Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json)
Hash identifier: dHqydmUO+ooq8ggZBIwd/6N89e66s2kniAOfplUEOo4=
Subject key identifier: 82:8F:93:C0:E6:72:67:63:F1:F0:DD:92:63:F3:67:28:8A:04:BC:88
Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
Manifest number: 0575
Signing time: Thu 30 Jan 2025 23:22:38 +0000
Manifest this update: Thu 30 Jan 2025 23:22:38 +0000
Manifest next update: Thu 06 Feb 2025 23:22:38 +0000
Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: CQuxmUzG8sxiXh4AVFRRCxrhFkGuQTpl8NWSuDArxMI=)
2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: OrtHOETOrItjmKJ7KfMNKuUcSMEyCsCy/SOGjRGiw14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41
Validity
Not Before: Jan 30 23:22:38 2025 GMT
Not After : Feb 6 23:22:38 2025 GMT
Subject: CN=679c09be-8fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:75:b3:62:df:02:5b:78:00:de:d6:fd:2c:
3c:b2:33:87:64:31:a0:34:1e:20:a9:59:ed:86:15:
15:88:1a:cd:a0:2b:d5:dd:e7:03:ef:f6:96:b5:b0:
4f:ad:80:4a:db:67:a4:99:d4:03:5d:80:20:2c:95:
03:a1:fa:c5:0d:12:78:0a:3c:2b:65:35:2e:1e:71:
63:a3:4c:a1:fd:27:eb:7c:e9:30:37:ac:70:20:db:
19:0b:6c:f1:67:40:0f:82:6f:2d:4f:12:92:c4:6c:
17:d5:de:26:cd:30:8b:6f:17:b0:70:a4:e5:0e:9d:
de:4d:61:d6:cb:c6:4b:5b:3a:0e:1d:05:2c:4f:14:
2d:c4:74:ae:d5:5d:b3:f2:50:3f:f5:61:78:68:3b:
7b:d6:d2:67:1b:cc:08:1c:05:b8:e0:f7:93:f4:60:
74:ce:c2:d6:d6:af:f4:06:a0:e3:9f:2c:98:91:14:
cf:4e:c4:6a:77:b8:12:f6:69:d6:84:63:60:28:9c:
7d:ca:e3:4d:ad:b5:8d:5a:eb:25:2e:e6:b1:b7:3b:
8b:8d:9e:f4:38:14:e8:f9:59:8b:35:3d:8a:4c:35:
c5:ef:36:6a:77:9c:29:80:7c:9b:d6:d2:4b:69:9e:
e4:30:8a:f0:5a:c0:68:c2:67:23:39:a5:5a:0a:8b:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:93:C0:E6:72:67:63:F1:F0:DD:92:63:F3:67:28:8A:04:BC:88
X509v3 Authority Key Identifier:
keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:a5:86:aa:f5:36:21:56:fb:12:1d:7e:1c:15:ae:97:11:a8:
dd:d0:8f:73:7f:cd:a2:ac:fc:c2:cc:07:bd:95:d5:cc:6e:78:
33:ad:f6:de:c1:34:ec:c5:5a:22:73:70:2e:ce:45:15:dc:c6:
3f:06:76:ee:0d:47:ab:33:88:fb:48:3c:78:0b:f9:2a:c1:5f:
db:62:c6:1f:c4:c3:b8:23:0e:4c:b3:d4:55:35:4f:44:1f:8a:
bc:4f:47:cb:fa:1b:af:ef:4a:a4:2d:8b:da:94:2e:02:fb:a6:
c7:f1:11:8f:a0:05:d7:3d:47:fe:55:b3:43:54:60:5e:36:5f:
06:ad:28:52:9d:be:90:da:38:29:47:fc:e0:54:d3:a2:ba:f7:
a8:88:da:c5:6e:3d:5f:1a:2a:4e:82:45:c7:0b:26:0b:f4:d9:
e1:77:bd:10:e4:33:64:aa:da:f8:92:ed:a7:13:29:3f:be:65:
34:22:2c:68:2f:2b:97:b9:2c:81:3d:2c:86:7e:4e:49:34:29:
ae:5f:ad:d6:8c:3e:ff:de:d9:2e:3b:d8:5e:50:20:9e:7d:6c:
25:7e:36:37:b3:9c:5f:a8:80:2e:34:77:e7:a5:20:f1:56:42:
5e:a0:dc:d6:2d:d6:d7:8d:ea:76:2f:e3:55:78:f0:6e:d9:8d:
9a:38:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:56 2025 by rpki-client