Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File: Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier: y+8DGkMObYXseK7WZM4kRAlpfIvxz1NnDONHZPcm/uM=
Subject key identifier: 0E:B2:FC:EA:4F:87:32:21:B8:89:21:A2:8A:8C:4A:42:09:A3:8F:BC
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number: 022B
Signing time: Fri 31 Jan 2025 02:02:09 +0000
Manifest this update: Fri 31 Jan 2025 02:02:08 +0000
Manifest next update: Fri 07 Feb 2025 02:02:08 +0000
Files and hashes: 1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: +rtSt5f/wVE8MZUrbn8Z6cD8LbZN6nM6FwGk20PTGxE=)
2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: I/KyU3geIWwBo8ZaiWc/F+HF/TbeVrVlUgdVYuSp+mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Jan 31 02:02:08 2025 GMT
Not After : Feb 7 02:02:08 2025 GMT
Subject: CN=679c2f21-2a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:d0:53:e7:2c:1d:9e:43:72:82:1b:62:ac:
e1:1c:1c:50:c6:48:b2:1b:0c:04:87:54:b8:10:8c:
c6:b6:35:91:86:91:96:4e:47:07:04:bc:9d:0a:1e:
cc:a0:f2:47:1c:8b:46:5d:d5:86:17:bc:b9:7a:f2:
81:83:29:fa:6b:e3:b5:21:fa:67:ea:0c:d1:c2:da:
97:9a:f3:1d:18:59:88:fe:7b:3f:da:28:56:b1:99:
16:1b:b7:66:00:f4:97:e4:30:05:82:db:3f:73:32:
6d:d0:48:2a:2f:4a:24:8b:9d:8d:78:ab:3e:bd:e5:
aa:59:db:57:29:8c:c2:33:a3:e8:a2:a4:0d:e1:a8:
ac:85:f6:f8:e8:ae:60:8d:64:cd:57:36:f2:b9:47:
86:80:7c:13:22:f8:15:8b:d3:1c:dd:a6:c2:5b:33:
6b:6e:4a:87:2a:88:50:a8:44:4e:7d:ff:5b:db:55:
86:cc:78:0d:17:57:f9:a4:50:e2:dc:26:4b:e7:e4:
f8:22:a1:d1:d5:bc:d5:87:ca:a8:b9:d4:a4:6a:25:
d1:6b:a1:37:17:e5:81:4c:74:b4:d8:c3:c3:2f:79:
e6:b5:0f:a1:26:30:cc:33:aa:2a:37:51:b9:2c:9c:
0a:47:35:51:be:8b:1f:15:59:f1:57:d8:ff:11:58:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:FC:EA:4F:87:32:21:B8:89:21:A2:8A:8C:4A:42:09:A3:8F:BC
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fb:97:90:68:f0:68:00:ab:bf:4e:9e:70:a8:5e:b8:e8:df:
be:7c:3d:66:fa:a6:ce:12:6c:bd:36:5c:30:89:1b:56:77:60:
c2:b4:ac:b0:50:72:c5:8a:eb:24:32:46:d4:87:e8:fc:a8:05:
91:3b:a3:cd:c0:50:30:a0:2d:98:68:57:64:64:0b:a4:c0:f6:
c1:c3:88:49:23:f0:43:ae:69:65:87:c2:27:00:7b:b2:84:46:
b0:71:42:2f:7a:5e:2f:c8:3f:0b:4f:2a:d5:40:2d:51:3e:7e:
6a:8c:94:e1:a9:c8:62:10:c8:30:42:c8:f4:80:49:60:f4:39:
40:78:16:00:58:25:70:da:7f:06:f2:0d:d3:9d:87:c1:bc:b8:
e9:00:3d:16:14:2f:6b:95:f1:92:59:ab:11:27:63:44:97:2c:
98:74:ad:ab:02:c0:4d:a2:de:b2:cc:5f:4f:f5:9e:13:cc:98:
80:a0:cc:72:fd:8c:fb:38:33:3a:19:4e:95:f7:ea:d6:cf:14:
d6:4e:47:6d:9a:af:25:18:fd:25:5d:0d:cb:4f:28:a8:ad:dc:
42:73:21:2f:a9:e2:56:a3:9e:cc:5b:2d:15:56:30:9e:5f:96:
04:11:6e:c8:1b:aa:c2:99:6d:5f:02:a5:cd:53:47:95:5d:96:
04:1f:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:23 2025 by rpki-client