Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
File: cyJU29YY8YhtTfkgE5O_34ueAg4.mft (raw, json)
Hash identifier: H9rNzui+8YRW3IY7UUILlMrLsWaY5SQOmhChP0AUgBU=
Subject key identifier: 5B:09:FF:12:02:A7:AE:7B:A1:10:2F:E5:EE:41:C4:23:0A:57:04:CB
Authority key identifier: 73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
Certificate issuer: /CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Certificate serial: 0670
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
Manifest number: 1ECE
Signing time: Fri 31 Jan 2025 16:05:59 +0000
Manifest this update: Fri 31 Jan 2025 16:05:58 +0000
Manifest next update: Fri 07 Feb 2025 16:05:58 +0000
Files and hashes: 1: cyJU29YY8YhtTfkgE5O_34ueAg4.crl (hash: rPEIwzN8T7iY+5VGyaaDRl72VQ3zQV8xhaIoEMLDOOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA/serialNumber=732254DBD618F1886D4DF9201393BFDF8B9E020E
Validity
Not Before: Jan 31 16:05:58 2025 GMT
Not After : Feb 7 16:05:58 2025 GMT
Subject: CN=679cf4e7-c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:46:ae:d5:1d:d8:0c:75:55:60:43:f3:a9:
36:31:0a:f1:ce:76:75:ec:87:56:d1:a9:ab:f7:19:
ce:4e:41:65:ab:cb:4d:d1:b3:80:58:42:60:7c:9a:
2e:e2:59:18:ed:ee:42:66:9b:dd:4c:ef:69:03:ab:
a7:98:2e:21:bb:20:99:e2:c2:15:44:a5:cf:c3:51:
f7:2f:e9:12:d3:8b:74:ca:df:92:7c:e9:9e:a7:1e:
73:5b:89:de:c0:1e:11:37:17:22:0d:21:7a:f5:55:
0f:21:a7:b5:8e:8f:50:db:2a:1b:82:b8:ca:dc:64:
22:f6:f0:ed:a4:a5:d9:82:01:2d:47:b4:4b:d8:f1:
3b:d4:ac:82:86:53:55:91:4c:e2:b9:59:e4:2c:24:
c9:99:0a:c0:e5:4b:df:1f:c8:8c:3d:8d:9e:f0:af:
b4:2c:7e:5b:b8:71:c9:85:6b:c1:99:d9:e5:48:36:
7f:75:96:ad:6f:1c:f7:0f:73:7a:2f:b9:ce:59:11:
2f:b9:33:43:ae:f5:47:3d:aa:48:9c:6b:7e:73:d6:
08:9c:98:08:0f:37:f3:c1:1c:4c:43:5c:60:69:18:
71:33:93:3c:07:ee:3c:72:fe:df:26:80:99:39:6d:
4b:d3:a1:13:a1:1e:4d:59:98:4e:7d:de:83:cd:bb:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:FF:12:02:A7:AE:7B:A1:10:2F:E5:EE:41:C4:23:0A:57:04:CB
X509v3 Authority Key Identifier:
keyid:73:22:54:DB:D6:18:F1:88:6D:4D:F9:20:13:93:BF:DF:8B:9E:02:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyJU29YY8YhtTfkgE5O_34ueAg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/cyJU29YY8YhtTfkgE5O_34ueAg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:38:ab:93:dd:d0:99:56:97:9b:21:04:51:ac:96:b0:0e:
be:82:ed:24:75:d3:51:ef:d8:cb:7d:fc:cd:27:cb:e1:54:19:
7f:32:0b:66:55:39:21:af:c0:72:3f:9a:48:32:83:ba:8a:ef:
f5:92:ff:fb:32:af:a6:35:38:14:b0:3a:c2:d5:ea:8a:7f:b8:
01:37:37:52:17:22:d3:c2:2b:12:f9:95:2e:3a:59:de:42:8f:
2c:eb:bd:12:57:dd:04:37:ec:ba:e6:42:bd:99:2b:4e:c8:00:
98:62:ec:ff:16:55:f9:17:50:49:1e:76:84:2a:9a:e4:d0:f4:
1b:66:8d:2f:df:ce:b5:49:cf:7f:be:b8:9e:a8:1b:a5:3f:3c:
29:67:28:e9:5e:1d:0d:1c:23:cc:7e:f7:13:99:27:8f:9f:0e:
14:ce:d4:f5:6e:c6:e2:4e:7c:87:26:e2:9b:7d:c8:4b:27:f6:
d2:b2:90:f8:c3:fe:8e:06:af:10:01:d1:26:10:af:29:a9:24:
14:59:d1:6b:39:51:bd:dd:cc:40:59:11:22:05:a1:4b:12:a7:
c1:3d:a8:b9:53:2f:ca:20:d3:27:8d:f3:3a:77:a3:5a:1c:2e:
ef:94:cf:08:93:89:28:df:fe:56:02:8d:4e:15:ff:6b:c6:9c:
ca:fe:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:08 2025 by rpki-client