Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: amfcgGFykxiWhhEFgOjm1eup8sAlzFvPH+MfS2l30Cs=
Subject key identifier: FE:E3:7D:3F:75:2B:07:EE:68:8F:D5:87:78:01:DC:52:D8:E8:94:8A
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0BC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0BB7
Signing time: Thu 30 Jan 2025 18:53:33 +0000
Manifest this update: Thu 30 Jan 2025 18:53:32 +0000
Manifest next update: Thu 06 Feb 2025 18:53:32 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: S5Cg+ENMULX7ZFWUAgzYd7xY929SkJPNtMqpLbnJZrY=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: 7P+2TWLqfeVNyGM33Rg8heOwqWfXOoMC0kS7Ev1IOzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: Jan 30 18:53:32 2025 GMT
Not After : Feb 6 18:53:32 2025 GMT
Subject: CN=679bcaac-9663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:05:19:f8:fd:0f:82:05:b0:0a:44:1b:3f:
b5:06:40:96:f9:5e:3e:5e:b3:e0:c6:30:e5:2d:fe:
a2:77:aa:e3:b2:61:c7:e4:25:cd:3f:3a:b6:33:2a:
e2:4b:c9:7f:02:5d:8e:14:16:34:23:89:b4:f9:da:
39:dc:e2:6a:79:0e:25:93:a0:61:6a:0d:4a:05:4b:
4b:ce:76:80:ea:03:7a:5a:e4:83:ca:df:da:b3:90:
c1:ca:c1:b0:87:fa:c8:65:48:5c:ca:83:5d:9e:d9:
64:e4:78:60:f6:aa:3f:34:99:49:6a:61:19:fc:85:
c0:af:14:72:70:19:99:0e:68:cd:d2:cc:26:c4:a5:
57:c5:14:0f:9f:2b:4b:6d:c2:e1:aa:13:a3:de:d0:
c0:b5:24:c4:e1:c5:01:0f:a0:e7:27:40:03:93:8d:
5f:e1:7d:c0:4a:71:9c:37:0e:2f:f3:a0:3b:23:fc:
1a:ef:c9:14:42:28:25:9a:78:b9:b3:2e:06:91:94:
26:82:84:2c:d6:cb:c1:c7:05:49:e3:88:cb:df:71:
7f:90:8b:a5:23:eb:67:3e:b7:4a:36:f2:ac:07:bf:
85:54:3c:80:8b:1c:21:10:c5:30:ec:31:ee:4b:a4:
95:e6:a6:4b:26:be:5e:eb:d3:27:5d:ff:ea:7c:41:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:7D:3F:75:2B:07:EE:68:8F:D5:87:78:01:DC:52:D8:E8:94:8A
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e4:6f:d7:a2:5b:c7:03:6c:14:45:73:4d:cd:ac:d9:e2:d9:
66:d4:7b:52:07:31:e7:de:4c:8c:42:bf:d6:ef:4e:2b:8d:32:
c9:af:78:9f:84:c9:d0:ec:20:32:36:e4:38:72:35:9f:0c:fe:
e8:64:8f:73:7d:6f:dd:2c:ba:36:c3:59:72:a5:00:66:ad:12:
4f:a3:04:40:a3:99:51:de:08:e3:8b:8c:f9:d6:e5:4d:f4:78:
b5:05:7a:5f:72:4a:6d:5c:6d:94:33:32:d9:6b:d8:11:f8:63:
15:8b:95:cd:72:24:de:d2:a1:24:9b:ea:be:59:38:d9:79:27:
3e:94:8e:4a:3e:18:91:c3:a6:6b:45:62:1d:d8:13:23:62:3e:
43:7c:18:1a:6a:82:96:b7:55:0e:91:5d:e1:b8:99:e4:c4:86:
e4:e9:8b:db:c3:ee:f0:95:40:d9:de:b2:d6:46:83:bf:16:56:
84:95:11:18:9b:fa:28:c3:15:23:2a:34:75:98:ee:9e:2c:ef:
9c:3a:ce:a9:ea:f8:95:3d:40:dd:f8:fb:a7:1a:92:0c:da:14:
f8:2b:f4:cf:ef:89:22:bf:de:3f:75:bc:6c:33:9a:35:ff:86:
93:ac:ac:66:72:36:d9:d9:a2:b9:4f:91:79:3b:11:5d:b8:2d:
d9:8f:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:58 2025 by rpki-client