Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier: jD8PTbuszel9z/1E5yCl4156TfY+cHKA5jN1X+28Q/g=
Subject key identifier: 05:C9:11:36:2B:8E:33:0B:8E:60:C8:8A:4B:96:4D:94:DF:FF:8A:53
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial: 0AE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number: 0AE1
Signing time: Thu 30 Jan 2025 19:22:55 +0000
Manifest this update: Thu 30 Jan 2025 19:22:54 +0000
Manifest next update: Thu 06 Feb 2025 19:22:54 +0000
Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: 2SlfSO6GWOKLNTA4RJnVSy1Mpy23Etg/4c/8+iK4gww=)
2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: SNO/bBZDGGjsIOKkc1Q9a6n7NxtIrWP6e7L/IhWULh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Validity
Not Before: Jan 30 19:22:54 2025 GMT
Not After : Feb 6 19:22:54 2025 GMT
Subject: CN=679bd18f-cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:44:50:42:33:6b:a0:fc:c5:38:1d:2f:2f:
00:6b:8d:da:63:bd:35:cb:a1:4e:da:f3:3f:a2:41:
48:b4:ce:29:d2:4a:bd:2b:5e:6b:c4:ef:f9:47:ee:
74:1c:a5:01:9b:de:86:cf:1c:28:14:19:c7:4a:7a:
7a:e8:ab:5c:e9:a3:b3:2e:9b:1d:9c:86:8a:ae:22:
b5:98:4b:a1:49:7b:91:e3:d4:cb:27:2b:0f:34:8f:
4f:f0:09:1b:01:bd:0c:17:d7:e5:af:db:3c:a3:2b:
f4:8b:79:b5:63:09:08:4b:1d:69:2c:bf:43:d7:62:
fd:a6:d9:ee:de:fd:e7:12:c4:e6:8a:a3:fb:d5:1a:
3f:54:db:f9:e6:e8:b8:41:46:e3:d3:51:d8:d1:0b:
a7:e2:95:38:70:ef:c5:3b:12:a7:09:0b:5d:19:6f:
22:20:4e:f0:fb:8a:7e:1d:10:33:f4:0b:03:b5:8a:
10:cc:ce:b9:46:49:12:d9:93:74:c2:fb:2d:23:ba:
00:fe:3d:2a:48:99:8d:ab:ea:3a:95:a2:09:f4:76:
7a:f9:ec:7c:bd:2a:52:25:5b:96:ae:a5:ea:51:cc:
45:80:61:0f:c6:c5:b5:71:39:cc:a2:de:2f:7e:19:
f2:37:12:76:6b:8f:1f:c6:e0:39:da:6a:85:20:a2:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:11:36:2B:8E:33:0B:8E:60:C8:8A:4B:96:4D:94:DF:FF:8A:53
X509v3 Authority Key Identifier:
keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:9f:44:09:7e:0c:81:b6:a8:da:4a:1a:b3:9e:50:78:8b:
ba:04:10:7d:5e:60:53:fe:cd:e2:ad:59:6a:69:38:9d:83:a1:
de:06:0f:5b:dc:2d:82:09:85:d0:b8:47:3a:80:98:73:08:bf:
eb:8a:46:89:cc:a9:d1:69:17:60:7d:17:77:03:7a:81:8c:20:
e4:0e:0a:7c:85:99:a7:49:35:0a:d6:e1:52:37:45:59:18:10:
c6:19:07:e8:48:12:97:07:ae:95:ab:93:1f:98:7c:d3:e7:a6:
7c:f2:68:7a:24:3a:db:ed:cb:3e:61:03:d9:7d:43:74:84:cb:
b3:29:38:43:46:7f:f8:ba:cb:13:67:f2:bd:6b:af:85:95:d6:
13:4a:0a:36:8b:db:e1:eb:ea:64:7b:91:93:f8:0a:15:53:40:
00:6b:70:39:44:7a:9d:51:c5:37:34:b4:7d:f9:af:c2:d2:28:
c0:2d:7d:91:02:e0:60:fc:c0:56:02:6f:90:b6:6a:fe:1d:af:
2f:32:2f:94:fe:67:f9:f1:1b:6c:fe:bf:1a:f6:43:a2:a6:3c:
e6:22:98:d4:5d:75:80:e6:d8:09:12:71:4b:93:1e:fe:05:dd:
d3:a2:1b:a3:28:1a:1e:c1:0c:b0:65:ec:85:3f:5f:0a:b0:12:
2c:82:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:59 2025 by rpki-client