Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
File: D60b00YYTHGSfILGHT-m1-Ry7p4.mft (raw, json)
Hash identifier: jFEc3TySkZCIcNYlrVsj4wcSD1dMbkNLKvOq7DZ/OV4=
Subject key identifier: 97:11:8D:26:33:80:3F:FA:83:6D:C2:23:BE:30:4D:FE:B4:11:7B:A9
Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Certificate serial: 0894
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
Manifest number: 088E
Signing time: Thu 30 Jan 2025 20:38:32 +0000
Manifest this update: Thu 30 Jan 2025 20:38:32 +0000
Manifest next update: Thu 06 Feb 2025 20:38:32 +0000
Files and hashes: 1: D60b00YYTHGSfILGHT-m1-Ry7p4.crl (hash: QW1ISwc0CbrvpUwla31Sm5EFZL0MIAOBn9mdr0QSbOA=)
2: BED97520B1D911EA912C632EC4F9AE02.roa (hash: RzLAz49uNYEbzjghLROSt26QTaPjJAMTg8PAlAw1ytU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Validity
Not Before: Jan 30 20:38:32 2025 GMT
Not After : Feb 6 20:38:32 2025 GMT
Subject: CN=679be348-d65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:e7:9f:36:06:75:d9:b7:a6:57:87:62:a9:
1b:1b:10:0b:a7:b6:30:9d:cb:b0:c6:ea:c8:95:58:
0e:2f:7f:07:e4:d3:82:60:0f:2c:1a:8b:87:c2:b3:
8e:85:c7:91:16:61:7b:8b:fe:42:50:f4:8d:66:88:
04:b1:14:82:24:1e:06:9b:81:25:16:8d:3d:b7:a0:
b6:a9:0c:f2:c7:c8:56:0c:6a:f4:bd:01:0c:86:e1:
f1:0e:ea:76:0e:31:6e:6f:09:d2:8e:cb:56:d2:f8:
5f:e3:1f:3d:84:ee:7e:dd:66:0d:81:aa:c6:3f:6f:
ee:37:95:96:b2:d2:df:60:30:52:bd:d7:52:ea:27:
6f:d3:28:92:39:ab:65:b8:ab:39:a1:58:08:12:2e:
e0:07:75:8e:11:ce:c7:de:00:30:e3:4f:65:93:6a:
f5:81:82:f9:cb:2a:53:a8:94:3e:9a:79:51:4d:87:
b9:39:f5:cc:3f:28:d9:7c:6d:ae:3e:c8:81:69:61:
1b:6e:28:33:d6:76:de:c2:03:55:5f:df:14:5e:78:
86:70:0c:b7:e9:ff:f8:e6:9d:37:89:98:9a:37:77:
d3:6d:5f:e5:db:1f:cd:ef:40:31:a4:df:39:b1:e1:
75:2c:b5:da:23:31:7c:77:94:2c:c0:e1:e3:c0:50:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:8D:26:33:80:3F:FA:83:6D:C2:23:BE:30:4D:FE:B4:11:7B:A9
X509v3 Authority Key Identifier:
keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:06:11:14:1e:d2:7a:d3:69:e1:d6:ac:3d:2b:4f:fd:e8:07:
a2:fb:10:d8:70:e9:1c:14:6e:15:bc:61:84:d5:bd:cb:06:f5:
81:ab:e1:e6:17:05:1d:83:23:ff:15:e3:b3:be:28:01:0b:10:
4d:dc:32:f9:47:a9:25:b9:05:8f:6b:05:64:f4:55:6f:2f:b9:
3e:5d:0d:b4:ec:d7:bd:ba:ca:0d:34:5e:49:b5:e8:40:62:0a:
b2:b8:26:a7:4f:a7:25:21:a5:af:1f:be:c5:1a:d1:27:20:23:
4b:7f:9d:38:e5:4c:96:c8:cc:41:a7:e9:65:1c:49:4c:49:d5:
86:b4:8e:79:ba:8e:d2:5e:c8:87:a4:ab:9d:e3:e2:22:81:45:
f3:ec:c9:97:55:09:3d:86:68:ac:53:82:6b:39:a9:bc:a7:37:
2d:87:c8:5b:52:7f:ab:44:68:2d:56:2f:eb:f9:8b:2a:d7:49:
ea:56:1e:a6:35:75:47:31:3c:1d:22:bc:b8:17:1a:25:8d:c3:
4f:8a:73:a5:24:25:10:ff:4c:b4:62:50:f7:e6:98:a5:e2:f1:
95:da:fa:00:4f:a1:d7:2f:0a:77:7c:7d:23:b7:89:ad:e4:95:
5d:0c:27:e5:7c:75:9f:ec:e9:7c:92:cb:3d:11:cc:8a:dd:17:
1f:10:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:25:59 2025 by rpki-client