Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier: 0AAtLacEKygf771XjIr30R6qbZB23VHHJE5L43l0GBY=
Subject key identifier: 85:2B:6A:6C:B4:BE:43:E6:47:E6:61:BB:87:C8:21:F0:40:9D:D0:26
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number: 0836
Signing time: Thu 30 Jan 2025 20:49:35 +0000
Manifest this update: Thu 30 Jan 2025 20:49:34 +0000
Manifest next update: Thu 06 Feb 2025 20:49:34 +0000
Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: hbGeXQyrLRUCC5btuRPQc0tLTtuzr90H01sSy1kFAeA=)
2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Yvl58W31jTaXrFpKwLiylkuL3NEb2f8QrSD0rbbSX2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Validity
Not Before: Jan 30 20:49:34 2025 GMT
Not After : Feb 6 20:49:34 2025 GMT
Subject: CN=679be5de-e893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:c2:2e:89:a3:cb:9d:5c:36:3b:e9:97:8f:
8c:e5:1c:3c:e9:03:46:69:ff:4f:cc:e0:eb:d2:c2:
fe:95:d8:a3:76:5f:d4:f7:96:ee:b0:df:25:db:22:
92:44:f6:71:aa:fc:8b:73:b9:1c:e4:2d:1d:52:fa:
5e:15:00:36:d9:99:4a:b4:16:f6:0a:c0:e6:7e:14:
0d:bd:6e:e1:65:1c:75:53:41:c0:7b:78:f3:2b:c6:
d0:ff:82:40:f4:b4:ee:8a:95:41:3b:94:f9:9c:fc:
de:bd:bc:e5:0c:ff:10:e0:6e:88:6a:1c:e4:78:8a:
56:0d:3f:3a:5b:bd:75:95:e0:6d:60:33:6a:83:28:
8f:60:d7:c9:81:71:a1:de:b7:ae:ee:18:79:f9:d4:
6d:3c:b6:9a:9b:63:39:3a:97:1d:1f:5a:75:71:2c:
15:5c:28:e4:34:f9:b3:f3:00:b6:3d:52:98:82:46:
63:11:2d:c6:a5:89:19:9e:33:78:57:c6:b3:a4:8c:
9d:28:f8:28:5e:7c:4f:2a:e4:00:7e:76:31:28:5f:
07:84:59:07:6f:5b:aa:3b:db:a3:dd:30:10:d1:c5:
85:de:22:bb:f6:e8:61:c8:5f:fb:64:ec:57:cb:60:
35:2f:46:5b:66:04:5c:11:46:1d:56:8c:32:3a:72:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:6A:6C:B4:BE:43:E6:47:E6:61:BB:87:C8:21:F0:40:9D:D0:26
X509v3 Authority Key Identifier:
keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b5:a7:60:96:a0:65:19:7e:1d:3b:c1:5f:c7:6c:df:41:85:
b9:ac:f5:35:28:41:96:ac:ec:9d:38:a7:95:4d:fc:ae:be:f9:
10:7d:4d:50:8a:6f:9e:00:f7:1d:4f:a6:ec:07:bb:69:d7:be:
67:1e:2a:07:a1:2a:f7:08:16:25:47:29:b5:d9:f6:2e:30:e0:
15:a6:7d:14:f4:5f:28:28:a9:45:cb:ff:da:5a:72:15:dc:a4:
e0:76:2a:6b:b5:eb:59:91:44:16:19:48:29:b7:35:d9:e4:37:
85:8a:47:5f:fa:97:ed:7a:97:74:ac:87:4e:21:eb:25:b1:39:
9a:19:9e:3e:0f:53:39:12:f5:13:45:ca:a4:ee:8c:89:53:68:
d3:dc:29:44:8a:bf:7c:65:49:3e:27:af:ed:da:8d:25:25:ce:
00:68:3c:d2:2f:b6:7a:9d:db:3f:ea:57:71:67:1e:d1:d7:c4:
67:57:ce:70:7c:13:88:ad:c9:c2:a1:f9:fa:2b:f8:ab:f7:1f:
e9:c5:e3:c3:d5:f5:f0:13:25:4d:d2:72:bc:d0:d1:f3:6f:00:
3d:f0:79:ea:52:43:27:07:60:00:57:15:54:5a:79:25:28:6f:
0a:e6:6a:d0:a5:03:24:7d:2c:54:55:3b:cb:f7:6b:b8:db:f8:
2e:54:20:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG
REIyMkY0MjcwHhcNMjUwMTMwMjA0OTM0WhcNMjUwMjA2MjA0OTM0WjAYMRYwFAYD
VQQDEw02NzliZTVkZS1lODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/LCLomjy51cNjvpl4+M5Rw86QNGaf9PzODr0sL+ldijdl/U95busN8l2yKS
RPZxqvyLc7kc5C0dUvpeFQA22ZlKtBb2CsDmfhQNvW7hZRx1U0HAe3jzK8bQ/4JA
9LTuipVBO5T5nPzevbzlDP8Q4G6IahzkeIpWDT86W711leBtYDNqgyiPYNfJgXGh
3reu7hh5+dRtPLaam2M5OpcdH1p1cSwVXCjkNPmz8wC2PVKYgkZjES3GpYkZnjN4
V8azpIydKPgoXnxPKuQAfnYxKF8HhFkHb1uqO9uj3TAQ0cWF3iK79uhhyF/7ZOxX
y2A1L0ZbZgRcEUYdVowyOnK70QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUramy0
vkPmR+Zhu4fIIfBAndAmMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz
NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW
bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNtadglqBlGX4dO8Ffx2zfQYW5rPU1KEGWrOydOKeVTfyuvvkQfU1Q
im+eAPcdT6bsB7tp175nHioHoSr3CBYlRym12fYuMOAVpn0U9F8oKKlFy//aWnIV
3KTgdiprtetZkUQWGUgptzXZ5DeFikdf+pftepd0rIdOIeslsTmaGZ4+D1M5EvUT
Rcqk7oyJU2jT3ClEir98ZUk+J6/t2o0lJc4AaDzSL7Z6nds/6ldxZx7R18RnV85w
fBOIrcnCofn6K/ir9x/pxePD1fXwEyVN0nK80NHzbwA98HnqUkMnB2AAVxVUWnkl
KG8K5mrQpQMkfSxUVTvL92u42/guVCBn
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:34 2025 by rpki-client