Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
File: tpVKYo70-TShCnBay8uQbtYQSAw.mft (raw, json)
Hash identifier: WXaZoqTok54u/J3yiqdIf6CeJlUVQSdZ3XItU9gz97Y=
Subject key identifier: 4E:25:B3:04:59:EF:F9:A6:CD:E7:71:FC:76:BB:55:C1:EF:C2:7F:6A
Authority key identifier: B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C
Certificate issuer: /CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C
Certificate serial: 0B48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
Manifest number: 0B42
Signing time: Thu 30 Jan 2025 19:12:56 +0000
Manifest this update: Thu 30 Jan 2025 19:12:55 +0000
Manifest next update: Thu 06 Feb 2025 19:12:55 +0000
Files and hashes: 1: tpVKYo70-TShCnBay8uQbtYQSAw.crl (hash: 5FK9Z/vxRrVQtrafa9yockm6hRli+3/9aTf+/rOEzN4=)
2: 5E117DC82AFC11EAB5FEC955C4F9AE02.roa (hash: FLXDHzghX+xgCtsrZgeGezVp6qrYExOvwRgCUG3oquw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2888 (0xb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C
Validity
Not Before: Jan 30 19:12:55 2025 GMT
Not After : Feb 6 19:12:55 2025 GMT
Subject: CN=679bcf37-a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:4f:48:e0:c7:55:f6:80:ca:7a:9b:c8:34:
7b:8e:4c:01:13:f8:3a:aa:92:3d:bb:0e:7c:62:3f:
53:fd:af:c6:dd:75:f8:b7:a1:47:5b:24:24:19:3b:
82:93:12:fb:16:c5:09:08:69:de:b3:87:7a:54:19:
49:28:5a:8c:42:03:a4:10:80:4c:c1:22:cd:5c:bd:
a4:12:91:3b:c4:bd:c0:0d:6e:0e:15:3c:e9:e0:c5:
9d:60:4e:c3:5d:4d:b7:36:e0:79:f2:6b:46:8c:4d:
d3:83:61:cb:19:13:ee:5d:59:a6:b9:62:6a:78:d6:
4f:fa:bf:86:d4:1e:f2:a9:25:ef:14:8f:a9:3e:bb:
7d:13:d6:09:5c:2b:28:6f:d4:06:9f:6e:b1:8e:5b:
b8:2c:c8:be:db:0b:ef:8f:11:f0:dd:91:e3:5d:94:
34:d8:ab:56:9b:8a:12:e5:a0:17:00:c9:6e:c3:c7:
8f:6d:0e:42:80:10:42:ec:fe:9e:01:8c:a1:9f:c5:
88:81:da:af:7b:fb:5b:3e:24:c3:92:b4:3c:3c:45:
95:91:4c:36:93:76:b9:0b:53:22:29:43:c3:f2:b9:
51:d4:3f:aa:39:6a:79:ef:3c:f9:b8:8b:b4:af:21:
2f:b4:55:aa:1e:b2:7d:44:83:af:68:51:0a:12:d3:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:B3:04:59:EF:F9:A6:CD:E7:71:FC:76:BB:55:C1:EF:C2:7F:6A
X509v3 Authority Key Identifier:
keyid:B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:14:be:27:c9:66:6b:59:b5:ba:8c:7f:07:88:6b:b3:8f:
fa:e2:81:5b:6e:ba:2e:47:ee:88:a2:ac:74:5b:23:b6:63:51:
d8:74:77:16:7a:9f:0a:17:2a:71:7d:8d:f4:f5:5b:d1:83:2e:
0b:12:ea:56:c3:dd:09:f2:2a:ef:5a:82:a6:28:d2:5f:ee:b6:
39:61:0c:e1:36:eb:5b:54:28:8f:07:ee:19:1a:3f:f1:91:c4:
da:eb:9f:d8:e2:08:ce:ec:98:61:55:6c:64:3c:8d:cd:d1:8d:
6e:29:bb:b7:86:1c:cd:19:bd:c9:75:69:8d:55:05:99:40:51:
63:c1:5d:09:9a:ca:d3:d4:56:97:a9:e3:a1:34:f5:45:22:1c:
8d:40:df:1a:04:75:6b:47:43:32:6f:66:d4:86:e3:82:3c:3a:
05:2b:47:f3:94:ef:b7:7e:ba:4b:c5:3d:b7:02:e8:3e:fa:12:
3f:7d:d6:db:b4:cf:0c:cc:df:02:db:9d:21:00:44:96:56:5d:
4d:1a:a1:dd:c7:5e:48:c4:50:ee:a3:41:14:79:ed:07:38:f1:
67:e7:51:57:72:8d:01:2f:2e:86:47:b3:96:70:ca:8d:86:99:
6c:a9:2c:d5:d6:b9:c9:b7:e9:87:92:41:ee:36:73:cd:c8:a2:
84:0e:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:47 2025 by rpki-client