Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json)
Hash identifier: lzM6BERrha1RKIyPX84RgHQUSDqMDBYMchg9eWVb/ls=
Subject key identifier: D9:1C:C8:C0:AB:20:25:C7:53:C9:05:B5:C0:10:FE:35:EF:6B:D5:99
Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
Manifest number: 036C
Signing time: Fri 31 Jan 2025 00:59:06 +0000
Manifest this update: Fri 31 Jan 2025 00:59:05 +0000
Manifest next update: Fri 07 Feb 2025 00:59:05 +0000
Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: fO6yFJ+5FkSzrVm+LrRza9tsw/Gn1orfVS6RjcJjusE=)
2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: eviaeNHpTyeX/nwMhD0qRHeqmHQSy0IY0Lvxy4hMeV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Validity
Not Before: Jan 31 00:59:05 2025 GMT
Not After : Feb 7 00:59:05 2025 GMT
Subject: CN=679c2059-2705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:86:34:71:d0:8d:56:b9:6f:64:14:00:12:
40:36:41:dd:be:d8:72:57:df:37:03:90:a8:96:c4:
c5:1f:ea:de:6f:e6:f6:e4:0b:c3:51:ba:43:6c:df:
5b:e6:ae:62:40:94:06:7b:dc:a7:04:6a:80:de:fd:
bb:2f:40:26:2c:00:fd:30:e0:cd:6f:81:b8:f4:7d:
b5:3b:ab:b4:25:2c:d9:bd:4e:fe:1b:33:cf:df:ed:
4c:a0:29:50:24:67:fc:ed:6e:8f:50:60:17:f4:2f:
7e:2c:48:8a:5f:bb:33:e1:79:c6:0f:bd:e1:9a:54:
e7:1f:35:cc:cd:c5:de:af:83:ef:05:ce:64:f5:7c:
35:f2:20:06:73:4a:10:71:b3:b5:ab:8b:82:e1:12:
72:91:ce:ac:84:6a:ac:cd:a6:7a:8c:27:08:26:83:
e7:a1:be:80:b6:06:58:db:f6:36:2d:9a:23:16:9e:
bb:17:f1:fc:c4:e4:a6:39:f1:30:3b:98:a9:69:b6:
87:e5:56:c4:28:65:e3:e5:ac:f5:73:f5:5b:58:4b:
5c:95:c5:5d:8f:84:92:34:72:e5:9b:bf:0c:c0:d2:
bb:e3:48:8d:c5:76:9c:47:6d:8d:81:33:29:d8:8e:
0e:4d:4f:bf:af:87:30:7c:6c:5f:d9:1e:b3:cc:9d:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:C8:C0:AB:20:25:C7:53:C9:05:B5:C0:10:FE:35:EF:6B:D5:99
X509v3 Authority Key Identifier:
keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:46:63:b2:4a:15:1b:9a:a2:a8:38:a2:cb:9c:88:67:ce:
b6:86:e0:bf:99:d8:24:f6:18:e5:6f:0e:ea:32:79:d0:46:fc:
c3:24:b0:61:54:e8:b1:e8:02:67:1b:ba:40:24:87:6a:67:07:
ea:13:64:e5:3b:78:42:f7:8c:d9:a5:b1:92:17:e6:ab:98:de:
53:0c:ba:fa:89:b8:9a:e2:3b:89:94:dc:db:29:23:16:1a:35:
c4:11:48:16:62:ae:e9:43:87:e0:7d:8a:8e:19:9b:fa:e1:44:
e9:74:61:8a:bb:34:3c:a3:de:7f:f4:c7:91:b0:69:0f:6e:29:
40:37:cc:0f:85:8f:81:79:d8:23:a5:af:c5:cf:60:e2:1f:6b:
89:4b:72:f0:51:68:68:3c:53:fd:07:8e:98:db:e0:1c:62:81:
ca:80:91:56:4d:8d:94:cd:4a:c7:0e:d2:6e:c6:20:8f:31:5c:
f9:9f:79:18:62:8e:19:4f:0d:2a:75:8e:f4:93:8e:56:e5:07:
4d:e1:37:ae:ff:26:9f:0f:31:3a:ce:67:72:27:b0:fb:07:f2:
4b:08:64:c9:ea:53:2b:13:b6:03:1d:75:14:c3:0a:37:18:f2:
c9:1e:ec:33:f6:c7:d8:6a:b0:6c:72:2c:e7:cd:58:e5:d6:6f:
28:fd:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:51 2025 by rpki-client