Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File: yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier: CHFQrLAMPFnJUENkwAokfeiKxa1Tm4K0Z8nNaykdlHw=
Subject key identifier: E7:3B:2B:CD:6B:D1:25:4F:2F:48:63:3D:01:DA:F8:20:FC:25:B1:A0
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number: EE
Signing time: Fri 31 Jan 2025 04:26:44 +0000
Manifest this update: Fri 31 Jan 2025 04:26:43 +0000
Manifest next update: Fri 07 Feb 2025 04:26:43 +0000
Files and hashes: 1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: dn+bSHQ17n1T/ke/9I9rHAz/t2RPm8PqT7DZiqr8crI=)
2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: irBKz5hDdDQSuzPo8HTBKaH+G3tFJbjs2+W0RwVXyv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: Jan 31 04:26:43 2025 GMT
Not After : Feb 7 04:26:43 2025 GMT
Subject: CN=679c5103-52a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:73:5f:58:c4:7f:41:09:3d:9d:6a:72:9a:
d3:e6:40:9b:54:46:39:33:2a:5f:f4:dd:26:df:e1:
93:1c:cd:5a:e5:9b:7b:2e:98:a4:d6:ce:96:a1:4e:
59:69:6d:c2:46:9f:42:2d:7d:1d:43:33:bf:8f:b9:
e1:d7:d1:c4:66:4f:30:db:9a:de:b5:74:e4:88:2a:
61:6b:44:d5:6a:d0:8a:bb:46:2f:09:a2:0d:c0:3f:
76:61:7d:e8:92:93:e6:a4:6e:40:95:07:96:5c:45:
40:4d:00:56:5e:5a:03:56:7b:4d:3d:48:3a:ed:89:
a4:b2:05:65:5b:e7:ee:50:26:9a:69:e6:2a:51:24:
d7:c2:80:31:ea:76:2d:ff:e7:85:8f:69:39:f9:32:
2b:a7:d8:cd:a0:8d:e0:2c:b3:6a:20:76:e7:01:0d:
5f:22:01:78:6b:22:6a:f2:07:f3:5c:86:16:ac:e6:
f9:c4:c6:f8:40:c8:10:4c:7b:8f:32:7a:5d:cd:3b:
69:37:9c:82:c8:54:63:05:83:da:a3:25:99:46:b6:
16:a7:06:ce:a0:91:19:b6:27:78:18:e7:83:07:ab:
15:7b:51:15:b0:a0:ac:39:77:19:ab:f6:c5:29:f9:
11:40:a6:74:b9:6d:a5:c7:8f:43:b6:42:66:c0:dc:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:2B:CD:6B:D1:25:4F:2F:48:63:3D:01:DA:F8:20:FC:25:B1:A0
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:eb:f2:84:92:ca:57:53:a5:06:ff:d0:fd:f9:2c:57:34:
ac:2b:0b:b1:37:d8:1f:e4:e1:a8:23:dd:cd:e1:85:b7:3a:23:
ed:c2:95:e6:73:45:04:d6:8f:65:7f:c6:a2:ea:ae:45:4c:84:
01:32:0b:e3:87:20:8c:d4:ee:84:8c:a0:95:55:1b:e3:b4:d5:
96:c4:2f:fa:90:71:79:e7:66:04:e6:28:8d:72:d4:7f:26:c1:
68:a5:90:ce:a1:d1:68:04:c4:e7:e5:25:e8:3a:28:be:c6:82:
d7:f9:ce:36:cf:ae:8c:4c:7c:4f:08:a3:02:ad:a7:79:a9:8e:
1b:f0:30:cd:35:31:77:4d:a7:97:d5:f3:6d:b1:75:57:f1:66:
cd:c5:7c:97:50:c5:fa:51:a6:e3:40:48:81:63:07:de:6c:15:
17:19:f6:29:6a:b8:58:fc:5c:b0:19:30:05:fe:31:0b:20:cb:
34:a5:0f:a5:4a:90:a1:12:27:2b:e6:ad:87:0e:52:5a:74:b5:
10:a9:81:8a:3f:cf:a2:d4:e0:0c:e8:10:37:5f:52:74:cb:9b:
72:b3:97:ef:c2:76:08:33:7d:37:f8:81:18:b1:d1:24:93:94:
90:d4:7b:9d:b9:fe:a9:96:a2:32:48:9c:10:79:c8:5d:44:9e:
28:3c:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:30 2025 by rpki-client