
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json)
Hash identifier: vOPKh2WVj1kz11WRwwL2ws56QrYcEtffDvsd4LdJ68Q=
Subject key identifier: E0:DC:FB:A1:D8:5D:94:A6:78:19:D9:12:C8:C8:88:04:77:3C:4A:92
Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Certificate serial: 0F09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
Manifest number: 0EFF
Signing time: Fri 31 Jan 2025 17:36:53 +0000
Manifest this update: Fri 31 Jan 2025 17:36:53 +0000
Manifest next update: Fri 07 Feb 2025 17:36:53 +0000
Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: eHVZZd0yyUVa821kFAzAowJzh5sbxLOt23eY3MI46js=)
2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: YkmY4q4YSypbm13HUH++xACjilqSAUGjIIEq3zMyNH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3849 (0xf09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Validity
Not Before: Jan 31 17:36:53 2025 GMT
Not After : Feb 7 17:36:53 2025 GMT
Subject: CN=679d0a35-44e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:6c:d8:a5:2e:97:f6:1f:32:89:dc:a7:5e:
ba:1b:b9:24:78:36:8d:ca:fe:80:ac:fd:f8:b8:31:
45:75:8f:66:db:72:c4:e5:80:da:22:f3:3e:4e:70:
ae:33:52:0d:28:d8:50:a4:f1:93:7f:b1:ab:ea:49:
77:2f:05:89:e2:3d:2e:4e:af:b9:45:26:07:42:40:
61:d4:1e:7d:52:67:50:ba:aa:8a:9d:03:6d:9e:b0:
86:2b:92:dd:7b:8e:0f:94:69:9e:55:a6:a2:3e:a0:
dc:bc:70:3e:47:4f:7e:6c:e4:da:4c:6d:40:1f:96:
38:7d:27:d8:ee:79:ca:8d:8f:c4:a2:90:cf:e9:2f:
b4:c9:3b:da:14:54:a0:dd:12:7e:6b:da:4f:ba:3a:
50:1d:a3:02:bf:61:01:be:a3:e9:66:90:6a:7d:70:
12:ae:94:66:e5:9c:81:10:21:8f:0b:dd:a5:7e:93:
e3:c5:b0:63:84:9e:64:a1:6c:21:1c:ab:f0:79:6e:
a9:95:8b:bc:3d:9c:bd:67:d6:15:17:c0:1e:26:0b:
d5:01:a1:a2:fc:f6:6c:65:ec:51:87:d8:ef:8a:a8:
36:10:2e:b1:92:4d:5d:29:fa:96:b0:59:d3:00:04:
e3:7c:73:81:da:a1:90:dc:91:c8:3b:63:21:4e:a4:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:FB:A1:D8:5D:94:A6:78:19:D9:12:C8:C8:88:04:77:3C:4A:92
X509v3 Authority Key Identifier:
keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:44:4c:2b:c5:a0:30:8f:0d:d1:fc:7b:1f:1f:a0:04:ff:e7:
be:6f:12:75:4c:e5:15:37:32:1c:a7:9a:f2:ca:a4:01:bb:ae:
05:cd:39:93:26:47:98:38:32:3c:7c:49:5f:9b:d7:91:33:89:
44:6c:60:e1:51:74:52:b1:c3:02:84:ae:69:00:ad:86:f5:13:
7c:c5:ec:2c:a9:47:5d:96:53:8b:21:f0:6d:da:50:67:b6:ba:
54:51:6e:16:7d:d0:f1:d5:83:66:1e:bf:5a:98:f6:67:35:e2:
7f:35:6e:4b:a1:3e:63:bb:cf:80:8c:0f:ea:2b:07:50:03:83:
32:71:c5:af:a0:7a:d8:28:22:97:c3:79:5f:d8:2e:30:9e:28:
de:e2:3d:15:06:4f:44:06:e2:54:99:9a:db:c1:9d:81:7c:ae:
19:fe:9b:7b:a7:c9:77:c3:7c:b0:c3:54:8e:29:a1:81:56:e2:
18:b1:e7:d2:40:7a:ab:ab:1a:3d:59:b1:93:a0:65:35:c6:49:
09:2c:0f:4b:59:01:bc:76:88:4a:cc:aa:78:0d:09:5a:22:3d:
45:79:3d:3e:57:74:87:da:1e:20:95:6c:83:d3:72:6b:48:54:
ff:2a:d2:33:cc:95:45:87:16:9f:8c:e7:41:42:5b:e7:ac:68:
ef:21:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:52 2025 by rpki-client