Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json)
Hash identifier: h1kGYq6nLG053WFZpdV1E1fJq8AOv76ECs32lQcwtIo=
Subject key identifier: 3D:C0:8B:EE:99:45:E4:9E:01:23:C0:5B:4A:DC:F5:7A:02:6B:10:D7
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
Manifest number: 84
Signing time: Sat 29 Mar 2025 05:54:42 +0000
Manifest this update: Sat 29 Mar 2025 05:54:41 +0000
Manifest next update: Sat 05 Apr 2025 05:54:41 +0000
Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: W2DY0y9VFue4avtW5blh1ZbjsYlKQIQ2u1DOy6GOsQk=)
2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: 3HXgfR2xDybCR9JbXAm4K9BmBrTeyB6NLob5uNWXRyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9
Validity
Not Before: Mar 29 05:54:41 2025 GMT
Not After : Apr 5 05:54:41 2025 GMT
Subject: CN=67e78b22-68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:cc:21:8d:42:30:24:c7:15:74:90:26:b6:
5e:99:f8:1e:c2:03:dd:c3:44:67:21:88:d6:56:ab:
49:cc:cd:0f:f1:53:7f:94:55:10:b8:c5:ef:88:7a:
4e:ef:6f:dd:23:26:d0:6e:f7:a6:fc:00:27:59:78:
16:78:7a:d0:37:ff:d6:68:81:39:65:19:7d:b3:db:
74:aa:7e:49:a5:33:d4:b3:bf:a8:23:bb:5c:97:8f:
cc:b6:0e:9d:88:fc:69:94:8a:18:92:27:bb:38:74:
5b:56:61:df:28:3b:cd:d3:2b:5b:2f:da:ca:08:8b:
94:31:21:f8:88:c2:c9:7c:53:f2:df:77:71:4c:f0:
e0:20:5a:61:5a:e2:49:f9:10:2b:27:05:4b:bc:ea:
a9:ed:af:ab:03:8b:a3:55:c1:33:51:d0:f7:9a:5a:
45:bf:dd:3d:79:1e:9a:c1:4a:2c:8d:8f:2b:b7:bc:
aa:22:af:07:a2:30:2e:4e:8f:75:45:81:71:10:05:
1d:bb:75:03:9b:77:aa:1a:da:ff:40:71:7a:b3:e4:
c0:63:5d:e6:c3:d2:d0:1f:e6:7d:50:96:47:d6:43:
fd:5c:86:7b:84:23:c6:21:d9:5c:3d:54:dd:c5:af:
b2:f2:29:ad:74:ef:92:f7:c0:61:21:48:6a:4d:2e:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:8B:EE:99:45:E4:9E:01:23:C0:5B:4A:DC:F5:7A:02:6B:10:D7
X509v3 Authority Key Identifier:
keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:30:a2:19:23:bb:de:2e:60:0a:4c:c6:86:a2:4a:33:8d:
28:2c:44:0b:a6:09:54:e2:d8:a5:40:b9:92:77:78:a3:43:3b:
5b:ed:93:6e:15:72:b8:6c:51:4f:35:16:0b:20:1e:45:44:1b:
33:2f:2a:f9:74:4a:3d:34:5a:25:be:dc:2b:90:ae:ab:4c:a4:
78:a8:a1:f5:65:5c:69:ba:71:eb:de:d3:55:8f:84:c3:d5:9c:
68:29:84:59:46:50:79:23:25:55:b0:7d:b7:96:67:cd:d4:4d:
5a:8f:fd:0d:9e:9d:80:ac:da:64:c5:1e:fd:17:5f:19:18:3f:
5d:68:75:6e:d8:4e:9f:cb:55:32:da:81:f0:12:17:21:00:c6:
e0:92:9e:c1:1f:42:bb:27:4a:ab:8f:e8:08:68:ba:e9:cd:4f:
f9:26:32:5f:cc:98:9e:93:62:67:6b:c1:81:32:e8:61:ef:e5:
d0:c8:72:d7:01:8b:7c:9e:2f:97:00:e3:50:92:88:b2:65:ce:
7b:07:5b:cb:57:7c:f8:0a:ea:c5:4a:34:d9:48:ea:27:ca:2e:
04:f2:59:81:13:9d:65:80:fb:20:5b:ae:08:cf:35:19:57:41:
c0:bb:d7:43:48:42:73:0e:35:5b:25:8a:cb:6a:50:9c:87:45:
39:34:73:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:17 2025 by rpki-client