Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
File: TN7H1CHxboUWcqgSOd0Y_IweOVY.mft (raw, json)
Hash identifier: tzxap4HaWUBWFqtr0xyw8R4nWpUj5ffT8KoTkR4L/pQ=
Subject key identifier: 13:17:FB:D5:CE:6C:84:C2:E8:3B:7D:8A:A7:76:45:63:1D:54:EC:4F
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Certificate issuer: /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial: 048A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
Manifest number: 0486
Signing time: Fri 31 Jan 2025 00:04:14 +0000
Manifest this update: Fri 31 Jan 2025 00:04:13 +0000
Manifest next update: Fri 07 Feb 2025 00:04:13 +0000
Files and hashes: 1: TN7H1CHxboUWcqgSOd0Y_IweOVY.crl (hash: FSBSjqYUBLxQKRagWHWybnHyODcpeubZ/VpHn85Zsn4=)
2: C54BA97E283311ECBE887F3BC4F9AE02.roa (hash: XOTWPX30EoXJqKV6109bwG+UksO95BBHigXDmFEItd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Validity
Not Before: Jan 31 00:04:13 2025 GMT
Not After : Feb 7 00:04:13 2025 GMT
Subject: CN=679c137d-d4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d7:f4:2c:f4:33:76:e4:e5:ca:be:7e:dd:46:
eb:af:28:ee:d8:f4:ec:e9:e1:b2:05:1e:d0:4e:6c:
00:11:13:17:72:c6:3b:46:0d:05:7b:dc:fa:21:58:
81:40:a2:a0:10:ec:ed:9a:0c:8d:8b:81:90:28:cd:
b2:ce:dd:70:10:3a:14:0c:88:de:ff:7e:9a:e4:bb:
43:34:0c:84:fc:25:3d:fd:fd:54:e1:98:d7:58:bd:
af:8e:5d:44:e3:04:fb:e7:5e:78:ba:da:7c:0d:a9:
0e:b1:cc:b9:1e:cc:f8:ec:70:8a:1a:c4:99:9f:7c:
04:4b:a4:67:27:cf:31:3b:31:7c:ed:cf:ee:38:2b:
68:70:01:de:de:93:35:f7:ee:57:ab:2b:92:da:6b:
7d:60:e2:43:35:1f:9a:1e:5e:04:3e:67:66:aa:bf:
86:34:03:24:70:35:4b:ff:ee:eb:ab:fc:c6:3a:69:
d4:8e:f4:71:cc:0c:f2:53:84:a7:0f:66:96:8b:ec:
fc:f8:3c:a5:4f:11:8f:5f:9e:74:9b:7f:6f:2e:59:
96:d4:d3:5e:3d:62:27:76:70:84:33:4c:3f:af:fc:
32:b4:64:f4:43:a0:1e:f0:6a:72:04:7b:7c:c1:41:
8c:78:88:21:f3:f0:f8:25:30:47:d3:b7:6e:41:66:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:FB:D5:CE:6C:84:C2:E8:3B:7D:8A:A7:76:45:63:1D:54:EC:4F
X509v3 Authority Key Identifier:
keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:01:3e:ab:52:7f:ba:86:f5:9f:e5:b5:cf:cb:10:fc:76:
2a:5f:42:dd:cf:b0:6d:17:f7:54:6a:68:6a:8b:3f:2b:6d:8c:
c6:b9:9d:4f:24:e9:90:e4:66:2c:9a:de:18:1f:48:76:4a:fd:
60:5b:82:8b:f6:d6:28:de:93:a8:7c:1e:a6:7a:7a:75:25:2c:
57:f7:45:a4:c2:f1:5d:b3:da:19:a5:26:41:f6:b6:36:df:25:
d0:4b:ba:25:0b:24:3c:0e:c1:78:1f:94:37:d0:c4:75:0b:fc:
5a:7b:7c:8e:7f:7c:4e:50:3b:27:86:3a:18:ff:3e:6b:0e:98:
06:85:11:e1:bb:7a:76:a0:f7:c2:c8:fa:a5:2d:47:19:f7:95:
36:25:98:b7:97:50:e8:85:f2:14:b6:42:1c:f2:9e:d8:ee:73:
bc:bf:ae:41:5d:9d:0b:28:c0:5e:7d:e2:11:14:8c:ea:ef:ba:
7f:fb:14:6c:28:cc:30:ad:d5:b7:af:da:1a:a1:79:2d:76:2b:
60:7e:3b:a0:6c:8f:23:9b:1b:95:07:dd:a5:ba:6d:2d:30:af:
de:9c:ce:d0:15:53:2f:3f:45:a0:ad:8d:8e:8f:ff:4d:b7:3f:
40:38:70:cc:66:0b:68:1a:ff:5d:fe:a2:9a:83:1d:fe:6d:76:
5b:88:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:07 2025 by rpki-client