Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft
File: ymSxcxGVIJPNTWDarxe2rKD3pRY.mft (raw, json)
Hash identifier: z4LosBJcp7Emim/sgOJzAROeNeF0sHARmLrI7mt3qVM=
Subject key identifier: DF:50:79:71:6B:7F:77:37:07:EF:22:AB:A6:F9:49:01:12:D4:B8:FE
Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16
Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft
Manifest number: 58
Signing time: Fri 31 Jan 2025 06:12:24 +0000
Manifest this update: Fri 31 Jan 2025 06:12:23 +0000
Manifest next update: Fri 07 Feb 2025 06:12:23 +0000
Files and hashes: 1: ymSxcxGVIJPNTWDarxe2rKD3pRY.crl (hash: uXSJHHDaz4qf3FnKXxI2PzURuuxgsZn32tYpFurJHuU=)
2: C384F0025BA011EFB7E79861C4F9AE02.roa (hash: HB8QMXYnImTcdy2zBeTOvUb91weeMYAQqjoTwrsvfrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516
Validity
Not Before: Jan 31 06:12:23 2025 GMT
Not After : Feb 7 06:12:23 2025 GMT
Subject: CN=679c69c7-1f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:a5:1d:f5:49:56:0a:92:bd:b1:4e:bb:7d:
79:ae:d5:4e:6a:17:56:ac:c7:a9:9d:05:5b:70:fb:
fe:20:19:58:36:d1:ad:22:5a:fc:10:be:3b:8c:da:
1e:d7:b3:73:fa:7e:0f:2c:5b:1d:02:d7:8a:b6:69:
df:97:2c:ed:2e:fa:a4:c5:3f:0a:6f:63:56:96:50:
6c:36:d2:54:c4:b4:d1:70:2d:db:cb:89:dc:55:7a:
2f:09:12:14:d8:a2:a1:30:c5:cb:08:1f:0c:76:89:
07:9a:1f:d5:9c:21:a2:0c:42:84:6b:e2:7d:75:bb:
e2:79:41:14:11:eb:4f:fc:c0:2b:b2:34:cc:c5:a7:
b1:72:48:c8:46:0a:5b:b8:c2:9f:01:b3:71:ad:a2:
29:e6:44:02:6d:d2:fd:2c:be:bc:51:0e:c3:67:d0:
55:34:36:b1:3e:5b:e4:cf:89:8b:a7:b1:29:e9:24:
f5:43:a6:d5:75:98:3a:8f:4a:21:20:19:80:2c:d6:
70:a4:ef:28:fb:e3:84:a7:6e:ac:3a:e2:5c:60:ba:
67:f2:14:6b:50:3e:d3:ef:b1:6b:49:a1:6d:92:24:
be:b3:15:fd:2d:50:a2:45:f4:6a:f1:94:5e:f0:1d:
7f:65:cd:d7:c0:b8:7b:df:5f:58:4d:12:1e:fa:56:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:50:79:71:6B:7F:77:37:07:EF:22:AB:A6:F9:49:01:12:D4:B8:FE
X509v3 Authority Key Identifier:
keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2e:0c:c5:72:a5:50:96:d4:77:a9:f3:be:96:53:f0:23:b1:
3c:a9:15:0d:63:bf:00:ee:89:70:e9:4a:d5:50:34:48:a4:90:
9c:71:0d:8e:8b:ef:16:62:46:d0:7f:62:6d:28:04:1a:7f:dc:
b5:38:b7:9c:63:6d:46:ce:74:ea:68:cf:d6:3a:52:ab:eb:94:
8e:ee:89:be:19:0e:bf:af:c1:69:fd:4a:42:c7:32:5a:c6:40:
aa:fe:03:47:dd:f1:77:8e:6b:fd:27:f4:d2:f9:76:33:04:23:
59:53:14:63:6e:7d:6f:e1:4e:df:a4:b7:ac:5e:3e:8d:ab:b3:
53:67:ff:58:2e:71:0f:b1:e0:da:d9:52:b1:1e:c9:73:ff:ab:
d0:80:33:32:0a:94:31:8f:30:ab:33:ae:4b:c2:98:74:21:68:
e9:4b:16:f5:79:d2:86:59:e6:f5:aa:67:35:ee:b7:e5:60:5d:
04:0f:71:90:f9:17:54:9e:40:88:05:42:57:14:d2:c4:df:a9:
b9:5c:0a:df:f1:40:d7:11:99:d3:e9:64:7e:33:6d:51:c1:44:
d2:94:60:e3:01:46:1b:e2:de:0c:e1:75:97:b0:15:33:08:aa:
ae:aa:a3:9c:dc:18:e0:2c:aa:51:e2:ed:79:fa:9d:eb:0d:8d:
02:13:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:10 2025 by rpki-client