Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
File: TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json)
Hash identifier: cW5C/1k+1fw26xZKyJ4+IQXLfKC+FLAtJZ4L5Us09HI=
Subject key identifier: 73:F6:65:BA:C4:EB:8B:BF:98:76:5D:94:82:CD:A8:C2:C0:68:20:BE
Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
Certificate issuer: /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Certificate serial: 1E04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
Manifest number: 1DFB
Signing time: Fri 31 Jan 2025 16:05:24 +0000
Manifest this update: Fri 31 Jan 2025 16:05:24 +0000
Manifest next update: Fri 07 Feb 2025 16:05:24 +0000
Files and hashes: 1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: awQMfgAeqiOvdfyFU3xnEArodF5SUP9aDBIu5QiriY0=)
2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: KE/U/8wUAW1falY4CgDPXTNiOOjIqQ1zJL90tHiSQS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7684 (0x1e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9
Validity
Not Before: Jan 31 16:05:24 2025 GMT
Not After : Feb 7 16:05:24 2025 GMT
Subject: CN=679cf4c4-d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:3c:ed:84:f9:ae:3c:19:f8:3c:e1:20:ef:
b7:9d:1a:e1:d2:f5:95:9a:12:0e:c6:44:87:e0:49:
2e:27:6e:8a:4e:3c:3c:ef:a0:3d:19:e3:46:bd:72:
7b:14:49:d1:68:be:1d:3a:a1:e7:4e:9f:8b:54:02:
e3:21:f2:9a:63:7f:f7:16:2b:b6:26:6f:f4:be:68:
b7:34:47:4c:4b:94:32:b3:9d:05:d7:e2:3a:d7:4e:
5b:75:b8:67:7c:51:4d:54:5a:73:d0:4c:1a:55:bc:
68:3f:be:a2:24:2d:a2:07:8e:25:f3:0c:b8:44:7c:
3c:52:84:2f:5b:5e:17:be:11:90:14:0d:9b:58:c7:
1e:75:6a:aa:22:c7:ae:92:db:b1:c9:3c:e9:35:cd:
3a:6b:a5:67:85:32:44:b8:cc:ce:ec:04:58:45:a1:
dc:52:6d:68:27:46:3d:55:eb:70:0b:f2:dd:65:39:
8a:9c:4b:9a:05:7c:5e:67:a9:4a:91:5e:77:63:82:
e2:5e:1c:2b:45:cd:81:bb:f0:2a:c7:04:0a:27:af:
e8:a7:2c:cd:41:b6:57:ab:a2:e8:f9:15:85:9c:ad:
72:49:5c:22:2b:d3:27:38:94:f2:7e:fb:d8:03:05:
1c:d5:ea:4c:f6:70:c4:ac:9b:55:d6:79:77:fa:e2:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:65:BA:C4:EB:8B:BF:98:76:5D:94:82:CD:A8:C2:C0:68:20:BE
X509v3 Authority Key Identifier:
keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:f0:66:aa:86:14:f5:b6:ca:07:3a:23:e1:d5:17:09:d2:c2:
d3:e3:f3:19:07:13:5e:7e:28:b6:00:a5:3d:eb:f3:3a:36:ee:
38:73:dc:57:0d:ae:55:94:39:fc:41:f7:c5:02:6c:0b:bb:d2:
fd:d4:52:ab:63:42:51:33:eb:59:ab:7c:3b:09:f6:79:4f:22:
75:ba:09:0e:dd:32:2f:7c:6f:81:54:02:8f:53:f7:e1:fb:46:
94:44:c8:34:a2:44:c8:d2:80:18:e3:3b:ec:f6:61:c8:0d:fc:
4e:44:8d:4b:a8:80:a1:3b:ea:d6:fe:c9:22:e2:eb:e7:7a:e7:
4b:89:52:39:17:dd:f2:88:94:9b:ac:00:0c:74:d3:cc:62:40:
a2:b2:be:b3:71:dd:de:84:ed:b9:e9:45:fe:13:c7:9d:3e:11:
d2:e6:e7:84:b4:02:d4:ea:94:c4:65:2d:ef:7a:b3:d6:f6:d6:
68:27:e6:81:26:b0:41:26:4d:31:4e:3b:c3:af:42:13:c7:d4:
9a:97:f5:fa:51:8f:d5:6d:86:af:08:2a:16:79:09:ff:ca:73:
63:a9:2f:1b:86:6f:d1:02:12:2f:33:05:0c:4f:80:4e:79:16:
71:51:25:30:f2:fa:e0:e8:c6:4e:c1:64:db:b2:35:3d:e8:38:
33:0e:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:49 2025 by rpki-client