Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier: Q2aqALcYp4otWY+Pzn78ypWJawsXxeNv0Zcyyhp8BGM=
Subject key identifier: 98:CC:48:10:7B:B8:88:EE:5C:3B:5B:16:03:31:EB:8D:EE:5A:4D:C2
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number: 08
Signing time: Sat 29 Mar 2025 07:31:24 +0000
Manifest this update: Sat 29 Mar 2025 07:31:24 +0000
Manifest next update: Sat 05 Apr 2025 07:31:24 +0000
Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: m5M+cN8ZrZ8IAUT2x6IZ/bFNQ92KScu3bWl9asv/9Us=)
2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A4
Validity
Not Before: Mar 29 07:31:24 2025 GMT
Not After : Apr 5 07:31:24 2025 GMT
Subject: CN=67e7a1cc-609d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:36:40:fa:b5:45:5c:45:04:25:0e:fb:04:
df:cc:15:8b:0b:87:a2:23:ea:65:2c:7e:45:eb:4d:
16:ab:aa:b0:d5:b7:04:81:c2:d2:9c:11:1f:13:d4:
42:a9:45:28:79:58:01:4d:c5:0d:d3:2b:dd:2b:e1:
67:64:8f:dd:73:ec:13:49:a2:ae:1a:30:fa:11:e4:
79:8e:69:a1:4e:de:8e:ce:61:6a:6b:19:be:18:09:
c0:de:40:a1:bb:34:bf:89:a7:18:ab:1d:8a:38:44:
25:54:3e:46:37:9f:13:0d:d3:36:42:f3:04:80:db:
bd:12:c9:29:e6:5d:5e:f4:b5:69:db:24:d9:09:21:
ea:3e:a5:1c:5a:a6:6d:03:c3:53:7c:2a:dc:b8:46:
94:d5:6f:b9:20:45:98:3f:3c:2f:aa:ae:62:06:a4:
b7:4a:2c:65:27:c8:d1:1a:5a:e7:cf:b5:fd:2a:64:
2e:13:34:cd:85:62:31:b3:17:69:91:b0:63:08:e8:
9a:3b:80:c3:ab:cf:bf:b7:46:c7:61:e0:b8:92:60:
bc:3c:f9:94:a0:e3:94:5d:ce:6b:ac:91:c1:1a:6b:
ef:0c:99:30:a0:48:1a:0d:19:59:a8:3b:f2:60:a4:
ec:e7:c9:e6:6a:3c:88:92:d4:54:19:f7:cb:80:7f:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:48:10:7B:B8:88:EE:5C:3B:5B:16:03:31:EB:8D:EE:5A:4D:C2
X509v3 Authority Key Identifier:
keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5f:ef:bc:e9:17:c8:0e:bb:ef:df:ae:b6:ad:a0:3a:3e:65:
d4:c6:6f:82:7a:e6:5f:f6:08:b1:2b:f5:20:86:48:4a:30:9a:
92:1d:92:1b:fc:29:33:d1:1f:7b:0c:4a:76:4e:d6:9b:68:65:
09:4b:fd:1d:94:65:94:6a:f2:b5:ea:7d:68:a3:49:24:c2:1d:
48:09:23:bb:ea:ff:e4:26:6d:49:e2:ff:5a:36:97:9a:40:54:
c2:6a:60:a3:f8:8d:de:6e:17:dc:6b:35:53:a5:de:6f:dd:a6:
e8:0a:6e:13:d0:6a:61:12:b2:48:d6:a2:f9:21:b9:97:ae:ec:
38:e9:69:3c:fe:a1:dd:dd:eb:c5:16:02:57:1e:4f:bd:48:69:
62:f5:58:4e:65:45:88:5d:1d:ec:9c:ea:94:90:f2:58:75:56:
19:68:84:17:86:d2:85:d5:88:50:6f:d7:42:bd:51:8a:81:64:
2f:82:76:c2:64:98:a3:48:18:05:ec:08:f3:33:03:a8:e0:50:
ef:f0:0d:7a:b0:d6:02:de:dc:9c:d5:57:49:0d:fd:cc:fc:35:
e0:69:d8:8b:69:85:dd:84:d5:5a:6e:71:b1:dc:b8:55:33:13:
a9:4f:35:9c:76:57:e6:22:3a:bd:e9:ed:6c:01:21:85:af:25:
f6:7e:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:50 2025 by rpki-client