Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json)
Hash identifier: twi5EUwY3Dak3tS4PUVEWFObJrn2IqvT9XZC0mX/oMY=
Subject key identifier: 52:A5:FC:B2:18:85:60:CA:03:B0:64:65:C1:EE:7E:50:59:60:45:B3
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial: 0A5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
Manifest number: 0A59
Signing time: Thu 30 Jan 2025 19:47:47 +0000
Manifest this update: Thu 30 Jan 2025 19:47:46 +0000
Manifest next update: Thu 06 Feb 2025 19:47:46 +0000
Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: DG6ZTONhKvKw9e1ZZnXefSMdJIfnDpXtQsO7nP6mVcw=)
2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: MZsM+UAZaGaSAyzENC4LDh295lkICQa7ODmFeiNFWB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Validity
Not Before: Jan 30 19:47:46 2025 GMT
Not After : Feb 6 19:47:46 2025 GMT
Subject: CN=679bd762-7891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:04:64:b6:89:6e:c1:9d:20:a6:9e:17:40:
de:56:31:46:a8:0b:1c:61:b7:c2:80:c4:44:e6:17:
17:eb:44:cf:b1:b9:c2:67:09:7a:a9:05:82:a7:41:
29:ee:63:bf:5c:ea:39:1c:f1:69:34:1c:eb:95:19:
c3:7a:5d:d1:98:8c:58:c7:21:03:a8:63:63:ad:92:
b5:8a:b8:0e:77:71:fa:2b:62:3e:ef:98:d8:9a:6f:
73:8c:f5:a7:d5:c4:7a:d5:71:03:4f:ec:da:d7:53:
d1:60:26:4a:a0:e0:65:c6:ec:44:3b:b6:3e:f0:f8:
02:8f:e7:e8:86:d2:e0:6e:8f:09:57:f5:f3:0e:d2:
c9:1b:04:56:1b:ce:3c:61:da:7a:fc:1b:b1:e1:00:
1e:d8:2a:63:b1:b2:76:ac:3c:e8:a0:80:96:1b:35:
9e:89:da:91:ac:3c:61:11:69:43:8e:ba:f7:f5:a1:
f8:59:4c:e4:7e:ec:e7:c5:d6:1f:18:b4:b4:4c:d3:
08:c7:db:65:1e:b7:3e:f1:d0:df:36:fd:b1:bb:2d:
bf:61:4c:a6:9d:4f:dc:42:d6:7a:2a:e5:cf:e1:ba:
0d:33:d3:d8:1a:42:ee:17:5c:15:de:ec:12:74:c0:
23:1e:7f:2e:7c:0b:ba:84:84:4f:7a:65:ab:f2:40:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:FC:B2:18:85:60:CA:03:B0:64:65:C1:EE:7E:50:59:60:45:B3
X509v3 Authority Key Identifier:
keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:69:37:5a:64:1a:f3:1f:cc:23:12:c8:c3:8b:99:ef:37:
7b:95:93:56:d8:08:54:d7:9f:9f:b3:ee:97:30:04:de:41:40:
a0:5e:16:f3:7c:c0:cd:ab:04:9c:f8:40:c7:4a:2f:c3:9e:20:
6c:8f:37:eb:c7:d4:5d:55:a0:f5:39:fb:80:ff:d6:ed:e2:7e:
d8:a4:98:de:84:d6:ff:cb:0d:c9:e0:65:b4:f4:3a:19:24:31:
08:33:4b:9a:b6:a5:20:0d:aa:f3:cd:3c:5e:8a:9f:1e:62:33:
26:a3:94:95:02:aa:be:80:ea:3e:e8:20:f7:66:6b:36:f0:a8:
fe:45:d9:be:cf:1a:67:5a:0e:46:14:cf:1e:58:e4:55:07:99:
a3:fb:b2:ce:29:38:33:21:c2:7b:7f:88:99:7e:f5:89:37:0e:
41:b9:cb:f4:e7:7f:ef:ca:ee:4d:95:b3:40:1f:e1:ce:ae:34:
38:74:b0:84:88:35:4b:57:26:e5:ed:5e:3d:87:20:ad:31:23:
f1:06:5f:c7:56:19:26:37:12:da:aa:8a:e7:9a:25:e5:b3:b9:
c5:05:c6:3c:09:87:72:68:7c:62:2e:af:6f:f5:5c:c3:4b:2a:
30:db:b3:2c:8d:aa:8f:1d:7a:71:b8:a0:de:8f:09:ad:e1:38:
ec:73:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:54 2025 by rpki-client