Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json)
Hash identifier: v8J3A64tM2pChljsUnxLKgc6piUqBjvj8PuVXbLFtZA=
Subject key identifier: 43:E3:5D:0E:8C:C4:35:7F:03:66:65:E7:E6:91:77:E3:8A:9B:44:3A
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
Manifest number: 089C
Signing time: Fri 28 Mar 2025 20:49:25 +0000
Manifest this update: Fri 28 Mar 2025 20:49:24 +0000
Manifest next update: Fri 04 Apr 2025 20:49:24 +0000
Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: NZEjzUbmIve1qvJShdx+U1KC+F2+7f/8Y763Lo7KBsE=)
2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EDAC
Validity
Not Before: Mar 28 20:49:24 2025 GMT
Not After : Apr 4 20:49:24 2025 GMT
Subject: CN=67e70b54-185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:05:68:b9:68:36:cc:61:49:6a:6c:f0:1f:
09:fb:67:de:8e:c2:90:63:34:1d:ba:fb:c5:1e:99:
e6:34:b7:24:14:c8:54:73:bf:6d:10:fd:94:68:18:
db:8d:5e:e0:91:40:9e:56:78:ef:b4:b3:8f:6a:37:
11:2e:94:68:49:96:32:ab:a0:0b:96:34:ae:66:a9:
d2:ed:4c:a9:63:44:d6:f5:e2:ae:4f:30:ea:d7:f5:
b0:07:4c:80:e7:3c:a4:9c:fe:02:13:18:36:55:d2:
47:01:6d:4b:9f:94:b0:e4:08:78:20:f8:38:05:1a:
a9:00:89:0a:cc:ce:6c:52:ec:70:fe:b9:05:f1:ec:
c3:6c:aa:f8:87:62:46:86:cd:7c:82:fa:64:0a:ee:
7f:1e:3a:c8:25:ba:f2:15:42:46:f4:5d:7f:d1:d5:
ec:a7:4d:e1:fc:de:08:e7:75:1b:94:36:14:99:fa:
69:76:02:71:56:47:46:a1:10:ef:0f:a3:d2:d0:72:
59:5e:7a:a3:6c:4a:4f:25:5d:7c:29:a7:82:03:dc:
5c:d9:b9:a1:24:66:a9:ee:9c:a8:cd:05:20:bd:14:
12:8d:28:7b:21:de:a9:62:21:1c:ae:aa:53:b7:3f:
db:a9:a9:ab:ee:03:c4:08:2c:b7:b9:39:46:f8:ce:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:5D:0E:8C:C4:35:7F:03:66:65:E7:E6:91:77:E3:8A:9B:44:3A
X509v3 Authority Key Identifier:
keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8c:5a:4a:ad:0a:6e:ca:39:e0:ef:51:00:bd:c4:d2:38:ea:
02:a6:cb:39:66:aa:b8:79:6d:a8:01:0c:c7:b0:f0:49:2c:34:
30:7b:5d:31:4f:37:f7:4f:68:d6:e5:c6:0f:27:b7:81:bf:db:
8a:03:45:8d:5d:91:92:22:29:69:83:81:5c:73:aa:e1:06:e8:
fc:a0:33:16:71:12:12:02:ef:6e:26:08:40:08:f0:d3:30:e8:
58:6a:97:61:0a:e6:a3:c7:20:f0:14:a0:7d:7d:e5:b0:71:df:
72:29:8f:44:48:65:c4:1c:81:66:00:38:a4:29:e9:41:17:48:
47:f5:34:e8:2b:1c:6c:fa:de:05:fe:ac:b9:0c:ea:69:ac:e1:
cc:9d:51:0d:07:a4:7d:65:ec:2e:03:dd:e4:56:82:16:a3:85:
fa:5a:21:cf:a9:8e:f4:94:fd:1c:91:7c:31:66:05:7b:c9:4f:
96:0f:64:f5:5b:24:22:5a:61:21:be:9c:6b:5c:8a:94:04:c9:
42:03:1c:53:a0:7b:61:da:5f:22:a0:a2:8c:fa:66:76:33:53:
40:dc:98:59:7a:54:87:a8:7f:c1:f4:a7:e6:5f:79:40:df:b2:
72:e3:e0:8b:fd:c8:06:34:2d:c7:48:e7:06:9f:b5:31:c9:99:
50:c4:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:37 2025 by rpki-client