Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: YHQ+6SSJAQZlvABu0eEsG+9Q6A2OwlcF1U6PJf3+0rQ=
Subject key identifier: E9:7D:65:23:ED:29:99:D9:18:22:11:A1:25:DA:D8:1D:74:FC:48:57
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 042B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 0427
Signing time: Fri 31 Jan 2025 00:23:42 +0000
Manifest this update: Fri 31 Jan 2025 00:23:42 +0000
Manifest next update: Fri 07 Feb 2025 00:23:42 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: CxnYeIEdoMysvjT+hS4EgB7ePdFdQGLBM0rcmh1TErk=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Jan 31 00:23:42 2025 GMT
Not After : Feb 7 00:23:42 2025 GMT
Subject: CN=679c180e-adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:db:66:8e:d9:ad:55:32:fc:0c:28:57:3b:
b8:4c:32:72:ba:d0:be:82:88:2b:2a:d9:15:d7:62:
dc:88:78:59:1c:0b:eb:fa:f7:b2:3e:5c:66:fc:5a:
c1:ee:6e:3a:be:e7:f2:64:d7:f9:f1:df:91:be:5a:
91:53:cd:61:ea:2a:34:05:60:78:d5:69:97:85:e2:
5b:d5:99:8e:5f:de:7e:4a:83:2a:3e:89:a8:ff:b8:
0b:14:58:c0:ee:cc:ac:1f:1a:23:0c:54:05:66:e7:
31:39:73:e6:cc:d7:d1:4b:36:8d:af:0c:57:0f:1f:
25:68:58:fd:8d:b0:80:c3:50:08:f1:8d:2c:75:8d:
59:ca:cd:b0:77:d7:ea:b2:ed:80:9a:dc:77:00:3e:
bb:4f:32:2d:65:f2:a6:83:7b:8c:77:25:55:32:86:
b1:3e:12:5f:c3:86:29:5b:61:b7:95:19:b1:09:0a:
a5:19:94:57:66:72:b5:33:be:82:3f:59:81:60:fb:
b1:13:cd:45:f2:3d:ab:45:f1:85:2e:fc:bc:47:66:
ad:ba:d4:ff:b4:f5:e2:be:2f:bb:26:9e:db:49:5e:
a9:d8:79:5a:c0:9d:1e:fc:ab:a1:65:7a:3c:b7:f4:
62:47:7e:c7:b0:e1:39:cb:88:14:8a:f8:25:1f:ec:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:65:23:ED:29:99:D9:18:22:11:A1:25:DA:D8:1D:74:FC:48:57
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:09:7c:69:d7:73:96:74:a2:7a:ef:0b:0e:ed:70:bb:be:89:
57:30:69:37:99:22:62:52:03:bf:bf:11:eb:4e:16:b6:fd:6e:
ae:c6:5d:1c:57:ed:99:ee:81:4f:c0:47:93:bf:45:1c:4a:2c:
d7:75:e6:70:53:2e:e7:f3:48:48:cd:2f:76:67:96:ec:f9:96:
95:de:d1:e0:2e:92:3b:69:09:54:f7:e4:1c:62:35:18:86:a2:
99:f8:cf:2a:ea:9a:da:ee:58:ea:42:95:78:99:86:42:25:ab:
50:ae:eb:83:f5:db:91:e3:5e:d2:c8:15:cf:d5:a9:da:52:53:
23:30:c2:34:57:71:65:04:2b:78:fb:fc:10:00:f2:e9:94:f8:
eb:c8:cd:08:8a:89:f3:1b:37:5c:72:18:3d:a0:54:a3:05:3a:
fd:1c:65:df:5e:b8:7c:e0:52:40:ac:9d:ca:e9:15:f0:bf:e0:
da:d7:8b:0e:2a:47:ac:43:be:05:ac:b8:29:31:92:d9:e8:03:
ce:26:5e:23:62:f2:f0:f8:0a:89:dd:a3:1a:4a:14:9b:ca:d9:
a9:b9:a3:40:bf:27:e6:c7:e5:d2:87:af:82:79:9f:08:04:c7:
bd:c9:07:dd:8a:91:42:22:86:50:e2:e1:93:7a:78:33:ad:92:
c8:3b:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:23 2025 by rpki-client