Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json)
Hash identifier: lDxtXLHllhanoKrsyhcTDQrk/TozY3Y7L9QDFQC2F1g=
Subject key identifier: 9C:8C:2F:CB:EC:75:AA:C6:24:45:99:BC:09:9A:DB:A7:67:37:88:2B
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
Manifest number: 7C
Signing time: Sat 29 Mar 2025 06:07:58 +0000
Manifest this update: Sat 29 Mar 2025 06:07:57 +0000
Manifest next update: Sat 05 Apr 2025 06:07:57 +0000
Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: ybe7h79jxj/VjKouK1T7Qk4HlMNHhkBT5rIo+DNh94w=)
2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: yKRhd9URAtdD8ZNuj/dQF3lpNBMNfFXTujt18TvU+XY=)
3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: SDxl8l5CQA8d0jF8r7Sa6q9ALS3hHi/3Jt4li1lWZ7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F372C
Validity
Not Before: Mar 29 06:07:57 2025 GMT
Not After : Apr 5 06:07:57 2025 GMT
Subject: CN=67e78e3d-962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:9d:ab:ab:ec:46:08:76:40:08:07:f4:eb:
28:23:5e:e4:c2:e7:15:f1:f5:df:50:f7:fe:8d:f0:
8f:e6:33:3e:7f:e8:93:60:cc:f3:14:b7:84:20:ca:
b1:60:f9:24:c5:0a:e7:bb:2b:98:c5:97:28:fa:f1:
e4:30:ae:69:71:55:33:00:30:6e:ca:2d:ee:9e:82:
d7:7d:c9:e6:09:03:96:60:df:c6:0a:3d:01:c3:b0:
a3:d6:b0:b0:ba:85:ea:78:9f:4e:3c:01:1b:8b:b3:
93:7b:a7:31:3e:8f:af:51:40:3f:4b:09:ee:97:78:
77:bf:92:59:48:12:c0:5f:0d:4e:fb:bd:8d:a0:7a:
32:69:64:e9:33:8d:5e:6e:4f:82:a5:2e:4a:1f:5f:
84:6b:05:4d:5a:4e:26:39:bf:55:8b:b9:83:5b:33:
bd:ae:f1:89:ff:3a:a5:98:d9:d8:6d:0c:be:a2:91:
b2:fe:6e:2a:12:29:08:3f:21:ee:79:13:40:9d:99:
c1:e1:79:f0:74:cd:fe:50:65:6d:bb:20:e2:b8:40:
46:42:b8:8d:fc:a7:e1:1d:cb:8b:f2:40:60:46:c0:
7e:29:51:48:8b:e1:79:ca:3f:d2:48:72:3e:5e:09:
26:1c:b2:66:4c:a0:65:ae:40:d6:3b:34:d4:a0:56:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:2F:CB:EC:75:AA:C6:24:45:99:BC:09:9A:DB:A7:67:37:88:2B
X509v3 Authority Key Identifier:
keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:66:7e:eb:2b:73:41:5a:46:aa:3f:3a:96:59:03:c2:69:b2:
99:75:19:7b:91:f7:73:72:36:e2:43:a1:10:6e:a8:e5:e4:5f:
37:5d:bd:70:f2:75:a1:29:3e:b7:a7:61:eb:e7:8c:81:1a:59:
82:b9:1a:c4:f0:db:e3:13:0d:70:42:73:9e:5a:22:01:89:ad:
91:8d:ec:31:a3:20:ae:c2:de:84:29:4c:7b:f6:c7:59:2a:69:
27:a8:3f:1c:ff:68:49:e7:5d:d1:c8:8b:fb:a5:44:fc:50:4c:
d2:0b:e4:d5:6e:67:17:a6:3f:8e:8f:7c:12:0b:11:6e:44:1a:
db:ba:5a:b7:0f:c3:c6:c9:b9:01:a0:01:92:c9:3c:08:f2:b7:
e6:ee:fd:d7:06:2e:86:37:b6:4d:f6:5b:11:af:99:42:09:64:
f9:3e:cd:e9:29:f6:ea:c9:26:41:6f:b8:63:c6:e7:44:7a:62:
1e:66:62:30:d6:85:37:3a:53:17:26:94:90:74:eb:fa:0b:3b:
3d:8a:ee:ca:2e:57:63:93:ba:af:a4:d0:f5:67:b5:fb:e4:cd:
2f:2e:22:ab:88:15:37:a5:91:e3:1a:6e:f1:7e:38:b2:95:88:
ba:5c:64:d9:de:81:bf:e3:b9:a2:70:24:a8:f6:a2:35:4f:02:
d0:41:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:37 2025 by rpki-client