Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier: eMEAxAf4p83Bn1YIIfFAiZAZRvhguvI85l7IKGRaOCg=
Subject key identifier: EA:23:07:D0:AF:38:34:A2:C7:A4:E9:66:D3:1F:12:CE:36:E3:6E:64
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial: 085B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number: 0853
Signing time: Fri 28 Mar 2025 20:59:27 +0000
Manifest this update: Fri 28 Mar 2025 20:59:27 +0000
Manifest next update: Fri 04 Apr 2025 20:59:27 +0000
Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: WIPmIsEp4hiY/nJR1shzP/0eyb9/AvkIll1KwPhmGNs=)
2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Yvl58W31jTaXrFpKwLiylkuL3NEb2f8QrSD0rbbSX2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7991
Validity
Not Before: Mar 28 20:59:27 2025 GMT
Not After : Apr 4 20:59:27 2025 GMT
Subject: CN=67e70daf-42c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:01:6a:53:3f:79:fe:50:25:15:4f:15:67:
3d:e4:5c:2b:e6:0c:e0:ae:88:c3:15:01:0b:cb:6f:
86:76:92:6e:a6:76:f2:c3:55:3a:c5:90:88:73:82:
9f:d2:98:43:7b:e9:d6:fa:bd:5a:8b:a1:98:57:af:
c8:ad:a9:82:b4:5c:33:ca:e7:7c:50:81:6a:fd:4f:
ba:27:0e:f5:3c:d2:c8:b5:a3:a0:a3:d6:44:14:0f:
ad:31:f0:08:ea:33:ed:e6:6a:6a:69:d4:59:c6:b5:
fb:ae:27:e2:e2:4a:97:b4:7e:c6:39:08:6b:74:6a:
e6:4b:fe:cc:b9:48:ac:01:8e:8a:2b:7c:6f:4b:62:
17:d2:0b:60:ba:13:bc:bf:21:ab:cd:e3:b0:ec:a2:
0f:22:69:ad:8c:b6:a6:30:f2:d2:49:fb:1f:18:b6:
c2:41:06:f1:77:b1:ad:0e:41:be:bc:5c:b3:5a:29:
79:1c:7b:d8:16:f6:70:e0:f1:9d:50:01:4c:14:f6:
e5:83:63:f6:a0:97:f8:f4:fc:ab:8e:b3:3e:98:94:
88:97:c7:4a:0a:9c:7f:f8:59:2f:0d:51:81:4f:ee:
69:6b:70:41:55:2c:df:35:bf:45:74:d1:3e:ab:fc:
2f:18:95:ff:23:fe:28:ad:69:a7:2d:5d:f5:58:5b:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:07:D0:AF:38:34:A2:C7:A4:E9:66:D3:1F:12:CE:36:E3:6E:64
X509v3 Authority Key Identifier:
keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:ea:32:cf:9e:13:7d:56:03:c6:ad:22:b2:b0:f9:42:2e:e1:
1d:3e:ff:b9:3f:22:c5:1e:d4:d8:0f:38:a2:08:cd:5f:d7:d3:
70:a8:3e:47:17:49:41:a7:7a:72:55:fc:60:50:fd:cc:29:24:
9f:ce:3a:5c:3c:75:db:69:d2:3d:4f:e2:02:e5:12:3e:b5:05:
c8:fb:47:b4:d2:bf:6d:71:81:b0:39:ef:00:ad:44:14:9b:81:
bc:37:46:e3:08:37:34:fd:08:b7:b5:a8:1c:2a:1d:13:c7:c9:
ad:7a:40:02:e8:65:62:33:40:ca:25:be:03:60:bd:07:5f:93:
35:cd:90:27:76:d3:7c:a6:9c:37:c1:94:b4:67:67:3a:d4:c5:
12:03:33:5f:d3:21:9d:29:8a:92:aa:45:9b:5d:d5:e0:79:e9:
ba:e9:7d:96:c3:b2:d5:b5:be:fc:5e:76:3a:05:ac:cc:ef:69:
26:33:0f:31:c5:37:6b:f2:0c:6b:19:dd:39:08:ae:52:b6:da:
8f:fe:60:a9:be:9b:50:5d:ee:f3:f0:e5:8c:b7:9e:fd:40:8d:
ad:c6:8a:5f:0e:98:e1:f3:7a:66:8e:00:64:15:4e:b8:b9:1c:
0c:23:14:05:29:a4:53:7d:88:7e:58:77:0f:ce:08:15:91:ab:
c3:3a:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:40:40 2025 by rpki-client