Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: T6LpGzUljjGwM7h37sDMl2fJLcmjY9MQytSPwR/p+l8=
Subject key identifier: AD:22:1C:05:25:F7:03:FD:62:3C:6F:CB:C9:90:DD:7D:48:0A:83:6E
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: DE
Signing time: Fri 31 Jan 2025 04:46:46 +0000
Manifest this update: Fri 31 Jan 2025 04:46:46 +0000
Manifest next update: Fri 07 Feb 2025 04:46:46 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: iYw0616pedzhhub1J3YjGV0dVJ2IyRqL8n7CnWTOqPg=)
2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=)
3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Jan 31 04:46:46 2025 GMT
Not After : Feb 7 04:46:46 2025 GMT
Subject: CN=679c55b6-7cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:64:a7:42:2d:59:34:a4:15:34:d4:ed:b9:
7d:3f:99:15:df:de:3c:27:ed:8e:15:40:53:00:c6:
1c:bf:c5:7a:a9:55:f7:66:c3:e0:fc:84:72:1a:40:
e4:35:09:0e:cd:e4:3c:23:54:a5:77:cc:ac:3f:96:
e9:9d:fe:5c:85:d1:5b:2d:45:30:0b:e3:9d:5c:8a:
88:d4:86:8d:ff:2d:a6:df:5a:0a:47:fe:b9:02:14:
25:95:1a:ca:a2:ba:de:d7:9e:6d:3b:61:81:92:2f:
1e:0a:2e:7d:3c:7d:25:9c:24:77:54:f9:79:77:cb:
c0:c0:04:27:7b:85:e9:10:93:74:35:1b:20:b6:ed:
2c:1d:2e:5b:2c:9a:bb:de:c3:cc:54:53:13:b2:e2:
b5:22:3b:36:87:02:45:0b:dc:d4:51:4e:86:02:70:
18:6c:67:a6:d0:fb:bb:cc:8a:ca:80:b8:57:68:c9:
2f:f4:5e:44:ce:65:aa:a9:d3:51:2f:7d:e0:93:3e:
20:62:4e:2b:a9:54:37:ce:f2:4e:24:91:99:93:21:
0f:bb:df:c0:1d:dc:09:22:94:7b:1d:f8:d9:49:94:
7f:29:c7:3e:4a:bd:05:b8:31:0e:5a:6f:c2:d1:24:
95:63:37:75:dd:12:0f:b9:5e:d6:15:f5:99:73:b4:
a8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:1C:05:25:F7:03:FD:62:3C:6F:CB:C9:90:DD:7D:48:0A:83:6E
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:5c:16:7b:cb:8c:a3:87:c1:36:b8:1d:aa:0c:44:bc:38:
77:4d:4d:23:f5:6e:7b:d3:19:2b:c1:7f:54:1f:71:bf:0c:07:
16:4b:69:d2:c0:40:16:9a:a8:0d:90:73:54:77:a9:26:f6:dd:
3c:3b:0e:07:41:44:98:12:4d:0a:4d:ff:3e:bf:c3:0a:68:73:
52:f6:50:68:47:c1:db:4e:70:7d:04:5f:7d:ee:aa:59:f5:30:
c8:17:9a:bc:93:ca:31:0b:31:52:88:d2:28:cb:23:a5:fe:32:
10:95:97:04:e3:92:cf:0e:81:2d:08:a1:65:ab:c3:7b:05:ee:
75:29:8a:df:23:43:e9:55:1e:60:36:96:04:2a:e0:db:12:29:
04:c4:ca:31:ca:96:b3:74:e0:3d:6c:a5:48:90:a8:e9:2a:f3:
bd:82:b9:b0:2f:28:d5:bd:0b:d4:a8:8e:59:d4:4b:13:e1:52:
ef:e4:ff:c6:66:e6:17:97:49:5e:fe:15:29:1c:68:71:4d:f0:
78:20:b6:58:33:ac:56:99:ad:e8:25:95:2c:df:e2:73:cb:e3:
30:24:d6:91:56:1a:84:57:d3:7e:e7:20:8c:d9:75:29:64:eb:
60:65:56:8d:12:62:0b:de:3d:5b:00:b2:08:e0:05:e0:8b:8a:
32:33:2e:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1
NTIwNUM4RjYwHhcNMjUwMTMxMDQ0NjQ2WhcNMjUwMjA3MDQ0NjQ2WjAYMRYwFAYD
VQQDEw02NzljNTViNi03Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwG9kp0ItWTSkFTTU7bl9P5kV3948J+2OFUBTAMYcv8V6qVX3ZsPg/IRyGkDk
NQkOzeQ8I1Sld8ysP5bpnf5chdFbLUUwC+OdXIqI1IaN/y2m31oKR/65AhQllRrK
orre155tO2GBki8eCi59PH0lnCR3VPl5d8vAwAQne4XpEJN0NRsgtu0sHS5bLJq7
3sPMVFMTsuK1Ijs2hwJFC9zUUU6GAnAYbGem0Pu7zIrKgLhXaMkv9F5EzmWqqdNR
L33gkz4gYk4rqVQ3zvJOJJGZkyEPu9/AHdwJIpR7HfjZSZR/Kcc+Sr0FuDEOWm/C
0SSVYzd13RIPuV7WFfWZc7SozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0iHAUl
9wP9Yjxvy8mQ3X1ICoNuMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB
RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUE2RS9GNTFGRjg4NjlBRjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3
bXhicGwxQUc0U0pWSUZ5UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaPVwWe8uMo4fBNrgdqgxEvDh3TU0j9W570xkrwX9UH3G/DAcWS2nS
wEAWmqgNkHNUd6km9t08Ow4HQUSYEk0KTf8+v8MKaHNS9lBoR8HbTnB9BF997qpZ
9TDIF5q8k8oxCzFSiNIoyyOl/jIQlZcE45LPDoEtCKFlq8N7Be51KYrfI0PpVR5g
NpYEKuDbEikExMoxypazdOA9bKVIkKjpKvO9grmwLyjVvQvUqI5Z1EsT4VLv5P/G
ZuYXl0le/hUpHGhxTfB4ILZYM6xWma3oJZUs3+Jzy+MwJNaRVhqEV9N+5yCM2XUp
ZOtgZVaNEmIL3j1bALII4AXgi4oyMy5g
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:55:04 2025 by rpki-client