Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier: aGWyoHEZ7dkz9B37/rE1Lzv44T0mU4YDHWL7w8iY+kQ=
Subject key identifier: FC:A0:F7:C9:D6:BE:07:7C:01:5C:59:68:56:9D:69:85:8B:A3:4E:12
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number: 0154
Signing time: Sat 29 Mar 2025 03:42:24 +0000
Manifest this update: Sat 29 Mar 2025 03:42:23 +0000
Manifest next update: Sat 05 Apr 2025 03:42:23 +0000
Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: vcmjUXf6obbZ3UV0eygB2MXuJUIWO9Ag2jd2TE7M3BY=)
2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: LOa+P/ojEAQa7LHXQVKaskvdIoCLS3b4cZFOn+kB2uw=)
3: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: shT5jO7CGMGG+hH7ceO9PXeIRAabJhok08ZuY7EKsTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D200F
Validity
Not Before: Mar 29 03:42:23 2025 GMT
Not After : Apr 5 03:42:23 2025 GMT
Subject: CN=67e76c20-4dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:c1:55:d5:4e:87:97:30:af:0f:0f:e5:be:
52:91:c8:3f:d0:22:75:c5:51:da:4f:60:6a:86:43:
1c:82:1b:1a:ab:26:c6:47:85:58:e1:b5:e9:58:78:
38:a9:ba:27:ec:00:0c:43:5c:1c:29:a1:d0:74:6b:
ff:34:68:12:6f:af:2e:89:a5:69:82:42:5d:b0:af:
92:31:86:2c:83:70:76:1e:6f:b1:28:f0:78:79:d2:
43:bb:f5:31:3e:b3:3e:32:ad:f0:6c:19:03:95:ed:
89:22:69:d9:62:da:32:14:25:ab:33:2d:3b:b1:4d:
46:6c:1a:e1:4e:a0:ca:d6:88:96:a2:52:68:1e:9e:
da:3f:0e:1a:46:ae:1a:56:a7:d1:4e:b9:cd:49:79:
03:ec:86:3c:04:ff:5c:d5:20:ed:57:9f:81:d4:52:
14:37:ed:51:2d:ad:bf:27:5f:f6:b5:0e:c3:e4:99:
4c:0b:08:91:e6:53:1c:5c:e9:22:04:1a:21:cc:28:
9c:f2:fd:99:ec:bd:b7:55:5f:0a:06:2a:f8:4f:c7:
38:20:84:b7:6f:c7:0b:06:b6:85:4d:55:a0:13:9d:
02:3f:5c:e4:1a:da:de:11:8b:86:7f:13:bb:83:b0:
2b:06:42:19:1e:cc:5d:36:49:fa:0d:a6:a4:30:74:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:F7:C9:D6:BE:07:7C:01:5C:59:68:56:9D:69:85:8B:A3:4E:12
X509v3 Authority Key Identifier:
keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0c:d8:05:72:ba:0e:9d:a0:64:98:94:8f:f6:ff:e0:d2:08:
51:6b:8a:be:c9:ab:bf:0a:fb:c8:4e:6e:eb:b3:40:29:a0:91:
9a:5d:85:3d:cb:32:78:1a:41:ed:a3:40:0a:0d:91:a9:11:77:
2f:4a:be:37:dd:87:a3:e8:b4:63:c7:f8:ed:c0:74:b1:0e:5e:
8e:59:b5:b1:07:f5:58:66:e1:0f:0b:ef:ce:63:15:c0:9d:8c:
f3:df:a9:7b:e7:68:92:21:b0:46:31:c1:1b:12:e3:60:d2:2a:
18:91:dc:f9:4c:ae:aa:25:0b:e5:9e:15:b2:91:93:a9:98:cf:
3e:fb:04:2a:67:af:d9:05:b0:67:a8:4b:fd:e0:71:03:07:fe:
56:97:b3:c6:81:4d:69:cf:76:50:61:53:16:ff:04:55:b0:e0:
88:44:58:56:14:ee:6c:fb:47:99:6b:af:81:ef:14:8c:d1:d9:
e2:d8:c8:a4:48:2d:e1:0d:7e:17:80:87:d0:95:80:74:8c:3a:
05:f3:f6:da:74:08:bf:85:40:7f:2a:57:35:e1:bf:3f:c8:fd:
72:df:c1:d3:df:9d:bd:73:8b:1b:21:2c:b2:a6:a7:11:7d:e3:
e3:1d:cf:88:a3:e2:41:f3:f9:c8:fc:6f:50:10:b2:2b:c1:0c:
dc:a0:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:25:17 2025 by rpki-client