Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json)
Hash identifier: 981GVGd0pZrbPR8DNpacXI4mJk3cAvn6WkndiycEWgU=
Subject key identifier: F6:E0:9B:A4:89:7F:76:02:0E:9C:07:B4:99:C5:80:A1:D7:CE:E0:3F
Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
Manifest number: 73
Signing time: Sat 29 Mar 2025 06:06:44 +0000
Manifest this update: Sat 29 Mar 2025 06:06:44 +0000
Manifest next update: Sat 05 Apr 2025 06:06:44 +0000
Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: hoqq6wYq7c0PSbneCzlV6yk6GXWDH3pi5BXG2U/2uHI=)
2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: jmXb0sPHquklWucQNPULW9k7ur2PuqaFZnebmPVFmaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8F9B
Validity
Not Before: Mar 29 06:06:44 2025 GMT
Not After : Apr 5 06:06:44 2025 GMT
Subject: CN=67e78df4-dd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:dd:b5:41:33:65:51:e2:5a:79:05:26:ed:
9d:93:e5:8e:9b:4a:f4:1e:3b:e3:d3:db:86:45:ab:
bb:c6:30:13:62:7d:f0:37:a1:9e:e1:3b:7c:ba:1a:
9e:b5:c4:8a:ce:9e:19:ba:54:02:a5:12:23:05:03:
5d:4b:c9:01:13:6c:c7:7a:ba:1d:67:8c:ca:21:bd:
d8:6c:2f:78:7f:5c:38:70:9d:76:2e:af:54:94:d8:
a6:c3:24:6b:cd:a0:90:b0:7d:15:46:2d:c1:b9:66:
70:71:85:ae:fb:69:70:d5:fd:60:0d:45:e0:6f:b0:
a6:6e:e3:a6:af:3f:d4:0d:0d:16:0f:f5:3a:b4:50:
3c:b3:c5:d8:90:ff:64:f0:33:b1:64:86:50:ea:78:
e7:08:ca:97:5f:a9:24:05:29:91:30:05:48:e3:0f:
47:cd:4c:46:15:53:0b:1e:14:f6:1d:b5:91:c0:f3:
7f:da:d0:7b:d7:9d:de:73:43:a5:90:b1:61:50:85:
e3:8f:e4:cf:ef:bf:66:ed:ac:38:8c:2e:33:6c:57:
15:a0:1c:e5:f1:26:0c:c4:cf:b9:44:e8:80:55:04:
98:db:7f:78:01:e5:c4:80:b0:71:d3:02:0b:52:04:
c3:78:55:5a:c0:1c:97:c6:8f:11:61:88:67:3e:db:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:9B:A4:89:7F:76:02:0E:9C:07:B4:99:C5:80:A1:D7:CE:E0:3F
X509v3 Authority Key Identifier:
keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:f3:35:04:41:b5:40:82:27:c3:76:08:20:d8:e4:3e:e5:
09:05:03:5c:97:68:e0:ae:65:3f:d0:a6:f3:73:eb:28:9c:37:
72:c4:c8:df:c2:28:ae:4b:32:57:73:69:1e:ee:94:cd:c1:11:
13:61:83:5f:d4:7b:de:39:a4:1b:56:6d:92:c8:15:59:a2:bb:
d8:2d:71:57:1c:1a:a3:ec:b2:d9:8c:76:b9:cb:42:a3:b5:d8:
8b:7b:2d:37:5d:64:00:50:b3:cf:0d:2c:89:ee:04:94:d6:00:
ba:d7:d3:a7:61:76:73:f2:7a:04:2b:6e:2f:e1:16:52:48:10:
c3:8b:30:24:ce:41:26:ad:e0:49:57:0a:fc:b4:0c:33:7a:82:
6e:32:5e:4c:f5:25:06:a0:ac:b5:f4:cd:86:9f:cc:58:40:88:
c6:2c:15:09:2c:9e:0b:7b:79:67:18:c0:63:1e:2c:1a:da:fa:
e3:25:d1:a5:64:6c:77:55:78:8e:46:1e:84:81:b4:32:2c:3e:
46:29:f4:fa:4e:59:c8:5b:d3:ea:ec:3a:03:da:f6:75:25:cb:
61:8f:53:82:98:a9:3e:3b:9c:16:06:5d:24:28:51:c6:e7:3a:
3c:ec:89:35:a6:70:8f:e9:75:22:9f:8d:04:2b:13:a4:a5:e4:
66:93:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:18:26 2025 by rpki-client