Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json)
Hash identifier: FB3tUy/ffb4ll4ikwiW6YSZQebWZ50/amJdk95QQ7fI=
Subject key identifier: 2C:30:55:3E:6D:09:8B:59:12:DB:ED:37:B5:B9:BE:59:6F:5B:FF:06
Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0
Certificate serial: 01C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
Manifest number: 01BE
Signing time: Sat 29 Mar 2025 02:38:22 +0000
Manifest this update: Sat 29 Mar 2025 02:38:21 +0000
Manifest next update: Sat 05 Apr 2025 02:38:21 +0000
Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: Y4W6EV6tUXTS2gSC6slYD9qtQkVrzdEDGHhzAlIwPr0=)
2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: +3v4STyxr/zeU0RYF53X4MGXWGvAcT5sIBZD/HJJRoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFA83
Validity
Not Before: Mar 29 02:38:21 2025 GMT
Not After : Apr 5 02:38:21 2025 GMT
Subject: CN=67e75d1d-bcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:d3:cc:c2:a8:65:af:a0:f7:f0:cd:7d:11:
35:01:dd:58:1c:62:3a:00:d3:81:40:99:bb:8c:ed:
99:e1:06:08:c5:38:78:e3:c3:28:0d:60:05:f8:f9:
72:d9:cf:d6:06:3e:42:06:f8:78:c8:1e:90:33:73:
71:7d:52:33:c9:61:3a:23:b2:15:0e:43:5c:48:c7:
75:9b:1a:32:dd:b5:da:51:93:d0:19:b5:1f:c2:be:
61:b0:82:b8:ac:0e:0a:fa:89:84:5e:a0:69:31:8c:
c8:c6:47:fb:ef:f1:d0:9e:0f:ad:ca:41:a4:8c:ca:
9a:46:33:bc:ec:78:af:32:0c:67:60:92:86:db:61:
96:05:01:46:5e:10:ce:66:94:43:43:af:35:f5:34:
e3:16:1e:db:10:5a:b0:97:17:e6:06:c5:df:d2:8e:
e1:05:bc:c6:14:e5:00:f3:26:7b:29:e2:27:80:57:
74:83:43:e7:26:f5:38:dd:34:36:38:e3:d2:3d:a9:
84:14:d2:a4:05:31:5c:59:2a:95:4e:59:eb:0f:2c:
a9:bc:2e:57:83:be:7b:08:8b:cb:fa:5b:66:39:12:
31:fb:d5:f8:df:70:b0:9c:04:83:cc:4e:c9:d5:77:
e2:e1:16:d1:97:8a:68:1c:b6:f3:68:cb:57:15:00:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:30:55:3E:6D:09:8B:59:12:DB:ED:37:B5:B9:BE:59:6F:5B:FF:06
X509v3 Authority Key Identifier:
keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3a:d2:8d:d8:1f:97:9b:6d:17:6c:0a:1a:b4:27:f2:5c:41:
0b:45:16:01:ae:75:02:85:52:f4:0d:7f:5f:d9:60:31:e9:af:
f1:01:42:3f:b7:d0:a6:34:da:3f:07:79:cb:6c:c7:fe:7e:09:
58:25:f1:8c:4a:68:6a:74:3e:06:1c:35:aa:32:41:3c:a2:f4:
87:fe:33:3c:29:b1:b8:4b:d0:bd:aa:dd:74:0d:8d:65:6b:c2:
f5:12:b3:14:f0:ae:78:9b:4a:98:d6:98:f9:9a:d9:e4:a1:12:
08:67:35:78:30:1b:b4:a7:eb:9f:97:3d:7f:ff:0e:cf:94:d2:
c4:47:3d:d4:04:85:47:f9:08:b7:42:bd:bd:67:3f:fe:1b:01:
d2:db:89:16:eb:09:5b:94:1a:ba:29:ff:54:91:23:00:31:f7:
4f:15:43:b0:76:d6:a3:ea:23:37:1f:0e:dc:53:bc:42:e9:e6:
ba:04:f4:d1:bf:73:36:dd:e3:a1:53:b8:d6:ac:57:e6:3b:62:
52:58:62:1a:ca:da:ac:69:5d:b7:3b:b6:f7:8a:d2:f5:0c:fc:
f6:85:09:78:1a:27:d8:d8:1f:d5:11:a8:af:a2:89:58:27:26:
d4:99:02:2f:63:13:67:20:9c:c2:62:a7:b3:6d:c4:f0:ee:0d:
6f:53:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:33 2025 by rpki-client