Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
File: y1sC0Pxzbip6stKIoPwzFnpLvO0.mft (raw, json)
Hash identifier: Fj8JMsXxx/3mGxSTGrc2NNfJ991Ox9ikRvE+KPk4pbk=
Subject key identifier: 45:30:0A:37:0B:87:D2:57:2B:4D:51:33:F6:7A:4F:08:EF:9A:71:C1
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
Manifest number: 0186
Signing time: Fri 31 Jan 2025 02:50:49 +0000
Manifest this update: Fri 31 Jan 2025 02:50:48 +0000
Manifest next update: Fri 07 Feb 2025 02:50:48 +0000
Files and hashes: 1: y1sC0Pxzbip6stKIoPwzFnpLvO0.crl (hash: ov2896pcNfz3UscOpXYwygbMj/Gm+nFXx2l+7SYD12c=)
2: 3E122AE0876011ED84335D46C4F9AE02.roa (hash: bMGYEkxmsNwyimLtEml2g/yxjeK2QwKmxudQ/0mQEOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Validity
Not Before: Jan 31 02:50:48 2025 GMT
Not After : Feb 7 02:50:48 2025 GMT
Subject: CN=679c3a89-6577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:32:ef:88:95:45:d4:93:e3:56:0c:c6:c0:
57:93:ee:4d:9e:40:ad:7f:bc:e3:81:41:59:ba:52:
b1:3c:f8:e8:85:7f:6c:f7:1c:23:90:40:70:df:a7:
da:f0:a8:7e:47:c1:9d:14:44:37:e4:50:cc:59:ee:
bc:81:71:69:19:20:53:f3:ea:dc:6a:2c:74:79:4f:
ae:f3:cd:2e:9b:68:d3:7b:a5:9f:08:73:70:87:61:
0b:2b:ab:a3:a2:9b:c0:1c:01:a1:20:53:3c:4c:f2:
0d:87:64:34:ab:6b:7a:86:8e:23:ba:b0:46:14:c7:
2c:b5:66:07:78:10:da:90:57:4f:fc:6f:f3:55:40:
85:3e:9e:ed:30:b1:93:8f:e4:d4:7e:95:cd:25:8e:
1f:2d:cc:7e:9f:e8:30:ec:37:38:e4:df:b7:29:fe:
13:65:36:78:24:8b:d0:84:ed:6f:ce:4d:22:ac:31:
58:25:cd:94:42:4a:39:3b:60:0f:c4:e6:40:46:5a:
a2:e2:7b:1a:6b:ad:fb:6b:95:1c:a3:34:f1:a2:c7:
07:5f:a3:a6:ba:75:ea:f2:b2:2e:d7:8a:34:65:18:
e9:5a:87:1a:68:8e:cd:a3:d0:59:27:9c:b2:a8:38:
12:fd:55:13:f2:91:05:43:f8:d2:37:ff:cb:58:29:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:0A:37:0B:87:D2:57:2B:4D:51:33:F6:7A:4F:08:EF:9A:71:C1
X509v3 Authority Key Identifier:
keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f8:93:47:fd:0e:f8:e0:86:d2:eb:fd:f8:b9:0e:c3:40:04:
af:d1:e5:cc:24:b8:8f:8b:ea:fd:e4:b5:37:e9:a0:5c:5e:92:
1e:c6:59:fc:1c:c8:d9:b0:1d:be:da:33:f2:59:50:c1:27:12:
78:2f:9c:ba:bf:bc:e4:30:73:16:f5:c5:e5:a8:88:f8:72:26:
c9:02:41:01:6a:b2:d1:9f:3e:db:31:65:59:12:f8:84:4f:37:
0e:58:71:11:98:34:80:4a:c3:94:df:23:59:b5:06:9d:c5:d3:
bd:dc:3f:0f:d9:84:39:22:66:c5:51:b0:b9:3c:ce:f1:47:23:
b3:81:b2:0a:6e:9e:63:74:2f:39:eb:3c:b5:67:9f:fe:66:f7:
52:dd:94:51:31:8d:d0:f3:4f:ff:23:2e:de:ed:6e:63:7d:df:
01:4b:45:c7:44:2d:c5:c0:e2:85:85:b3:cf:63:44:ac:7b:68:
14:ef:a3:cc:67:80:95:1b:ad:93:2e:c9:74:24:d0:af:a5:30:
58:68:1f:2a:a9:81:7b:d5:9e:6f:2c:5a:26:e8:ca:87:a9:a1:
3e:6f:e0:d0:c9:c3:d9:51:c1:07:41:83:4a:b1:79:20:80:6e:
85:ba:e2:17:00:af:f8:f4:ee:7b:ca:e4:31:5d:0e:cc:a2:08:
69:76:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:03 2025 by rpki-client