Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier: RbzxmRn/JYQn/Wd474367UxCdvry1ysKpuqyvCujlfs=
Subject key identifier: 9A:1D:EA:A8:21:C1:82:D9:09:96:0C:47:9A:10:3F:55:6D:46:69:47
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number: 01A9
Signing time: Sat 29 Mar 2025 02:48:32 +0000
Manifest this update: Sat 29 Mar 2025 02:48:32 +0000
Manifest next update: Sat 05 Apr 2025 02:48:32 +0000
Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: x1woM3F2BCmf3AHAiFSlmSLDzjW8os7RiUjFsKD2THo=)
2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: +CsA0CDqSBwMJvpMmI/eW+RyBWeqQP2KL9IRV7AipG4=)
3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: kY+A2HtaHNsj7sb4HrmiscgcVj4k7bEhm+XyPAYjO98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40
Validity
Not Before: Mar 29 02:48:32 2025 GMT
Not After : Apr 5 02:48:32 2025 GMT
Subject: CN=67e75f80-f778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:08:e2:a3:ac:a0:da:6c:9e:7d:1e:f2:78:
5e:8b:51:28:f8:57:95:31:99:dd:4a:dd:20:61:54:
36:94:e3:06:13:41:37:0c:a4:56:f5:87:8f:fd:da:
e3:e9:e2:1e:ab:d6:40:58:1c:96:71:84:d8:66:04:
5f:82:1e:a3:a7:d1:c2:33:c6:a1:8e:09:27:f3:2c:
4c:a4:70:cb:9a:6c:7f:df:62:c8:8b:ac:39:84:24:
d2:04:8f:3b:25:17:3f:0e:36:f2:df:46:d3:1b:75:
cb:eb:b0:b6:7c:29:aa:41:f5:10:d8:e9:f6:d1:41:
e5:cd:b0:5d:11:d6:ea:45:58:e4:f3:9a:ee:32:57:
95:3c:cd:f2:d2:4c:58:49:55:f0:61:59:f9:bc:e3:
ed:34:af:f6:5c:b6:55:0d:cb:85:3d:65:94:f6:76:
e3:c9:a7:27:ef:d4:0b:17:48:ed:2f:b8:c3:c4:a3:
1e:fe:a8:df:79:4e:a2:13:61:02:81:00:44:96:85:
6d:51:e5:da:0b:da:e5:31:9f:fc:df:d5:12:84:07:
71:9b:bf:f0:4d:72:d9:49:43:f3:91:48:81:22:37:
1d:59:b7:c2:8d:45:ba:e2:41:3c:fc:1b:37:ab:c0:
1f:64:6e:05:b9:61:0e:0b:40:c2:d4:5c:df:c6:17:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:EA:A8:21:C1:82:D9:09:96:0C:47:9A:10:3F:55:6D:46:69:47
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f4:68:33:eb:31:19:bc:b2:20:af:18:29:f1:50:2c:f4:c1:
46:99:4a:6a:fc:a1:5a:c6:7b:91:52:a5:87:6a:59:66:14:7b:
0c:39:b8:b9:ec:77:26:65:89:0c:a2:f4:a7:19:6f:bf:a7:08:
3d:9f:1d:d9:16:49:5e:06:fc:fa:e4:9b:99:3a:8b:d1:57:9d:
39:79:cb:e5:6e:bd:94:5f:cc:22:25:94:90:53:a6:fa:17:f4:
9f:15:03:77:8b:6f:f0:ae:9b:b4:c4:a4:55:07:5a:0a:d5:42:
65:e2:7f:75:82:56:09:80:af:43:15:3a:8c:b3:0e:ca:f3:88:
ee:52:41:47:73:0d:bc:20:1f:08:df:da:23:68:12:9c:0b:f9:
3a:49:cd:f8:cd:d9:51:df:5a:45:74:10:41:26:67:8c:84:89:
34:61:01:f0:5b:ab:ae:f4:9e:94:65:b2:6c:c1:7d:fe:17:d5:
70:be:32:8c:a4:05:47:d1:86:b1:a9:78:c5:5d:c9:ab:90:62:
11:d0:ee:ba:7e:9b:41:f6:5f:9b:56:b5:b5:75:ca:1a:b7:f9:
d6:cf:50:c5:23:85:82:78:b1:dc:cb:f4:da:5c:b9:f9:63:84:
5e:b5:6f:ea:b8:46:06:0d:28:4f:15:85:53:e6:c7:a4:fe:49:
5b:80:aa:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5
OEYyNjJCOEMwHhcNMjUwMzI5MDI0ODMyWhcNMjUwNDA1MDI0ODMyWjAYMRYwFAYD
VQQDEw02N2U3NWY4MC1mNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv1sI4qOsoNpsnn0e8nhei1Eo+FeVMZndSt0gYVQ2lOMGE0E3DKRW9YeP/drj
6eIeq9ZAWByWcYTYZgRfgh6jp9HCM8ahjgkn8yxMpHDLmmx/32LIi6w5hCTSBI87
JRc/Djby30bTG3XL67C2fCmqQfUQ2On20UHlzbBdEdbqRVjk85ruMleVPM3y0kxY
SVXwYVn5vOPtNK/2XLZVDcuFPWWU9nbjyacn79QLF0jtL7jDxKMe/qjfeU6iE2EC
gQBEloVtUeXaC9rlMZ/839UShAdxm7/wTXLZSUPzkUiBIjcdWbfCjUW64kE8/Bs3
q8AfZG4FuWEOC0DC1FzfxhcR/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJod6qgh
wYLZCZYMR5oQP1VtRmlHMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw
RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot
R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCK9Ggz6zEZvLIgrxgp8VAs9MFGmUpq/KFaxnuRUqWHallmFHsMObi5
7HcmZYkMovSnGW+/pwg9nx3ZFkleBvz65JuZOovRV505ecvlbr2UX8wiJZSQU6b6
F/SfFQN3i2/wrpu0xKRVB1oK1UJl4n91glYJgK9DFTqMsw7K84juUkFHcw28IB8I
39ojaBKcC/k6Sc34zdlR31pFdBBBJmeMhIk0YQHwW6uu9J6UZbJswX3+F9VwvjKM
pAVH0YaxqXjFXcmrkGIR0O66fptB9l+bVrW1dcoat/nWz1DFI4WCeLHcy/TaXLn5
Y4RetW/quEYGDShPFYVT5sek/klbgKrU
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:23 2025 by rpki-client