Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File: TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier: xeWOJhdfotEcNTToEeTVPYhw7Hias/EPDLHpNoe07vA=
Subject key identifier: 01:EA:EC:98:97:70:1A:20:FA:46:C1:DC:3F:91:7A:3E:4F:41:9B:0C
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer: /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number: 012C
Signing time: Sat 29 Mar 2025 04:00:53 +0000
Manifest this update: Sat 29 Mar 2025 04:00:52 +0000
Manifest next update: Sat 05 Apr 2025 04:00:52 +0000
Files and hashes: 1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: 8GiOFX80rlbkeaBCPdlH1DJ7+8VWEVMnOE9/RxjRJGo=)
2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: RP6wVW/OcAubd0XMOITxdOYRXk34RJNOj+5wyZuhGYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130C18
Validity
Not Before: Mar 29 04:00:52 2025 GMT
Not After : Apr 5 04:00:52 2025 GMT
Subject: CN=67e77074-b6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:af:8d:38:59:e7:9c:0b:47:4c:a9:ca:fd:
a3:ae:74:23:1b:ae:b0:ac:fa:b1:fa:b8:c1:75:0e:
08:e2:9e:5c:52:73:2a:06:0d:2a:b1:dc:08:b6:0b:
b1:d7:01:f2:ff:58:aa:29:08:a1:8c:51:fe:9e:87:
2e:15:b9:fc:d4:da:39:91:e4:ca:43:16:06:b5:d0:
ad:dd:51:8e:eb:b8:97:5c:af:4d:a9:db:6a:6c:0c:
70:b3:01:0b:41:bc:3a:53:79:42:93:45:a3:e2:de:
83:d3:f1:c8:14:c5:cb:c6:1e:f3:99:49:f3:e0:eb:
64:1c:3a:12:11:02:75:23:64:1c:47:d7:1c:3a:0c:
aa:ad:63:c4:d1:53:73:2c:98:b2:e2:a9:74:08:07:
dc:49:81:6c:62:f8:0a:14:fc:91:76:0e:31:71:30:
d5:bb:6a:da:f6:be:3a:c2:28:74:1b:d8:0d:eb:8e:
97:d9:59:d2:88:cb:70:4d:91:26:bb:28:25:4c:c7:
3e:0c:5b:6d:e1:20:1d:ee:40:8a:77:c0:54:93:b2:
ea:40:37:f1:12:1a:3e:55:0c:10:e6:a4:f3:ec:4e:
d8:b8:c8:11:c6:a7:b0:e5:1f:98:5b:02:11:d0:a4:
95:02:8c:24:28:c3:5f:24:ba:5a:90:a9:5b:b9:8b:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:EC:98:97:70:1A:20:FA:46:C1:DC:3F:91:7A:3E:4F:41:9B:0C
X509v3 Authority Key Identifier:
keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:cc:92:4a:fd:83:b7:48:24:d4:75:66:4e:9d:8d:d4:b2:
ae:d5:56:05:17:01:d0:93:8e:cb:f4:bf:57:70:f2:9e:15:03:
43:9c:2b:71:96:9f:f0:ec:24:9f:0f:9f:c4:a4:8a:f5:4d:65:
f2:46:3d:d5:fd:b7:be:74:ce:68:34:18:3d:8b:1b:55:d7:1d:
c1:36:28:4a:5d:89:c7:fa:e9:c8:3d:29:da:b8:9b:d9:e2:11:
ab:f1:30:0f:e2:65:f4:b3:10:3a:d2:0d:34:6e:5e:0e:57:ef:
fc:a8:78:ba:5d:b8:1a:5e:5c:45:86:46:f5:72:c0:e3:b9:c2:
1a:85:27:95:50:ff:89:ce:4f:4a:9d:da:41:27:b1:22:5c:e8:
94:5c:0f:21:95:a5:ea:f2:de:58:4a:27:f5:74:5b:39:d1:a2:
44:fd:01:47:50:cd:23:68:34:7b:a2:3c:b5:ca:e3:23:44:27:
0e:9a:c2:3b:22:ec:2e:00:d0:72:9b:19:52:e7:03:4d:20:f1:
dc:92:05:83:7c:e8:6c:fe:36:94:da:65:9b:e2:ef:18:42:bc:
33:04:86:27:a1:db:28:7d:e1:59:f3:99:1d:04:f8:86:82:6b:
90:66:7c:ff:07:98:2a:f1:97:5d:3a:c4:d9:fc:ad:fb:e0:33:
13:f8:00:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBDMTgxMTAvBgNVBAUTKDRFN0M5QUJDRTZGOEJDRDIzRjYwNkYxMDhFODY3MENE
OTVDQjBGMDYwHhcNMjUwMzI5MDQwMDUyWhcNMjUwNDA1MDQwMDUyWjAYMRYwFAYD
VQQDEw02N2U3NzA3NC1iNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EmvjThZ55wLR0ypyv2jrnQjG66wrPqx+rjBdQ4I4p5cUnMqBg0qsdwItgux
1wHy/1iqKQihjFH+nocuFbn81No5keTKQxYGtdCt3VGO67iXXK9NqdtqbAxwswEL
Qbw6U3lCk0Wj4t6D0/HIFMXLxh7zmUnz4OtkHDoSEQJ1I2QcR9ccOgyqrWPE0VNz
LJiy4ql0CAfcSYFsYvgKFPyRdg4xcTDVu2ra9r46wih0G9gN646X2VnSiMtwTZEm
uyglTMc+DFtt4SAd7kCKd8BUk7LqQDfxEho+VQwQ5qTz7E7YuMgRxqew5R+YWwIR
0KSVAowkKMNfJLpakKlbuYu3RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHq7JiX
cBog+kbB3D+Rej5PQZsMMB8GA1UdIwQYMBaAFE58mrzm+LzSP2BvEI6GcM2Vyw8G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEMxOC8xRTI0RUI5MjQ2
MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZOSV9ZRzhRam9ad3paWExE
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RueWF2T2I0dk5JX1lHOFFqb1p3elpYTER3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEMxOC8xRTI0RUI5MjQ2MTMxMUVFOTFGRDcwNkRDNEY5QUUwMi9Ubnlhdk9iNHZO
SV9ZRzhRam9ad3paWExEd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgtsySSv2Dt0gk1HVmTp2N1LKu1VYFFwHQk47L9L9XcPKeFQNDnCtx
lp/w7CSfD5/EpIr1TWXyRj3V/be+dM5oNBg9ixtV1x3BNihKXYnH+unIPSnauJvZ
4hGr8TAP4mX0sxA60g00bl4OV+/8qHi6XbgaXlxFhkb1csDjucIahSeVUP+Jzk9K
ndpBJ7EiXOiUXA8hlaXq8t5YSif1dFs50aJE/QFHUM0jaDR7ojy1yuMjRCcOmsI7
IuwuANBymxlS5wNNIPHckgWDfOhs/jaU2mWb4u8YQrwzBIYnodsofeFZ85kdBPiG
gmuQZnz/B5gq8ZddOsTZ/K374DMT+ACn
-----END CERTIFICATE-----
Generated at Tue Apr 8 02:55:00 2025 by rpki-client