Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft
File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json)
Hash identifier: NIheu639htJ6I74qh+aHwkUhvnyCY/cBJUOFKvJGcV0=
Subject key identifier: E4:30:8D:88:9E:D4:41:E8:C8:88:22:25:35:7E:E6:F0:AB:34:89:AA
Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC
Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft
Manifest number: 0BC6
Signing time: Thu 30 Jan 2025 20:56:02 +0000
Manifest this update: Thu 30 Jan 2025 20:56:01 +0000
Manifest next update: Thu 06 Feb 2025 20:56:01 +0000
Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: 8MvtEJnMd4iWVMPzxYu4VQgScCrBIqHrqW5feAiyD7s=)
2: 577B4C026E1911ECBDBB1450C4F9AE02.roa (hash: or6MLiGLkaNfWXwUdz8g8M7TLx5qqBjRuEPQkeKQI98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
Validity
Not Before: Jan 30 20:56:01 2025 GMT
Not After : Feb 6 20:56:01 2025 GMT
Subject: CN=679be762-45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:20:41:3a:af:c8:de:86:96:36:b2:60:fd:
88:cd:b0:00:0f:bf:91:c4:58:a8:35:f1:37:e6:95:
92:65:f1:83:49:c5:4d:9e:84:02:f7:0c:e4:70:02:
c6:10:83:a4:d3:bd:5a:5e:94:d8:d3:78:58:af:a4:
c9:86:2f:56:8a:a5:5e:ff:ce:39:61:35:7e:04:2c:
66:8b:a9:24:5a:cc:bc:68:6c:ff:75:c9:48:90:9f:
c6:30:eb:cd:65:75:8e:de:f4:38:5a:fd:49:b6:48:
34:55:ec:e5:c6:4c:70:4b:6d:d0:f0:ae:29:f4:d1:
a7:7e:ac:bc:c5:5f:57:9f:1a:48:4d:c9:4e:ca:19:
d9:c6:7e:c2:85:f7:41:51:43:17:a7:60:ad:c0:97:
7b:01:ad:67:17:8f:d2:62:01:22:0e:1d:a9:c8:79:
58:b1:d6:3b:39:29:59:b8:1e:0b:51:76:1a:c2:68:
53:ec:de:e2:a9:b7:24:50:7c:51:00:ff:4d:5c:51:
79:e2:f0:63:95:bd:08:cd:71:2e:3e:fe:f7:6b:e1:
d8:f6:80:d7:06:50:b5:da:f8:f4:35:ac:db:57:2e:
c0:96:b1:14:69:7f:64:34:f9:58:00:85:f4:04:a4:
6d:af:c9:0b:9c:2a:1e:61:a6:ba:98:e9:06:6f:53:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:8D:88:9E:D4:41:E8:C8:88:22:25:35:7E:E6:F0:AB:34:89:AA
X509v3 Authority Key Identifier:
keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2e:6a:4b:80:9d:75:7b:a2:d1:11:c4:fe:af:97:05:cd:0a:
89:de:41:d4:60:65:1b:bf:38:bf:55:df:7f:b9:53:ed:af:25:
cc:0b:0f:d2:00:97:99:5d:24:c7:c8:cb:c6:60:ef:7f:55:5c:
9b:04:9f:81:24:ab:00:10:c3:03:6f:5e:04:d2:8f:88:49:3a:
a9:ab:18:af:74:b6:1f:56:2f:9a:10:60:71:11:93:78:2c:3a:
eb:cf:c5:1a:19:63:8d:a6:6f:f4:ee:f9:8a:68:4c:b1:8e:21:
08:30:20:3b:ef:22:bc:1b:05:7d:b7:0f:31:30:23:d1:88:4b:
f3:b4:b4:7b:22:60:bc:21:4d:d2:c7:d8:33:f4:2a:1d:38:ad:
79:30:ee:aa:64:a4:46:f4:fd:37:3d:2a:bd:a9:de:d8:27:1b:
77:65:cb:66:bc:1c:4f:60:6b:31:7e:ca:56:00:92:66:e6:28:
b8:a8:05:22:4f:ae:6c:8d:c8:9c:6a:c7:c4:fe:55:7e:29:7b:
8c:6a:25:bd:25:cc:0c:f2:ef:ee:fb:e9:8a:7f:36:ad:8a:fa:
9e:75:58:25:90:e0:00:1d:67:3d:87:d8:9c:48:7d:ef:6a:90:
35:e6:4b:1e:43:70:dc:7e:a3:53:67:04:23:e4:89:f4:2a:50:
8d:53:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:37 2025 by rpki-client