Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier: GhijBMTa5WXZdwETHyTulZJB8E6kGZtBBZk9w+pv34k=
Subject key identifier: AA:8E:F1:84:51:56:46:81:F7:ED:45:A8:6F:52:A6:90:EC:76:E8:7A
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number: 15
Signing time: Sat 29 Mar 2025 07:21:58 +0000
Manifest this update: Sat 29 Mar 2025 07:21:58 +0000
Manifest next update: Sat 05 Apr 2025 07:21:58 +0000
Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: /PlZTXlPP4e3oW6N6gsbcYgmFbXdznsset5xdmDQ+Uw=)
2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37
Validity
Not Before: Mar 29 07:21:58 2025 GMT
Not After : Apr 5 07:21:58 2025 GMT
Subject: CN=67e79f96-c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:13:75:c3:39:1a:15:98:29:f2:4e:e7:30:
f8:cd:a5:e8:6d:70:76:9f:f2:54:f4:1f:65:85:66:
25:ef:13:dc:39:ae:51:47:45:94:4c:d2:ae:7f:17:
e1:b9:b1:24:7a:6b:d4:db:0d:9b:a2:47:99:77:4e:
d7:97:d9:b9:21:d1:d8:93:dd:3c:a5:01:f4:fa:51:
2d:c8:42:a9:36:e9:71:3b:cd:8f:91:c7:ba:80:7d:
b4:ae:a8:8d:1e:e9:01:1c:ff:0e:c7:cd:5f:b1:56:
e4:ad:29:27:34:29:f2:02:e9:c1:08:e3:fe:56:ca:
4c:83:17:b9:40:6c:7f:4e:67:e2:35:86:cb:90:ec:
66:30:f9:ed:13:49:3a:c0:dc:4f:ca:2f:c5:92:7f:
9c:20:a7:97:b5:b9:12:43:c1:2b:4d:82:9e:dd:0d:
37:b1:65:20:e6:72:44:ca:e2:1d:5f:03:4c:2d:43:
67:d9:47:ca:07:e3:68:85:96:5e:27:13:b2:b0:40:
93:3a:b9:4a:e5:8f:4c:ef:07:f0:96:f1:f0:c1:82:
9f:d8:cd:68:4b:54:3d:15:c6:9d:35:ac:ed:cd:a4:
6e:bb:dd:97:54:e2:99:e4:e4:a4:11:9c:5c:fb:04:
df:07:d9:2a:71:e5:d8:9c:fc:00:0b:ad:3a:96:9a:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:F1:84:51:56:46:81:F7:ED:45:A8:6F:52:A6:90:EC:76:E8:7A
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:0a:21:a5:04:fe:1f:96:dc:c5:9e:76:27:e4:f9:79:b0:
2c:0c:a8:53:46:3c:fa:a5:0e:46:27:4a:24:22:e8:4b:59:65:
c8:3e:5f:1f:e6:18:7c:1c:6a:51:b7:67:dd:29:44:12:39:0f:
f9:20:13:38:fa:d8:5f:22:0b:49:32:ab:3f:ac:30:3b:7e:8e:
c1:34:7a:89:d4:79:9b:a2:ed:86:fc:a9:22:de:da:9f:0c:11:
70:6f:04:20:e3:cc:21:6b:af:1d:77:4f:99:1f:8c:7d:1e:b2:
82:d5:6d:5b:8b:37:c7:c8:3b:81:8d:91:33:25:f5:db:aa:fb:
af:1d:9c:3c:c3:bc:4d:5e:3a:55:83:2b:5d:02:0e:f0:2e:17:
c5:47:a8:e3:ad:b2:ec:ef:9f:b3:e5:0a:ed:c3:c6:61:a8:55:
78:a2:4c:79:1c:76:f6:52:6f:6c:fe:10:4c:ce:d9:51:52:9f:
d2:75:8a:20:8f:57:1d:c1:bd:4d:fe:f2:4b:40:40:88:24:19:
db:14:99:f9:ca:2d:01:c6:90:8d:1c:6e:4b:4a:b4:16:74:2f:
19:50:32:2f:e1:3a:5c:b9:ca:dc:7c:6f:17:21:48:56:b5:89:
d2:40:04:b2:d0:22:f2:10:bd:75:db:b5:47:5c:ab:48:0e:ef:
08:54:8e:5c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RUIzNzExMC8GA1UEBRMoNEU2OEIwNDhERDNEREJBNUY0NzhGMUZEMjg4QTg2MThC
QTlGQUJBQTAeFw0yNTAzMjkwNzIxNThaFw0yNTA0MDUwNzIxNThaMBgxFjAUBgNV
BAMTDTY3ZTc5Zjk2LWM4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6yhN1wzkaFZgp8k7nMPjNpehtcHaf8lT0H2WFZiXvE9w5rlFHRZRM0q5/F+G5
sSR6a9TbDZuiR5l3TteX2bkh0diT3TylAfT6US3IQqk26XE7zY+Rx7qAfbSuqI0e
6QEc/w7HzV+xVuStKSc0KfIC6cEI4/5WykyDF7lAbH9OZ+I1hsuQ7GYw+e0TSTrA
3E/KL8WSf5wgp5e1uRJDwStNgp7dDTexZSDmckTK4h1fA0wtQ2fZR8oH42iFll4n
E7KwQJM6uUrlj0zvB/CW8fDBgp/YzWhLVD0Vxp01rO3NpG673ZdU4pnk5KQRnFz7
BN8H2Spx5dic/AALrTqWmoUpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqo7xhFFW
RoH37UWob1KmkOx26HowHwYDVR0jBBgwFoAUTmiwSN0926X0ePH9KIqGGLqfq6ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzNDQjc3OUUwRjVG
NzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVG1pd1NOMDkyNlgwZVBIOUtJcUdHTHFmcTZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF
QjM3LzNDQjc3OUUwRjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL1RtaXdTTjA5MjZY
MGVQSDlLSXFHR0xxZnE2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIocCiGlBP4fltzFnnYn5Pl5sCwMqFNGPPqlDkYnSiQi6EtZZcg+Xx/m
GHwcalG3Z90pRBI5D/kgEzj62F8iC0kyqz+sMDt+jsE0eonUeZui7Yb8qSLe2p8M
EXBvBCDjzCFrrx13T5kfjH0esoLVbVuLN8fIO4GNkTMl9duq+68dnDzDvE1eOlWD
K10CDvAuF8VHqOOtsuzvn7PlCu3DxmGoVXiiTHkcdvZSb2z+EEzO2VFSn9J1iiCP
Vx3BvU3+8ktAQIgkGdsUmfnKLQHGkI0cbktKtBZ0LxlQMi/hOly5ytx8bxchSFa1
idJABLLQIvIQvXXbtUdcq0gO7whUjlw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:13 2025 by rpki-client