Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier: aY3wx67Ikc8X9qPe2tnLzMmOtZJj7sXe3f7XnMADFXw=
Subject key identifier: B3:17:BC:5B:39:5B:28:5E:D4:C6:3B:FC:EE:73:D6:C0:55:4A:CF:83
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number: EE
Signing time: Fri 31 Jan 2025 04:27:21 +0000
Manifest this update: Fri 31 Jan 2025 04:27:21 +0000
Manifest next update: Fri 07 Feb 2025 04:27:21 +0000
Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: aWcnoWgxl//XLWd1v3+rr4g0eSTIgyxOr4LKtr1W8NA=)
2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Validity
Not Before: Jan 31 04:27:21 2025 GMT
Not After : Feb 7 04:27:21 2025 GMT
Subject: CN=679c5129-6185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:41:c8:e1:64:89:67:de:e8:e6:ee:ee:ed:
1a:e5:82:41:35:f3:39:65:d9:56:d7:a9:71:bb:be:
8d:53:c1:fd:7f:2a:a9:57:8e:25:4a:e6:5e:b5:82:
b4:45:99:82:22:9e:b6:6e:e1:fe:7c:80:46:e6:62:
64:a0:f6:84:78:96:ad:cb:3f:c8:02:4a:ee:70:94:
04:12:93:06:47:96:0f:7c:d5:6b:23:5f:34:fd:c2:
23:6b:32:dc:65:d9:eb:54:c2:b7:d0:b8:d8:c8:8f:
db:4a:3c:7b:c7:61:20:1d:8a:cc:48:2b:54:0c:a1:
25:77:be:4c:22:2c:80:e4:69:2c:a8:45:36:6a:da:
68:2b:75:1a:a9:7c:2d:9f:44:f5:6e:94:27:02:70:
a4:14:2a:e0:44:23:9c:de:54:9b:0d:da:18:ba:f8:
eb:6e:a9:70:da:e3:52:22:73:8b:56:c1:2b:d1:4a:
d8:c0:87:ce:63:f2:ad:e3:c7:01:fb:73:75:b9:a9:
44:ea:14:c8:57:6d:6b:11:7a:bc:75:89:fc:e0:83:
9c:5a:88:db:30:88:50:98:7f:f0:16:9b:49:ad:da:
9c:48:20:95:13:51:0f:30:f0:53:00:bc:23:c0:80:
59:3b:ac:7b:93:19:a3:86:fb:24:e9:0c:ce:46:fd:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:BC:5B:39:5B:28:5E:D4:C6:3B:FC:EE:73:D6:C0:55:4A:CF:83
X509v3 Authority Key Identifier:
keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:3d:14:55:6d:c7:72:4b:64:5b:63:16:97:1c:94:d5:5c:08:
db:10:92:e8:d8:75:84:80:38:6f:97:ef:ba:7e:d4:2c:6b:6c:
8b:59:01:36:94:e1:24:d0:ba:89:27:6c:71:f7:59:40:a3:4f:
0e:43:f6:05:10:a2:f4:10:06:84:1e:ef:d4:19:e5:cf:24:fb:
19:16:3a:4c:e3:a7:8c:e0:c5:1f:4c:fc:48:9c:cc:6b:28:27:
26:6a:68:ea:30:73:af:9e:8b:cc:c5:85:ba:1d:c4:3c:83:df:
12:b9:2a:5b:d0:6e:1f:e3:3d:e6:09:cc:76:5a:68:39:7f:c1:
57:6e:93:fe:3d:d1:52:43:55:68:6a:66:7e:74:5e:01:a8:00:
b2:09:26:8e:ed:3c:66:77:4a:65:72:14:19:c5:cd:af:96:a4:
9a:98:3d:d6:41:2f:19:fc:80:bd:4c:fd:4c:f3:8d:00:06:8e:
94:90:14:ef:bd:e8:fe:a9:ed:06:9c:66:42:cf:c6:43:51:60:
56:a7:13:0f:75:b6:c4:68:ee:6b:f1:36:a4:f8:2f:a2:52:c3:
64:cc:65:b8:3e:4c:1c:f0:26:b7:fb:f4:0b:2f:94:03:2a:c9:
91:10:e9:06:bc:07:80:c1:c9:6e:07:24:f3:f4:b2:ec:29:12:
56:78:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:49 2025 by rpki-client