Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json)
Hash identifier: jjlok/jE5QsN5d7TPTjuwZFgGGG533qk0ePvq3H9iA8=
Subject key identifier: 9F:D5:72:7D:3C:E8:AF:F8:6C:7D:55:F5:FD:40:40:D2:2D:32:23:25
Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E
Certificate serial: 0358
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
Manifest number: 0354
Signing time: Fri 31 Jan 2025 01:03:41 +0000
Manifest this update: Fri 31 Jan 2025 01:03:41 +0000
Manifest next update: Fri 07 Feb 2025 01:03:41 +0000
Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: C5h9rMxW38hW2+QZ1N/MlwDhKUzRPnhvwzO3AOtWeN8=)
2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E
Validity
Not Before: Jan 31 01:03:41 2025 GMT
Not After : Feb 7 01:03:41 2025 GMT
Subject: CN=679c216d-4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:54:3b:cb:c3:e4:1f:70:c1:31:02:3a:42:
9c:17:5d:62:dc:df:d5:ee:7f:f2:cb:79:05:1b:4b:
0b:94:3c:f5:7c:96:f2:9b:6b:db:cb:28:69:8e:d5:
e7:f2:a9:c5:3b:d3:ae:d7:cd:09:38:fa:59:04:c4:
c7:9d:e3:54:e7:46:00:3d:7a:2b:9c:84:ac:c9:21:
56:42:5c:9b:39:17:01:03:a2:7b:50:6a:ea:49:b8:
66:64:ba:06:31:9a:81:1c:65:da:28:7b:e4:f3:97:
64:61:23:21:e8:13:36:b5:f1:76:04:b7:17:5c:28:
c3:dd:c9:ca:e4:7b:23:40:58:fa:f9:ce:1b:30:e0:
4b:bd:a4:a9:61:45:57:27:41:86:48:63:86:82:d5:
5c:bd:aa:c9:6e:04:01:fc:4a:92:55:6a:4c:1b:57:
2f:bd:9c:5a:86:cf:33:41:c1:d4:1b:e3:d4:62:f4:
ad:01:05:54:14:97:ad:a8:44:1f:b4:ca:f5:fb:a1:
79:d0:2a:2b:fa:fc:1e:99:aa:84:36:f0:cf:8d:f2:
c0:82:2b:7f:1e:55:6c:aa:38:0e:9a:ae:b2:d7:f5:
dd:a8:9f:a6:e9:80:67:31:10:92:c0:da:c5:63:fb:
12:0c:77:6b:71:89:44:28:26:d2:e4:82:f6:d7:59:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D5:72:7D:3C:E8:AF:F8:6C:7D:55:F5:FD:40:40:D2:2D:32:23:25
X509v3 Authority Key Identifier:
keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:6d:49:a6:0d:91:7f:64:40:d3:fa:55:2d:48:f9:a2:96:
f4:14:1b:b5:01:cd:0b:13:cf:26:bb:74:2d:40:a2:83:8f:6d:
5d:cb:09:1b:1f:d7:86:bb:b4:9a:27:d3:33:54:2a:a4:87:66:
64:5f:d3:fd:46:fa:9a:e0:50:d0:72:99:23:57:1b:33:db:a4:
d8:34:a9:b4:f6:21:7a:a7:65:dc:fb:08:2c:b9:5b:76:a9:40:
9a:52:d2:f9:2a:9c:36:9b:d4:fe:20:c0:0a:33:22:33:c4:1d:
c3:f3:82:7c:1a:e5:91:ed:7c:dc:4d:a4:4f:07:7f:c9:2b:d2:
7e:de:2b:36:9d:31:c2:20:eb:d6:87:f4:77:cb:cd:0f:c7:d8:
59:84:33:e9:e0:89:e0:ee:12:18:2a:d1:4e:74:49:9c:13:1d:
d4:d8:8c:04:0c:ba:92:8c:6f:b3:70:1e:a5:89:5f:b4:85:51:
03:49:d0:20:08:e5:16:43:1e:51:79:d7:92:ed:60:fe:9e:a8:
05:86:f7:8b:6a:31:be:18:4c:1f:a5:7c:b4:17:cd:97:ff:54:
30:1d:fe:b8:aa:54:73:db:2e:db:63:da:94:0b:95:2e:c0:16:
1c:47:57:51:20:34:46:10:b9:bd:34:be:76:7b:61:82:99:4a:
9b:a7:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:35 2025 by rpki-client