Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
File: YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft (raw, json)
Hash identifier: oTHyWQH2d7RQmMJ6NzZ9lfsHS8nrIpZex5ho42MB3LQ=
Subject key identifier: 33:21:5D:54:27:F9:AF:18:56:7D:D7:86:E0:CC:11:B9:89:3D:E5:7D
Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Certificate serial: 0C71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
Manifest number: 0C63
Signing time: Fri 31 Jan 2025 18:12:50 +0000
Manifest this update: Fri 31 Jan 2025 18:12:49 +0000
Manifest next update: Fri 07 Feb 2025 18:12:49 +0000
Files and hashes: 1: YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl (hash: KCRQHGw9mNCAlhWLDdIB3pjCwJXT9vXZgDD+HZ0xgY8=)
2: 4154E51AC91311EBA6226F45C4F9AE02.roa (hash: X3uR7nkHEkJDs/4UDZXjCbVpYlI7ETxizWrqRmPT3Rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4
Validity
Not Before: Jan 31 18:12:49 2025 GMT
Not After : Feb 7 18:12:49 2025 GMT
Subject: CN=679d12a2-53b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:ec:44:f3:b5:a1:5e:4e:d9:41:f3:f7:84:
20:37:7e:35:51:54:63:db:46:c4:3c:af:84:11:e6:
5a:ea:06:ee:a4:98:dc:ec:a2:a4:71:32:57:02:9a:
d9:ee:32:95:db:dc:1d:16:b2:53:52:a6:33:52:92:
e8:ae:75:71:ca:79:f9:d9:04:43:9d:e3:f0:c8:78:
ef:9a:82:51:a9:90:65:94:67:71:50:b3:3c:d5:ec:
db:d3:01:da:bf:ce:48:75:7d:f8:83:fe:14:46:66:
a6:e5:44:3c:66:95:55:7e:cf:fd:06:12:1a:30:be:
1b:55:07:5b:b5:a1:42:78:19:c2:c9:52:70:d8:b2:
20:36:90:b8:4e:27:16:cd:42:d8:a6:cb:e9:13:52:
f3:49:13:eb:ad:2d:0f:7e:f8:dd:4b:f1:76:6a:79:
2c:4d:c1:80:5f:cb:a0:43:e3:f1:f7:e6:ea:f2:22:
04:26:9f:7a:f3:c6:d5:28:a9:a6:16:00:87:56:fb:
46:67:4d:b3:d2:f9:26:a5:28:c1:f5:d7:d4:e3:1a:
15:cf:e9:73:b4:43:96:6c:00:d4:3b:35:32:f4:c3:
77:39:ed:5f:f7:de:9b:09:d6:89:40:9b:b5:c3:1c:
b5:92:0a:e6:87:cb:09:b6:e8:1b:6e:08:4d:e1:dd:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:5D:54:27:F9:AF:18:56:7D:D7:86:E0:CC:11:B9:89:3D:E5:7D
X509v3 Authority Key Identifier:
keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9c:df:68:35:1c:3f:99:ae:80:2b:d0:ad:f8:87:87:5c:37:
3f:f6:82:32:b7:75:b4:11:00:f2:e6:37:c6:a8:57:94:df:6a:
70:1a:70:fe:72:6a:47:7c:f7:25:0e:f6:56:34:95:ca:32:85:
24:5c:26:27:0d:98:04:f9:80:ac:23:8b:b4:be:ca:f0:23:8c:
ad:aa:bb:b9:b6:f4:bc:db:48:67:57:e6:9b:57:8e:22:5b:67:
c3:f3:82:37:ea:76:aa:3a:c6:9a:77:6f:c1:fc:f9:cb:44:6a:
ec:78:98:6f:d9:4e:53:42:04:29:19:b4:bd:98:c8:3b:bc:3b:
f8:94:cb:ef:7e:f6:83:34:22:56:a3:57:47:52:a5:49:e7:88:
59:68:d8:60:b2:f7:53:10:20:ee:ce:b6:86:d0:cb:b8:26:1b:
ab:7b:e9:aa:3b:13:10:f7:93:1f:13:68:ec:fe:02:37:d0:5c:
1f:4f:fc:fe:9e:a0:1c:e1:b7:90:66:31:a0:e3:f5:02:80:c5:
27:22:c7:3f:dd:9b:54:65:fd:cd:13:da:9b:5b:d3:7f:f4:92:
d4:69:7f:52:96:7e:1d:53:43:e0:2c:6c:86:88:98:76:12:02:
e5:9a:fa:31:a4:57:f9:43:ba:3c:97:97:51:94:8f:40:cf:e7:
bb:e8:d4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:27 2025 by rpki-client