iBDzosAc=)
2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Jan 31 03:37:29 2025 GMT
Not After : Feb 7 03:37:29 2025 GMT
Subject: CN=679c4579-4626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:c5:8e:68:ee:ea:e6:bb:3b:ab:76:9d:97:
8a:7d:cd:19:cd:1d:a1:51:5b:f2:7c:95:79:c6:df:
09:54:aa:3d:57:09:e0:2d:ab:1f:80:1a:eb:5e:eb:
e0:35:a6:97:dc:e5:03:c1:55:43:5b:66:3e:3a:ce:
c6:1c:8f:ed:fc:cc:7f:37:09:f4:1c:d3:2b:ef:92:
4b:2d:3d:c9:2e:2b:95:d8:e9:13:ce:28:78:73:09:
27:fd:91:1b:f1:b6:35:ea:d9:12:2a:89:d3:7c:86:
b1:ab:c8:f2:5b:2f:57:b1:b6:73:10:51:64:d9:f7:
62:f4:ef:44:dc:fe:99:c4:6b:3f:df:e2:b1:dc:3e:
a1:57:d8:ad:41:23:e4:b3:61:e5:19:03:ca:93:59:
7a:0a:46:4c:eb:bc:6e:88:e5:a6:f9:a7:13:74:6c:
e5:75:1f:b4:fe:fc:0f:c6:4e:50:2f:e3:8b:bd:2d:
91:94:30:28:67:45:26:e4:38:fc:5b:5e:18:e3:60:
a6:09:a2:1b:64:b1:16:d6:54:a0:94:f9:f9:f6:f5:
2f:5d:93:4d:c3:92:26:b1:51:3d:31:8c:fe:cb:dd:
c9:cf:40:0b:c5:09:9b:27:b8:8a:4e:a2:7f:ae:57:
bd:2a:6c:73:a6:27:d9:17:e1:eb:7e:53:70:6e:13:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:48:B1:37:79:24:A5:2D:36:66:2B:DB:2C:49:D0:5A:A7:97:34
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:7c:b6:ba:3f:db:20:36:76:50:ef:a4:c5:70:dd:5d:5c:d1:
7b:f5:4b:d5:30:0a:2e:86:be:1d:f8:90:5f:c8:c4:18:84:13:
d0:01:92:86:39:fc:c5:8a:41:10:47:fb:26:a1:eb:cb:f2:40:
fc:98:31:78:ed:69:51:85:d0:d8:67:35:a0:59:95:11:45:55:
4f:76:20:fa:15:33:64:ee:28:f4:23:58:d3:52:dd:71:95:c8:
f3:6e:a2:c8:d3:70:91:a4:ae:70:5b:a0:f0:02:35:21:46:29:
7d:38:ea:65:39:60:b2:39:a3:1e:4c:e2:a1:ce:22:52:55:a1:
8c:c8:ba:12:ce:12:0e:37:ee:6d:06:7c:46:6c:e1:35:3f:dc:
61:42:4a:f4:bc:84:d6:46:f9:bd:f2:6b:1e:da:d7:ff:64:71:
59:19:93:c0:f6:4c:a9:89:a3:1a:f2:cf:12:78:5d:9c:a6:a3:
87:9a:92:f9:b6:93:29:2a:d2:1a:52:ce:af:fe:d9:23:b4:e5:
1e:4d:8a:15:57:10:eb:3d:1b:0c:02:9f:31:19:14:89:47:08:
ec:21:a9:51:c2:15:99:57:ee:19:0d:13:4b:ea:44:b8:2a:86:
a0:57:c1:70:1b:07:da:21:5a:44:a2:6c:51:0f:24:b5:a4:7b:
3d:84:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:58 2025 by rpki-client