Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json)
Hash identifier: jl4Ysh72SArLQfOIqfjL82v8bFhzqVNCogP4OtkjMJQ=
Subject key identifier: 1B:3A:BC:37:0B:1F:BC:AA:35:CF:04:6A:32:D8:A6:A0:25:66:A4:9A
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 06:49:56 +0000
Manifest this update: Fri 31 Jan 2025 06:49:55 +0000
Manifest next update: Fri 07 Feb 2025 06:49:55 +0000
Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: SH4MWt0Ng+A951wk0r/41xI4ZBF/fJEt74iuDuUD7OI=)
2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Validity
Not Before: Jan 31 06:49:55 2025 GMT
Not After : Feb 7 06:49:55 2025 GMT
Subject: CN=679c7294-1859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:4b:2b:3d:58:e9:d0:23:1d:be:53:db:86:
f8:3c:c3:c7:26:34:2d:de:14:23:21:4c:98:5b:40:
7a:9f:ba:01:99:ac:68:7a:6c:07:bd:6f:3a:1e:8f:
d4:cb:79:36:9b:b7:d0:01:e2:41:19:58:2c:db:bc:
d9:f3:16:e3:7d:18:e6:f1:06:11:11:d3:a4:23:08:
56:21:03:aa:ef:ad:be:f0:75:86:27:91:2d:2e:f2:
ae:ff:20:b2:f4:38:fd:4f:66:ab:bd:f1:49:84:00:
c9:f8:17:ba:5b:a0:fc:3d:7d:b3:b0:0e:7f:46:f8:
e3:e2:4f:e6:74:c9:33:ce:7e:28:f7:72:c3:75:26:
d1:db:be:28:b1:3f:7e:e0:f3:99:8d:f3:38:a1:19:
bf:bc:1d:f5:e0:ee:ac:57:48:4f:d6:19:6f:6b:b6:
da:b9:08:3d:61:9b:fd:90:59:70:b3:23:8e:a9:f2:
88:0e:64:4c:e9:25:08:c7:7e:5c:19:7c:ec:55:1c:
15:25:72:d8:8c:71:d2:22:79:0e:04:02:b7:48:b1:
6b:d9:8a:eb:a4:ef:c0:52:80:a8:45:5c:76:f6:3c:
95:cd:4d:7c:27:13:a1:56:b1:ee:dc:9f:c5:03:20:
e7:11:2d:a3:50:21:e8:62:85:e8:5b:16:bb:7d:ff:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:BC:37:0B:1F:BC:AA:35:CF:04:6A:32:D8:A6:A0:25:66:A4:9A
X509v3 Authority Key Identifier:
keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:04:b0:f0:73:37:79:8d:1a:fc:2e:32:07:5c:c3:50:85:b3:
72:7b:74:46:55:e1:13:4e:0c:9d:8b:68:41:b0:48:02:68:37:
b4:af:16:82:f0:74:98:c6:94:5a:b0:11:af:92:5b:99:77:30:
85:2c:47:5e:6f:f8:e3:fb:02:92:32:d4:8c:77:dd:c3:11:4b:
d2:78:5c:69:d0:bb:2a:91:d8:87:a5:ed:d5:15:11:f3:3b:cd:
33:a1:2b:4a:79:19:fd:89:09:b5:98:a9:c3:5f:e1:38:69:36:
17:ad:16:ab:ec:3f:bc:97:d7:b3:d6:d6:06:f0:ba:49:b3:f7:
b3:ad:ab:97:f7:fe:d6:aa:aa:52:16:b1:4b:f9:88:98:d0:a1:
7f:80:3b:b1:e9:d6:f2:0a:49:f8:7c:42:59:fa:cf:36:34:dd:
60:74:88:d7:eb:c6:2d:bd:2f:a7:aa:7b:61:c0:33:72:d4:05:
15:0e:98:af:bf:44:83:a9:94:86:99:3a:0a:e6:b7:ac:51:f8:
c6:a1:26:65:20:d6:0b:0c:9a:10:3c:f0:e6:a9:22:75:ce:2c:
37:7b:bd:52:67:ce:a3:82:b7:39:4b:a8:7a:ea:a7:fc:d1:c2:
70:dc:0d:22:46:32:55:a3:75:fd:5b:28:c0:85:20:df:32:34:
f1:da:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:37 2025 by rpki-client