Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
File: YNExg9Od5pVlYCMefgMX5py8bA8.mft (raw, json)
Hash identifier: zvNh8p/Z6KVgnphxoKyoB1610BWLXuduQTuhX7y/ZaQ=
Subject key identifier: EE:17:7C:0C:10:87:91:AE:91:D3:89:A2:6B:7D:77:CC:B9:38:6B:66
Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Certificate serial: 1091
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
Manifest number: 1084
Signing time: Fri 31 Jan 2025 17:20:14 +0000
Manifest this update: Fri 31 Jan 2025 17:20:14 +0000
Manifest next update: Fri 07 Feb 2025 17:20:14 +0000
Files and hashes: 1: YNExg9Od5pVlYCMefgMX5py8bA8.crl (hash: c4ezOZVtlwod9w5/jzBl46jgj4RRMnRio7YY4EQJcDA=)
2: 1F8D757623B811E9971D8168C4F9AE02.roa (hash: T/B/35CfwwdqXePoF3h1HVhAJX4x/EEmRiwOM5XJuNE=)
3: BA310DEC23B611E98E5E6062C4F9AE02.roa (hash: l1VKJZ1xyO5pP88882DZ3CpkZe16EkwbV1eYRWz6QEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4241 (0x1091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Validity
Not Before: Jan 31 17:20:14 2025 GMT
Not After : Feb 7 17:20:14 2025 GMT
Subject: CN=679d064e-9d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a6:27:84:f8:34:de:6c:a0:e7:d4:fa:2e:e9:
a4:c0:07:c7:0c:61:6a:f9:43:82:e8:f1:32:b7:18:
d0:da:63:57:60:6f:06:0f:19:c8:23:34:bb:2f:b7:
dd:6d:aa:15:95:2d:98:35:b2:03:ef:58:13:c4:d7:
a3:8c:7c:6d:b8:91:40:6f:17:8a:cb:a6:34:51:89:
1c:fb:95:cc:1e:8f:4e:2c:44:48:2e:18:c4:5c:ce:
52:f7:56:76:05:42:6f:b4:cb:10:90:07:93:39:2d:
c8:97:85:0e:22:3a:f1:3d:fe:25:b3:95:f2:bc:d3:
0d:95:5a:db:92:e2:fe:b5:e5:ff:73:3d:aa:d3:a0:
6a:67:08:f5:ab:77:55:07:a5:72:9d:65:4a:7c:38:
f7:63:89:9c:3b:e7:c8:12:8e:4f:86:ea:11:2e:56:
01:61:2e:b4:55:96:99:1f:35:21:68:3c:9e:95:f0:
b6:e8:82:7a:7f:34:d9:32:a7:f2:14:ff:86:d1:3f:
37:23:e9:2c:75:a7:e4:06:a9:2d:a8:19:2d:24:f0:
06:f5:d9:23:ab:d5:8f:a3:82:db:92:ba:1e:b4:bc:
20:0b:5b:7a:41:51:fc:97:db:0e:d8:29:9f:b9:10:
70:aa:19:b4:f0:8b:a4:3a:ad:58:d0:36:8a:34:8f:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:7C:0C:10:87:91:AE:91:D3:89:A2:6B:7D:77:CC:B9:38:6B:66
X509v3 Authority Key Identifier:
keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:50:b6:8e:5a:cd:eb:5b:6d:f5:ea:5a:fb:34:47:18:71:6d:
cf:47:30:e6:50:18:6e:fb:97:58:07:03:a4:0d:c7:60:81:f2:
ff:f5:5a:49:3e:b0:c2:02:85:a1:86:73:66:c8:56:e7:e2:7c:
2b:1d:5e:41:b3:f3:81:60:a9:68:66:4f:71:a9:01:7a:b6:f5:
30:18:a2:f1:c6:57:1a:b8:59:a5:ec:67:fb:84:e3:b8:fa:12:
a7:58:a2:73:db:e9:37:59:4b:8f:03:aa:96:6e:ac:15:86:d4:
c3:12:1d:19:46:c3:2d:ac:54:00:1b:c8:cd:28:15:b3:50:51:
3a:6d:77:a6:8b:91:43:5a:e5:31:b2:1c:e9:a1:e0:1e:f2:5a:
91:4e:60:bc:13:fd:3c:04:16:71:27:4b:55:47:18:9b:03:2b:
24:01:6d:45:b6:d0:2c:dd:1c:44:64:fa:20:9f:cd:af:d0:a1:
bc:e8:e5:dc:cb:e9:48:9e:68:83:df:da:1e:47:e1:10:67:ad:
8c:67:ba:5f:b9:e3:83:e0:bf:d8:55:e6:e6:79:83:b3:5d:eb:
d6:9b:46:98:64:dc:87:b4:fe:3a:1e:cb:e2:34:63:de:72:2e:
93:90:11:2a:a5:db:23:d7:39:0b:f3:ed:f7:9d:27:2e:97:50:
bd:58:a5:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2
OUNCQzZDMEYwHhcNMjUwMTMxMTcyMDE0WhcNMjUwMjA3MTcyMDE0WjAYMRYwFAYD
VQQDEw02NzlkMDY0ZS05ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/KYnhPg03myg59T6LumkwAfHDGFq+UOC6PEytxjQ2mNXYG8GDxnIIzS7L7fd
baoVlS2YNbID71gTxNejjHxtuJFAbxeKy6Y0UYkc+5XMHo9OLERILhjEXM5S91Z2
BUJvtMsQkAeTOS3Il4UOIjrxPf4ls5XyvNMNlVrbkuL+teX/cz2q06BqZwj1q3dV
B6VynWVKfDj3Y4mcO+fIEo5PhuoRLlYBYS60VZaZHzUhaDyelfC26IJ6fzTZMqfy
FP+G0T83I+ksdafkBqktqBktJPAG9dkjq9WPo4LbkroetLwgC1t6QVH8l9sO2Cmf
uRBwqhm08IukOq1Y0DaKNI8swwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4XfAwQ
h5GukdOJomt9d8y5OGtmMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz
MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUQzMS82NUVGMjk2QTIzMTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVw
VmxZQ01lZmdNWDVweThiQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZULaOWs3rW2316lr7NEcYcW3PRzDmUBhu+5dYBwOkDcdggfL/9VpJ
PrDCAoWhhnNmyFbn4nwrHV5Bs/OBYKloZk9xqQF6tvUwGKLxxlcauFml7Gf7hOO4
+hKnWKJz2+k3WUuPA6qWbqwVhtTDEh0ZRsMtrFQAG8jNKBWzUFE6bXemi5FDWuUx
shzpoeAe8lqRTmC8E/08BBZxJ0tVRxibAyskAW1FttAs3RxEZPogn82v0KG86OXc
y+lInmiD39oeR+EQZ62MZ7pfueOD4L/YVebmeYOzXevWm0aYZNyHtP46HsviNGPe
ci6TkBEqpdsj1zkL8+33nScul1C9WKV7
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:57 2025 by rpki-client