Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File: yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier: KiBknqZat9X39sq7G/+VRmw9XhtYN602gywMUX+R/Ps=
Subject key identifier: AC:20:01:1F:13:8B:1C:7C:76:AF:EC:01:53:56:60:0D:71:35:DC:62
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0B3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number: 0B27
Signing time: Thu 30 Jan 2025 19:16:58 +0000
Manifest this update: Thu 30 Jan 2025 19:16:57 +0000
Manifest next update: Thu 06 Feb 2025 19:16:57 +0000
Files and hashes: 1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: V+vluxfYJAcQS26Tdd5m4C5hf7QL2eQaQWmPqVo74yY=)
2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: 9VkEhYHF3f19k3ccapKOmWUnQN3qe0LKW0bGLzgAj2Q=)
3: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: UVKRHigELp+/xtOJ9hxFUzKgCIBL/cBJ5XfcHMgTaRI=)
4: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: qEnxbXTZjYArRGRzDWZrlZe2tR2ZHb8POdNuo8ieu30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Jan 30 19:16:57 2025 GMT
Not After : Feb 6 19:16:57 2025 GMT
Subject: CN=679bd02a-1ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:ed:24:c9:9e:d6:d1:5b:d8:90:f8:86:d0:
62:49:5a:ea:1a:d5:10:50:ee:fa:9d:9e:04:fc:d6:
fe:4e:fd:bc:58:d7:5f:ee:e6:98:31:55:b1:0d:e8:
46:08:b4:e6:22:ae:a4:7d:33:54:d2:90:0f:f7:2f:
d9:e9:55:48:76:30:84:82:25:c6:51:1e:d7:58:5d:
a0:68:5f:e4:4e:2c:7f:39:6a:e7:88:15:b4:f8:55:
93:0b:a8:a0:49:0e:02:58:72:fc:c5:84:21:84:08:
ef:7c:a2:e0:6c:b3:a4:5a:7e:07:88:f6:31:d5:2e:
04:02:6d:60:6f:53:77:78:20:c2:bf:bd:a3:f9:3f:
44:01:af:2d:90:23:9b:2a:ce:30:8d:1c:04:3e:36:
2f:56:3a:21:c5:5f:6f:5b:1b:40:f0:76:95:32:f0:
46:3c:d9:10:6c:6a:d6:78:79:f0:c0:8d:7f:49:0c:
36:6e:ff:fd:62:bb:e2:e7:4a:c5:53:dd:cc:2d:5e:
8d:90:32:61:93:18:8a:d7:b4:38:b0:bb:71:9b:a5:
21:29:53:8f:93:c3:ee:3d:f7:97:28:52:1a:1e:30:
31:8a:af:1c:21:de:5e:9d:48:70:17:8f:c1:ca:30:
21:45:da:74:02:96:06:44:31:0c:12:0d:12:4f:83:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:20:01:1F:13:8B:1C:7C:76:AF:EC:01:53:56:60:0D:71:35:DC:62
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:5e:93:49:57:dd:31:30:80:11:dc:f4:31:b1:e4:4d:db:
48:32:fb:09:3f:3f:d7:af:5f:63:3c:2c:8e:e4:c1:b9:39:2f:
47:2e:59:b2:08:82:d6:13:b6:65:4a:dd:59:2b:42:a3:d3:27:
2c:60:7b:86:7d:c2:7e:11:2e:83:95:20:06:f6:02:69:4d:15:
c4:94:07:f4:90:d0:92:69:ab:f8:0c:ab:27:31:12:f3:bf:5a:
02:b2:6d:ec:02:df:d9:0c:70:14:41:ec:cc:e4:f6:07:45:d3:
85:52:df:4f:ac:9e:65:ad:36:0a:98:08:01:b0:36:91:03:d7:
f5:c8:c5:b7:d6:72:88:57:fe:54:37:56:57:ad:de:ba:c0:9d:
d1:f1:5e:f3:dc:d0:01:79:46:e9:28:ee:32:91:db:ea:e8:12:
90:bc:44:89:f4:d0:ac:3d:f2:51:d2:24:03:db:43:3d:96:79:
33:83:7e:eb:66:0f:41:29:b0:89:60:7a:27:99:b8:55:59:3a:
cb:5d:04:f2:89:f7:d3:8f:9f:ca:5f:9f:3e:fe:cc:aa:9c:c1:
30:d0:ae:4c:6c:18:d0:d1:14:c7:8c:6a:06:2d:b2:41:80:3e:
fb:d8:db:f2:bf:8d:d3:37:5f:08:0c:39:1f:50:42:b6:60:7c:
29:8b:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:10 2025 by rpki-client