Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
File: yUSBytAO-x3qepOcvimo9F8l4gs.mft (raw, json)
Hash identifier: yZbpiKPxejPEPCpwzA3W2YZhB7gt2UMAnSEiUqClGyw=
Subject key identifier: 44:8D:47:AD:A7:83:7B:90:38:67:92:01:25:CA:90:D7:C1:8A:FE:07
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Certificate issuer: /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
Manifest number: 01B7
Signing time: Fri 31 Jan 2025 02:21:33 +0000
Manifest this update: Fri 31 Jan 2025 02:21:32 +0000
Manifest next update: Fri 07 Feb 2025 02:21:32 +0000
Files and hashes: 1: yUSBytAO-x3qepOcvimo9F8l4gs.crl (hash: 9/LHRLxDO+HePgSdviRr65ZYiNr+CoJFgC02vZqNBhU=)
2: 03D8DC4A40F011EDAD789E3AC4F9AE02.roa (hash: t7XCEjkxXsWQ/Dxk256ftxVIrolRXrZfUAZmnQPH6Io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Validity
Not Before: Jan 31 02:21:32 2025 GMT
Not After : Feb 7 02:21:32 2025 GMT
Subject: CN=679c33ad-e18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:55:ab:d3:8d:44:ee:e3:bb:6c:4a:4b:13:
37:6e:d8:f6:6c:b3:a5:3b:68:17:74:18:74:d0:5e:
ed:31:8c:68:10:24:23:06:c3:3f:de:0c:e8:e9:74:
9f:89:27:b7:5a:f0:49:b6:ff:eb:57:85:7a:e1:a1:
05:23:11:45:8a:69:3f:b5:a4:f2:6e:44:48:f2:7b:
e9:18:22:7f:48:b2:91:56:29:c3:0d:aa:77:e7:53:
f1:a8:c1:0e:ef:d7:61:7a:f8:d0:02:ac:e6:6d:92:
47:09:a6:90:81:66:01:a3:46:db:74:ee:16:d7:a3:
7d:e7:9d:49:67:2d:3b:ee:ee:75:56:b4:26:15:73:
f7:60:7d:82:4c:c4:3d:af:db:32:03:9b:5e:31:5e:
a3:17:e2:5d:36:11:e3:b9:f2:6c:59:bb:d0:f2:c2:
70:2f:44:85:07:1c:6d:1b:8d:a9:b0:de:3e:7c:c5:
fd:0d:d3:c3:49:75:cc:4c:f1:d6:14:1a:d8:bb:cf:
5a:08:5d:09:3d:a2:5f:ed:5e:65:83:b6:b1:9a:43:
de:10:0a:83:98:42:55:9c:ac:34:43:2e:96:c5:ce:
b8:94:f3:b5:e5:00:42:73:e0:7c:72:8b:e8:e4:1f:
85:47:11:c3:26:b1:7f:97:02:4f:9b:7b:43:8a:7d:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:47:AD:A7:83:7B:90:38:67:92:01:25:CA:90:D7:C1:8A:FE:07
X509v3 Authority Key Identifier:
keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:30:18:9f:4a:9b:1b:c7:4c:9f:0f:7b:c3:46:ff:a5:26:d7:
d8:1b:f2:98:a3:e5:3c:c3:f8:55:8e:24:b9:ee:61:67:ff:c5:
d2:79:90:25:56:50:5a:d1:2d:df:b9:b9:22:ad:64:db:4d:f7:
9b:aa:89:7b:03:57:e6:b6:de:45:d1:b0:b1:3c:b2:f8:e8:1c:
1f:7c:a7:3c:e5:5b:f0:9b:6c:c7:5e:76:7d:43:ed:74:34:a7:
c7:10:db:69:51:8b:eb:f2:a3:2b:d8:2e:7f:8a:c0:92:60:bc:
dd:0e:f7:60:f4:c3:20:b6:87:47:ac:39:28:ac:ca:f7:32:39:
4c:2e:0a:9f:4f:4b:bf:db:b4:1b:3d:f0:f8:3b:ae:63:af:40:
6c:da:d3:ff:f3:59:de:57:ec:da:c3:3a:7e:d7:5a:69:e3:9c:
ec:a0:1e:16:f0:08:7f:17:77:c6:5c:4a:a4:23:e7:27:ce:ec:
03:f5:26:d3:44:11:84:57:55:34:e3:25:54:03:0d:04:2f:14:
32:a9:8f:e9:6f:5d:a5:f9:c3:ea:dd:20:73:a3:38:8a:28:34:
24:7d:84:9f:69:f0:60:f9:36:7b:f2:e8:1a:27:d7:0e:67:60:
23:85:9f:d4:d5:c4:8c:be:08:20:f9:f5:19:88:36:40:31:c3:
4a:52:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:44:13 2025 by rpki-client