Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json)
Hash identifier: fPBFzW8HLEJy/xjCQPdnOSi8qzW6KIRFe3NVZN2scUQ=
Subject key identifier: 56:39:EF:67:79:C1:B4:04:91:91:17:56:5F:CC:8A:F4:63:BD:4D:26
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
Manifest number: 5D
Signing time: Fri 31 Jan 2025 06:13:59 +0000
Manifest this update: Fri 31 Jan 2025 06:13:59 +0000
Manifest next update: Fri 07 Feb 2025 06:13:59 +0000
Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: SrCTxULwcBmZqziZG3lsjL8eoGzINl7fIDitdqDDNYU=)
2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: oF3VcsOsG2Zqk+IQ1vtZzq4bbG78CQjAlZHo1HK5yEg=)
3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: ked/GJVZUYOs6O5igLCD6QhAYKlPchUMLyIiNRHSOdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Validity
Not Before: Jan 31 06:13:59 2025 GMT
Not After : Feb 7 06:13:59 2025 GMT
Subject: CN=679c6a27-d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:6f:d1:97:33:6c:be:04:1e:82:56:47:f4:
ea:2a:6f:f3:72:22:0a:e8:dc:8c:c0:7e:61:68:5b:
76:5d:8b:2b:0e:45:67:db:9e:b9:1a:0b:92:59:5a:
4c:e3:64:22:fa:1f:2c:5a:9f:ed:21:74:85:6b:cc:
02:a8:6b:37:53:b1:34:aa:01:28:0c:77:e3:26:8e:
3e:54:52:3c:6a:f1:05:01:c0:9d:e8:0d:d6:d8:b0:
85:ad:98:ed:cc:a6:c5:23:0b:dc:1d:9f:27:46:9d:
73:d4:b5:41:69:15:7e:b1:ce:13:2a:b5:5b:a6:c3:
86:38:81:e6:60:c3:48:14:b5:84:95:63:2c:20:ba:
77:fe:26:6e:91:f5:53:a7:7e:10:56:fd:1b:33:65:
f4:59:50:4e:c5:83:80:68:85:60:79:5e:a8:ea:20:
22:ff:cc:c1:0a:64:ec:b9:e7:95:2a:27:78:b8:db:
22:6a:ad:b8:46:d3:86:9f:09:ac:e7:51:ca:26:41:
42:3e:88:dd:f5:bc:2e:20:f7:ab:80:21:e2:b5:8d:
16:cc:2f:57:2b:09:60:89:12:46:ed:37:f9:2e:fa:
d6:bd:02:46:d6:ad:37:b5:02:48:2e:3f:05:ab:e5:
df:b8:41:22:55:5c:6d:28:d1:8f:0a:04:95:e4:23:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:39:EF:67:79:C1:B4:04:91:91:17:56:5F:CC:8A:F4:63:BD:4D:26
X509v3 Authority Key Identifier:
keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:47:0e:0f:d9:dd:e5:8f:41:85:1e:4d:21:bc:3f:9b:55:85:
d1:4e:f7:eb:36:8d:30:3b:3b:39:4b:23:8e:11:32:f6:4f:62:
ad:db:c5:41:eb:4d:63:cc:2d:b7:a4:ca:fb:e1:62:a1:aa:e8:
82:c0:04:95:bf:ab:59:74:6e:ba:d3:19:d1:9f:06:c2:91:7d:
a2:b8:bc:ae:c9:f1:6b:31:66:a8:7a:bf:6a:c9:5e:3a:6e:cc:
77:c5:e2:34:a9:f6:04:0e:d2:a6:c3:96:ce:43:ef:d1:5a:73:
c0:31:15:eb:98:0c:a4:69:7d:36:e7:18:09:2d:23:d5:e5:ff:
eb:12:95:48:3e:4d:ad:89:53:be:55:11:63:2c:5d:86:9a:91:
75:f0:fd:ac:0b:98:34:e1:19:5e:9c:8e:1c:1c:ee:31:f1:b3:
2b:3d:8e:1b:42:07:d8:dc:b2:cf:cc:07:0c:df:60:2a:ae:50:
39:3f:99:a6:77:8b:a0:b8:58:e6:ab:d3:fb:9e:22:03:dd:56:
7e:99:4e:97:93:b0:1d:08:55:33:9d:6a:a6:29:c3:45:b1:01:
af:a6:c8:19:0f:1f:29:67:c9:21:2d:f7:e6:d6:0b:da:a7:2b:
46:33:c7:72:81:24:1a:97:fb:ec:d2:e1:19:10:21:53:30:f9:
bd:d8:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:58 2025 by rpki-client