Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json)
Hash identifier: SWt2EMh3/V/Kw3eF2+RppGIkf7FYSZnSctt4ZWLZlXk=
Subject key identifier: 44:B4:E3:F2:DD:3D:59:A0:B9:91:48:7F:82:A3:07:4A:C1:A2:2D:EA
Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0
Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
Certificate serial: 0BBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
Manifest number: 0BB4
Signing time: Fri 28 Mar 2025 19:03:49 +0000
Manifest this update: Fri 28 Mar 2025 19:03:49 +0000
Manifest next update: Fri 04 Apr 2025 19:03:49 +0000
Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: Tbzr3xDpsuXiyNUy0tAYSfCovVIs3cRgL+lY2brUwAA=)
2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fuEIOJZ2g7nFL90Iih/ZQree35PAM4VcWuWuu09soDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5533
Validity
Not Before: Mar 28 19:03:49 2025 GMT
Not After : Apr 4 19:03:49 2025 GMT
Subject: CN=67e6f295-ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:d7:67:60:bc:36:d7:87:a7:6b:87:92:02:
dd:8f:4d:fb:54:3d:96:d6:c2:1b:57:a4:0c:f9:d8:
00:23:23:d2:43:2c:bd:7c:35:84:82:08:09:51:9c:
fa:2c:57:0f:83:b2:da:82:7a:ab:ee:ca:83:49:2e:
7f:a2:af:c4:1b:55:ae:3b:28:26:7a:c7:70:02:fb:
8f:7a:f6:1a:eb:39:f9:29:da:fa:89:e4:f6:a3:f3:
8b:c1:d4:11:05:9f:af:7a:62:dc:17:bb:13:50:30:
6c:43:ec:0f:fb:d1:10:17:d8:3f:19:6e:92:b7:0c:
bb:43:17:3b:25:71:49:88:a7:2f:8f:4b:be:22:d4:
5e:7f:05:6e:70:3a:52:8a:62:95:5c:92:76:8c:0a:
07:58:c5:43:11:4e:0b:4c:a4:83:8f:e8:40:c5:43:
d3:f5:35:ce:54:e4:62:72:0f:a4:59:78:e2:54:05:
9b:09:d0:aa:dd:9e:13:65:2d:c3:7b:dc:ad:5c:8d:
c3:67:cf:4b:38:c7:32:cb:c9:a9:7d:2f:cf:51:19:
68:be:2a:b0:15:38:d2:42:29:e3:8e:fb:37:6c:ce:
7e:75:c4:40:ff:13:8f:05:f2:1a:74:a5:1b:34:91:
0c:21:7f:14:0a:d0:03:03:79:64:2e:60:03:b7:fc:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:E3:F2:DD:3D:59:A0:B9:91:48:7F:82:A3:07:4A:C1:A2:2D:EA
X509v3 Authority Key Identifier:
keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:92:30:64:d8:20:29:fc:6a:a6:24:2c:d8:c6:7d:40:e6:
30:7b:bf:dc:4b:69:b5:71:6f:4e:ce:59:ed:72:57:e1:d0:59:
c8:72:02:20:22:0c:ce:ea:87:95:6b:2d:f3:0b:52:2d:d0:f1:
fb:f7:f7:33:bc:b5:46:0c:be:51:14:a5:88:96:90:64:0d:3c:
97:0f:ef:e8:76:85:86:73:3d:56:91:6c:32:80:21:e3:64:9a:
11:ee:00:8b:54:67:e0:77:c1:54:8e:df:e3:7e:a2:24:4a:35:
0b:0c:4d:f5:18:8a:bc:d1:3f:40:cf:04:b6:23:83:f1:e2:e2:
62:88:eb:06:69:f3:be:8d:49:3a:d9:97:b6:76:7e:02:99:e8:
23:eb:80:a3:ce:f9:62:ce:59:53:e8:54:fc:a3:70:82:bf:c9:
15:66:c9:10:b6:5d:14:aa:fb:cf:65:54:bf:36:5f:e8:2c:16:
2d:6d:8f:81:89:18:e6:9e:7b:a2:41:e3:52:eb:40:79:7c:91:
49:ab:e1:f6:c3:ec:f0:cd:bd:e2:75:18:32:2e:ed:9f:71:2f:
97:9e:db:f4:61:1f:09:68:0b:76:04:05:f0:c6:d4:3f:73:b4:
0c:35:d7:80:2c:a4:ee:09:c8:5a:18:76:fa:02:39:55:96:38:
5a:ff:b3:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy
NzNFNkZFRTAwHhcNMjUwMzI4MTkwMzQ5WhcNMjUwNDA0MTkwMzQ5WjAYMRYwFAYD
VQQDEw02N2U2ZjI5NS1jZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2FjXZ2C8NteHp2uHkgLdj037VD2W1sIbV6QM+dgAIyPSQyy9fDWEgggJUZz6
LFcPg7Lagnqr7sqDSS5/oq/EG1WuOygmesdwAvuPevYa6zn5Kdr6ieT2o/OLwdQR
BZ+vemLcF7sTUDBsQ+wP+9EQF9g/GW6Stwy7Qxc7JXFJiKcvj0u+ItRefwVucDpS
imKVXJJ2jAoHWMVDEU4LTKSDj+hAxUPT9TXOVORicg+kWXjiVAWbCdCq3Z4TZS3D
e9ytXI3DZ89LOMcyy8mpfS/PURloviqwFTjSQinjjvs3bM5+dcRA/xOPBfIadKUb
NJEMIX8UCtADA3lkLmADt/zP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES04/Ld
PVmguZFIf4KjB0rBoi3qMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB
NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5
UkZmMUxnVGhIeVVuUG1fdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA3D5IwZNggKfxqpiQs2MZ9QOYwe7/cS2m1cW9Ozlntclfh0FnIcgIg
IgzO6oeVay3zC1It0PH79/czvLVGDL5RFKWIlpBkDTyXD+/odoWGcz1WkWwygCHj
ZJoR7gCLVGfgd8FUjt/jfqIkSjULDE31GIq80T9AzwS2I4Px4uJiiOsGafO+jUk6
2Ze2dn4Cmegj64CjzvlizllT6FT8o3CCv8kVZskQtl0UqvvPZVS/Nl/oLBYtbY+B
iRjmnnuiQeNS60B5fJFJq+H2w+zwzb3idRgyLu2fcS+Xntv0YR8JaAt2BAXwxtQ/
c7QMNdeALKTuCchaGHb6AjlVljha/7N7
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:26 2025 by rpki-client