Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json)
Hash identifier: tlOsJZff6lw+/eR8l2QW+f5c8vCCGnnzQCyS+L/3jx4=
Subject key identifier: 70:1D:E0:2A:C6:0C:30:D1:07:7A:7C:85:D0:41:CD:19:14:16:D8:1C
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial: 27CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
Manifest number: 27B9
Signing time: Fri 28 Mar 2025 15:42:34 +0000
Manifest this update: Fri 28 Mar 2025 15:42:34 +0000
Manifest next update: Fri 04 Apr 2025 15:42:34 +0000
Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: +DmkZECvTllxbNoe+wjZMQmyrIr+twypl2YIkcSszrA=)
2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10191 (0x27cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B25
Validity
Not Before: Mar 28 15:42:34 2025 GMT
Not After : Apr 4 15:42:34 2025 GMT
Subject: CN=67e6c36a-9436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:98:ea:c6:96:a9:db:63:86:a2:7c:41:6e:
77:9f:40:7f:9f:e6:0f:a4:d0:3b:b6:94:3d:82:a7:
63:10:6d:8d:68:cf:22:f3:b4:c1:06:63:55:15:e2:
9b:06:bc:85:18:49:e2:7e:85:ac:ca:88:2c:61:d0:
17:18:0b:65:b8:ba:4c:6b:cf:b2:72:4c:e1:93:49:
ce:72:44:6f:42:3e:67:81:d0:a7:f9:d7:b4:c5:1e:
5c:dc:df:15:ce:58:3c:47:f8:24:1b:40:5e:45:4a:
82:e8:c5:9b:07:7a:83:f1:ca:15:31:a5:2a:65:79:
1d:87:ce:aa:24:9a:74:d3:0f:da:4c:72:43:05:dc:
81:a3:46:ab:85:b3:89:20:d7:7c:9f:18:33:91:90:
95:42:8d:bc:97:94:89:bc:6d:d8:ce:42:0f:84:4a:
96:cc:15:78:d9:1e:f6:79:18:ff:ab:11:ce:a0:21:
bf:12:08:80:bc:a6:49:fa:dd:d0:b2:c9:7b:bb:12:
7b:ed:d0:32:f2:9e:93:5f:04:c4:ab:fb:6f:85:af:
f6:56:b9:cd:f9:bc:52:52:47:cc:68:a1:05:5f:43:
10:69:a7:6b:c0:e5:2e:9d:4f:68:89:86:9c:a2:9a:
77:1c:92:24:eb:22:eb:60:c3:af:c7:52:f2:78:be:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:E0:2A:C6:0C:30:D1:07:7A:7C:85:D0:41:CD:19:14:16:D8:1C
X509v3 Authority Key Identifier:
keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:c7:64:cf:6a:6f:48:a5:02:bb:06:80:67:b9:c5:1d:b3:
ae:fd:06:c3:39:7d:53:0c:9a:6c:8e:81:ac:fa:f4:b8:bf:13:
5e:9a:c4:de:2e:da:08:6b:22:89:f8:3a:de:f1:bf:59:2d:5f:
a6:32:0a:a9:af:98:54:27:86:d9:3b:27:12:35:c4:95:cf:d7:
b2:36:85:27:4d:57:e6:e2:1b:7f:9a:ad:5b:5e:21:23:ac:61:
14:82:94:bf:bd:c0:03:15:49:94:3b:13:c6:67:01:a3:40:bd:
3f:bf:a9:af:b4:41:77:5a:fd:35:39:80:8d:eb:32:67:67:c9:
80:f0:f1:e0:01:71:bd:a2:fc:17:2d:0f:71:d1:7e:46:15:41:
b4:4a:67:19:68:8a:de:18:90:91:c9:1a:4f:ab:41:62:1e:42:
2c:9e:ba:54:8b:e9:56:69:09:f2:2f:81:0b:f9:95:ea:87:2d:
f8:d0:47:ac:e4:d6:e9:f0:28:ae:a9:02:11:08:89:fe:4c:92:
7f:3f:1f:f5:80:92:d2:b4:bc:11:4e:d9:72:99:44:79:d8:db:
fe:70:43:31:32:28:f2:7e:4e:1a:f9:c6:b4:22:ec:b5:4e:a4:
21:1a:96:a0:2a:bd:fb:f6:84:9c:d7:b2:0b:45:7b:af:5e:fb:
96:98:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:11:01 2025 by rpki-client