Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier: EwSA1D9Cf2xwxdI1XvXtRy6A2f0jnWCU/pLCqNTfpzY=
Subject key identifier: 28:15:C7:63:0E:B2:92:CA:23:A8:C0:49:16:BB:0B:E3:E0:C8:9D:7B
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number: 017C
Signing time: Fri 31 Jan 2025 02:59:55 +0000
Manifest this update: Fri 31 Jan 2025 02:59:55 +0000
Manifest next update: Fri 07 Feb 2025 02:59:55 +0000
Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: 7sAJCYheZYVDijDoobMJ3j2mcq1OEowMnsOoQNLEqSI=)
2: 34BB892E449C11EEB60E1441C4F9AE02.roa (hash: FmDMcqicvsxlDbwC/EaBQPR0koJ5obImCIK4fks4NaY=)
3: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: +yOPHXbGEhMTNhrz1gWIJCSv+uUbWM9Qo7qcKoe/CLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Validity
Not Before: Jan 31 02:59:55 2025 GMT
Not After : Feb 7 02:59:55 2025 GMT
Subject: CN=679c3cab-09af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:2d:7f:6c:91:a8:58:68:b9:b2:43:d3:cf:
b1:f6:56:f5:20:6d:fc:9e:0d:39:1f:28:a8:0d:d8:
76:4a:61:61:e8:e4:e1:6d:e8:99:47:9d:71:0a:b0:
ae:e4:84:f8:61:30:78:c8:f4:65:52:33:c4:7b:d4:
f7:31:7f:97:1c:e3:ef:53:e6:6a:ee:c5:d7:4c:2c:
13:67:87:e5:61:69:da:b2:00:25:57:60:a4:45:a3:
82:d8:47:43:27:2c:44:b9:9e:57:bb:f1:c4:82:0b:
45:8b:d2:23:0e:a5:f6:e1:7b:0f:6a:b0:7f:3e:9b:
02:3f:7e:a9:83:6b:80:b5:56:39:6e:3f:27:77:04:
4b:ab:ba:e1:4f:da:ab:28:68:32:a1:28:7a:be:ca:
5d:19:7d:a8:35:5f:3a:db:32:f5:03:f6:85:f1:36:
5d:6e:a1:7f:54:e4:25:27:38:5b:a0:9e:f5:ad:52:
4b:2c:c8:81:0d:ab:2e:a1:2c:b0:1d:0c:55:93:cb:
1c:96:bf:a8:e0:1f:fa:84:17:7f:bd:4b:19:75:04:
d5:76:6a:4d:bd:ff:b1:a9:08:ad:cf:d2:22:53:29:
64:2e:8f:66:47:55:11:f9:40:00:7c:86:af:ee:19:
31:eb:3a:1e:17:b8:76:18:de:87:0d:f6:61:35:a3:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:C7:63:0E:B2:92:CA:23:A8:C0:49:16:BB:0B:E3:E0:C8:9D:7B
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:5c:d3:de:26:a9:0e:a7:dd:b1:9d:15:3c:52:68:1e:1c:
58:bd:b5:7e:2f:b9:04:16:8d:80:7f:15:b4:40:c8:9f:5b:1a:
7b:ac:1a:10:04:ec:7f:d3:0e:ff:59:7d:0d:c6:a7:93:8b:ba:
a1:05:c3:35:37:be:d3:3a:2a:4d:47:97:7f:fb:6b:08:b2:cc:
3f:f0:99:30:c3:f1:b7:1b:47:d2:69:e2:5e:51:b3:06:c9:90:
b6:43:d5:92:b3:d1:b7:00:1d:2f:f1:0f:3a:cc:bd:a6:51:db:
94:ea:0c:15:5e:6e:95:c0:a3:32:17:9b:32:2e:ac:46:7f:85:
fd:7b:a7:ae:8a:c2:b7:a1:99:8a:ff:ee:c5:98:63:75:bb:ab:
c2:43:f4:12:13:7a:d5:ad:d2:96:3c:cb:da:e9:1d:a9:11:60:
57:f4:29:da:ea:c1:9c:cd:70:ec:ee:7a:20:e1:52:e9:56:5c:
fa:41:d5:bd:2d:05:6d:e7:07:2c:05:bd:47:2e:31:17:97:60:
70:39:c0:b1:86:77:ab:e4:53:7a:57:69:35:14:e3:e9:54:a4:
10:6d:c5:34:59:8a:f7:8c:db:ec:be:5c:28:76:47:ee:f8:a9:
d6:78:a3:db:a8:36:91:3e:62:14:94:53:e3:6f:0d:c8:1b:3b:
cc:43:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:06 2025 by rpki-client