
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: 9u647P2yMYYTulTNuKwFsVYxKM7v8qg+2iYin087D5Q=
Subject key identifier: FD:5B:5C:1D:A9:12:4D:B2:AC:2A:C3:45:97:7D:2F:CA:3C:C4:7E:AE
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 0197
Signing time: Fri 31 Jan 2025 02:46:06 +0000
Manifest this update: Fri 31 Jan 2025 02:46:06 +0000
Manifest next update: Fri 07 Feb 2025 02:46:06 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: BVkcem/+qGMMOwLraDpTdcpbGU6hgZpBALZ95Z1g36M=)
2: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (hash: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Validity
Not Before: Jan 31 02:46:06 2025 GMT
Not After : Feb 7 02:46:06 2025 GMT
Subject: CN=679c396e-0a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:10:40:a3:b7:c7:94:55:3e:fe:ea:76:a8:
ea:a8:26:72:7c:af:41:6d:79:a7:67:e5:7c:38:90:
1d:7c:db:20:d3:55:d4:86:35:d7:98:51:b4:c7:dc:
be:dc:26:41:90:a4:aa:a5:f1:df:44:24:53:d8:ec:
69:2b:0a:b9:09:fd:ec:ff:b0:55:ed:94:1c:00:26:
19:5c:dc:7b:28:f2:25:82:20:0a:79:b0:91:0e:22:
62:cc:dd:c0:91:c6:d5:f8:08:5b:24:38:37:c9:2a:
1a:75:76:9a:c5:67:93:64:46:85:82:3a:fa:0a:dd:
c4:b7:7e:91:13:ec:2a:e0:a0:cb:a4:34:61:02:6d:
a8:86:27:39:ca:27:e2:55:86:4a:d4:76:78:86:c6:
72:d1:2b:5b:8a:a9:e7:eb:1a:1e:2f:bd:f6:20:37:
d6:5e:d5:c5:7a:24:73:dd:8d:92:85:53:ac:ea:b5:
da:4a:b4:d5:68:6b:00:09:d6:2f:a5:1b:28:c0:76:
aa:e8:92:36:91:1e:ee:b0:67:fb:80:d5:70:31:35:
df:b5:60:4c:8e:1e:19:eb:ce:54:69:63:54:48:db:
da:b0:29:b0:80:2e:15:97:2e:3d:df:b9:ce:90:29:
d3:ee:b6:d7:d2:1c:0d:5b:13:8e:a3:c7:5a:16:64:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:5C:1D:A9:12:4D:B2:AC:2A:C3:45:97:7D:2F:CA:3C:C4:7E:AE
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:66:e4:3a:dd:09:4e:47:58:32:a4:ef:d4:c2:68:3b:47:
e4:3c:f6:7b:57:eb:1c:9d:ef:78:57:69:6e:c0:72:5f:ac:1f:
32:52:a6:8e:f7:cd:18:d7:f8:b7:7f:27:3d:d1:bb:bf:24:4e:
22:4b:42:f3:fe:2d:8b:22:26:7b:3c:79:3c:57:d0:bb:ae:03:
7f:96:a2:d8:bd:c6:b0:4a:ee:f5:61:b9:3d:2a:53:1a:25:97:
55:1a:ce:1b:08:e3:f1:3f:26:4f:65:78:f7:6b:00:33:97:7e:
ee:bb:12:a1:d4:04:22:d3:a2:7e:4c:d4:9d:81:a0:2d:f0:6e:
4b:f2:3a:29:e5:f1:f2:67:93:fc:74:ae:87:4d:89:20:8a:0a:
4a:e4:27:a6:ea:30:76:57:21:7c:6b:00:5c:89:7b:39:90:48:
5f:91:d4:e1:c5:18:6e:84:32:63:6d:9d:a5:7b:62:24:69:cd:
f9:6c:6e:59:58:57:88:91:19:e8:21:3f:bf:6d:1c:9c:ad:b1:
3d:6a:f0:44:33:87:4f:54:10:2a:bb:7a:5d:7c:56:0d:b3:dc:
05:67:5b:5a:c6:a5:af:9e:cd:3e:72:d4:a1:24:e5:fb:7c:23:
8d:c4:df:ae:6f:51:52:3a:2d:84:9e:6d:ff:67:8c:0d:d4:e7:
79:f6:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:54 2025 by rpki-client