Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json)
Hash identifier: oLtlTKy1U9v2aqS789zTmDXxj2ZMuc7zn9y2xQGdpe0=
Subject key identifier: 37:1A:43:D4:37:21:6B:59:C3:CD:6F:90:2F:F2:83:B8:CF:A0:E5:3E
Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Certificate serial: 0CAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
Manifest number: 0CAC
Signing time: Fri 31 Jan 2025 18:06:41 +0000
Manifest this update: Fri 31 Jan 2025 18:06:40 +0000
Manifest next update: Fri 07 Feb 2025 18:06:40 +0000
Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: L1wAqe+tJ4YQVw/u0MltmrCPs+ZOvzcqX1fUmGyNHB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244 (0xcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198
Validity
Not Before: Jan 31 18:06:40 2025 GMT
Not After : Feb 7 18:06:40 2025 GMT
Subject: CN=679d1130-b473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:82:23:9d:e7:c0:77:94:b4:4f:4b:73:90:
5f:6d:c9:36:10:65:4d:51:42:fe:e2:16:8c:d1:6d:
7c:f9:89:c5:c4:bd:af:5f:92:6e:57:6b:67:0e:89:
bd:9c:a2:59:71:d5:f6:0a:a9:8c:0c:61:83:74:e2:
0a:5e:35:a7:fc:a3:1d:53:69:fe:ac:f3:da:26:a1:
e1:78:1a:9a:07:da:bb:1e:61:53:ac:1e:00:8c:0a:
3d:0a:22:74:80:ef:d9:d9:54:31:b0:9b:9c:73:3f:
9f:30:71:2c:16:b1:9f:5d:71:da:60:5b:0a:ef:31:
f6:df:17:96:35:26:83:c2:b6:0d:7b:0c:96:09:e5:
40:1b:43:e1:6a:2a:22:2e:26:e8:c1:55:db:44:b5:
aa:b8:93:bc:5f:f6:10:a9:9e:40:4a:a5:2a:1c:a8:
a9:9e:91:c4:8c:7c:cb:16:e6:62:bc:c5:50:61:25:
e2:25:82:5b:18:7c:b9:52:50:db:37:98:00:1f:d1:
de:1f:a1:24:07:17:87:24:25:cd:7c:93:48:b8:a1:
4e:ad:d0:bb:da:05:20:e6:dd:73:26:8d:95:e4:db:
21:c7:87:b0:27:80:35:2c:5f:43:3e:91:59:bf:98:
26:db:7a:97:e0:c2:56:f0:e5:fe:a1:d8:87:83:35:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:43:D4:37:21:6B:59:C3:CD:6F:90:2F:F2:83:B8:CF:A0:E5:3E
X509v3 Authority Key Identifier:
keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:89:42:b1:d3:5e:96:d6:a9:b5:d5:2a:42:44:24:0c:b9:c5:
ff:10:a2:16:e7:be:80:57:86:10:f3:af:e9:d5:a0:21:a0:16:
7e:b3:7f:a5:c5:68:fe:5c:10:50:20:bf:f2:95:ab:0b:ad:e8:
d8:d8:94:8d:6d:63:7e:d9:c4:fa:b2:96:10:1b:87:55:82:8d:
b3:c0:57:ed:06:2b:4e:88:68:9c:96:99:47:bb:5d:7e:91:3a:
f9:a8:2a:0a:04:3d:c7:cf:60:ba:e1:c7:29:dd:de:a1:aa:db:
49:b5:0a:dd:dd:81:31:69:73:55:78:83:ae:e0:aa:ef:36:5e:
bf:67:08:31:ff:9f:24:6b:bd:3f:2b:4e:25:86:6c:37:80:ba:
7e:9c:05:c0:0f:0e:55:fc:ec:95:c5:cc:05:d3:83:46:fb:51:
c5:99:a9:34:32:68:51:69:01:37:43:2d:ab:4f:92:4f:2e:51:
c2:07:63:db:31:58:9f:65:12:66:4b:49:8b:26:7f:52:4f:a0:
79:7d:e9:4e:f7:a4:22:3f:66:de:ef:04:46:6b:2d:13:45:e1:
d0:6c:f2:83:12:2c:cd:45:2c:7f:79:c5:83:3e:ed:6d:6a:31:
14:59:5c:1c:56:4e:17:7e:7a:2b:ce:f7:1d:f9:44:d1:7e:ca:
85:74:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:12 2025 by rpki-client