Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier: wkQd1JKE7aDEn4Veis/BLd1xx+uAhuYp3GyRNp7aQHY=
Subject key identifier: 37:48:3C:36:3B:6A:27:F8:64:D7:65:36:2E:ED:DE:50:E3:42:6E:1B
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial: 07A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number: 0796
Signing time: Thu 30 Jan 2025 21:15:25 +0000
Manifest this update: Thu 30 Jan 2025 21:15:24 +0000
Manifest next update: Thu 06 Feb 2025 21:15:24 +0000
Files and hashes: 1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: kd+1ctZ2ckiA3iYYWDgIL539ODrrO5Lso8oHgYKaFWc=)
2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: nqylmKzOIz2T3CklXmofhcWPiUFjmJHvqAN11Rkt1+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Validity
Not Before: Jan 30 21:15:24 2025 GMT
Not After : Feb 6 21:15:24 2025 GMT
Subject: CN=679bebed-b7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:ab:04:8a:15:cf:26:05:84:75:13:64:64:
5a:69:ff:16:77:bc:04:71:e9:73:b7:d9:e1:6f:16:
9a:1f:69:9c:84:dd:47:6a:5a:99:64:94:5a:1b:58:
fd:42:73:9d:57:42:eb:df:6f:28:41:ef:20:9d:01:
ac:22:59:ac:0b:77:21:24:83:e0:8a:f7:23:f2:84:
a2:93:8a:52:5a:f7:fd:0c:1a:d1:c1:14:9f:66:68:
49:db:7c:45:54:60:d6:ec:fd:20:da:b3:66:b4:a5:
ed:ac:a3:82:bc:18:3a:f1:78:bf:e7:41:e7:7f:44:
93:4d:21:d8:09:c5:84:bb:c2:28:a0:11:74:56:61:
af:4f:19:be:6f:3c:3d:6e:63:bb:01:2b:af:33:ea:
68:ba:11:f8:36:35:3a:82:89:d5:ea:89:b3:d1:37:
54:76:72:b1:24:6d:5f:b2:0e:d9:c7:ce:77:41:c3:
27:f8:d1:31:1a:b5:90:b9:2f:75:dc:ef:4a:f6:a3:
07:14:99:0d:ad:77:c8:17:f4:b1:61:90:39:bb:9d:
a9:b0:67:f4:87:46:4d:9a:fa:55:65:8e:95:09:62:
4d:af:2f:28:6a:31:7d:2b:0a:6d:a2:0b:6a:f0:67:
22:28:55:0f:ba:f6:1f:43:4d:09:85:d7:c6:f9:fe:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:3C:36:3B:6A:27:F8:64:D7:65:36:2E:ED:DE:50:E3:42:6E:1B
X509v3 Authority Key Identifier:
keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:45:83:5b:bc:e1:f2:50:56:ee:7f:a3:7c:ab:f9:a4:e6:b5:
cc:96:b4:f8:70:01:34:b6:36:c2:ef:f4:1c:f9:b5:f7:22:ef:
53:33:8f:2c:90:3f:53:7c:b6:64:ce:bf:b5:72:fd:99:00:0f:
96:4c:9c:f9:e2:96:09:a7:23:62:4c:bc:2f:98:3c:ca:a0:ab:
0d:0a:76:5d:83:8d:f6:d4:be:d6:91:dc:56:35:44:58:28:59:
d1:3e:71:22:c1:ba:f5:d2:0b:4f:48:c4:61:23:38:43:b5:22:
f4:76:40:fb:3a:34:3c:6e:e0:33:38:3e:35:9f:34:06:e7:2f:
bf:45:eb:be:c3:e5:0a:9c:8f:37:2f:ef:63:48:dd:e9:33:90:
c9:a4:93:51:23:c9:a2:cc:0b:e8:55:38:c6:f9:1f:b8:14:a5:
83:c6:82:48:32:79:94:f2:97:63:4d:cf:42:d3:7e:17:62:4f:
a2:62:50:21:d8:31:9b:0b:ef:94:17:9b:a5:4b:56:ff:35:22:
da:22:83:29:9b:01:3b:bc:9b:ca:ba:19:53:62:dd:96:24:69:
ca:c5:f8:03:7e:9a:35:a0:b9:c1:26:b4:a5:86:d6:b0:92:b6:
7a:e8:6b:11:51:70:36:c3:d3:9c:78:e9:8f:20:c4:d2:91:37:
b9:94:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:23 2025 by rpki-client