Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
File: YYQdHtq_n_D2AYxhEBevcZYnok0.mft (raw, json)
Hash identifier: P4m731Hg8paWQFOKB7hRE4sNGRJ5VXcuUa8m0myT2js=
Subject key identifier: 3E:78:63:D2:F3:B3:9D:CD:CB:43:A8:CD:6F:C6:83:AC:A6:24:EC:F4
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial: 04ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
Manifest number: 04C3
Signing time: Fri 31 Jan 2025 00:02:43 +0000
Manifest this update: Fri 31 Jan 2025 00:02:42 +0000
Manifest next update: Fri 07 Feb 2025 00:02:42 +0000
Files and hashes: 1: YYQdHtq_n_D2AYxhEBevcZYnok0.crl (hash: 2Zd+pr6k5/jNxQZ1BYhNnmcDZWgdciguZhFGRDoTcU0=)
2: E6F081CAB4D111EFB518113FC4F9AE02.roa (hash: gmtg83b40Tkb+D3gBbZ+Di+lUHrNe5TxNxrJ6h+P2/o=)
3: CBCD14C8471B11EEABCACF68C4F9AE02.roa (hash: UQXQ0zih1R4yEWTzxa6D1G/eVXXNcEV+g1pp2duHg7A=)
4: CF9E64BED65711EE8623B920C4F9AE02.roa (hash: KFSR8nqG2sOGDYAgAFeqv4yoVxNtWdp8vNs36B/HOmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Validity
Not Before: Jan 31 00:02:42 2025 GMT
Not After : Feb 7 00:02:42 2025 GMT
Subject: CN=679c1323-358e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:58:7b:6e:c4:db:67:2f:75:5a:9d:16:f0:
0f:30:1e:64:88:6a:dc:c2:90:b5:0e:19:6a:85:48:
04:b1:d9:93:9a:01:e7:37:a7:cd:42:df:93:70:ad:
cb:f6:0e:94:cf:7d:0f:26:98:55:54:cf:01:16:24:
fb:c3:45:7c:69:b2:65:5d:4e:ca:93:9a:a4:a0:c8:
23:aa:7a:af:ea:28:4c:1a:ad:b0:c0:e1:f9:cc:9b:
5e:2c:d0:f6:4b:aa:b6:24:20:3f:14:47:18:38:35:
6e:3b:eb:c7:03:ac:6c:51:e5:44:ed:52:18:0f:91:
6e:9e:44:71:e8:a4:bf:b9:cb:c4:3e:c5:00:24:8e:
0a:cb:25:fb:16:3a:7e:07:70:f0:81:e5:96:96:a6:
a5:99:69:4a:09:8a:a8:c6:26:ab:75:d9:fb:e8:0b:
73:d8:7c:a0:66:9d:06:5e:e3:59:8a:eb:f0:35:c0:
a8:1f:7f:b5:3c:76:03:29:ad:4d:22:fc:ec:93:44:
27:41:86:83:4a:db:27:de:be:3f:43:30:da:51:24:
d4:ae:25:d6:16:cb:a4:d8:5b:c1:be:31:14:ba:36:
02:05:bf:81:84:4d:84:dd:92:86:b2:c5:44:09:77:
28:15:4e:ad:7f:c9:da:f3:28:df:15:56:ff:0a:04:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:63:D2:F3:B3:9D:CD:CB:43:A8:CD:6F:C6:83:AC:A6:24:EC:F4
X509v3 Authority Key Identifier:
keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:1f:10:00:a4:17:a1:81:54:a2:95:7a:22:83:d6:fe:4c:ea:
9b:8b:1f:22:9f:33:99:ef:77:2e:ee:ca:d3:8b:90:f8:24:13:
24:ad:47:81:d5:68:e5:3a:2c:49:ed:68:28:fc:65:fd:b1:52:
0f:69:f6:4e:62:e6:77:76:06:18:f4:13:0e:fe:c6:6b:ae:56:
22:35:ae:8a:a2:fb:a5:55:9b:d9:39:d6:91:06:98:41:c3:ac:
4e:4d:83:09:c3:49:74:55:5e:4b:87:e5:51:08:f3:5d:22:75:
1d:5a:05:79:5c:7d:1f:73:84:cb:66:a4:af:1f:3e:aa:70:2e:
ec:f2:ad:09:14:e2:cf:33:7c:b2:d1:ce:01:c3:15:6d:58:8d:
4b:17:9b:8a:5a:d7:82:e3:f3:ad:18:24:7a:f2:2d:24:00:c5:
bf:00:8f:67:09:a2:0c:de:73:eb:a7:c3:67:46:eb:d4:71:e9:
ee:bb:81:64:65:76:77:46:9d:fa:05:55:2a:f6:de:42:2f:f3:
5b:d7:9c:33:c6:6c:09:29:a0:0e:cf:31:bc:f9:72:6d:51:9d:
d0:5f:f3:40:88:70:ef:e2:7b:69:ea:6a:14:33:26:7e:dd:3c:
79:95:46:54:7e:7a:44:c7:b7:9f:2d:41:f8:42:51:f2:3e:b0:
24:8f:22:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:31 2025 by rpki-client