Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
File: ylWUEuKiOAIalO8nGO2wAe-W6oU.mft (raw, json)
Hash identifier: pRIpL/JLmQGN4hMYcDrKP893C6bekHcZ4ikCzr+7i8Y=
Subject key identifier: 27:40:8C:0D:FF:00:86:56:E9:D9:BD:FE:EE:CA:9B:C3:B1:B0:2F:76
Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85
Certificate issuer: /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85
Certificate serial: 03CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
Manifest number: 03C9
Signing time: Fri 31 Jan 2025 00:41:25 +0000
Manifest this update: Fri 31 Jan 2025 00:41:25 +0000
Manifest next update: Fri 07 Feb 2025 00:41:25 +0000
Files and hashes: 1: ylWUEuKiOAIalO8nGO2wAe-W6oU.crl (hash: 39+yk7xWwZ7vQZEPMzpZXtKEnpVNj8nWRE5TVnjj++4=)
2: 4A9AA792720D11EC90C07770C4F9AE02.roa (hash: VxhE0yOw2UpFEmn9cUfGr5NqfhjBpOy+NCMi8LSn31o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85
Validity
Not Before: Jan 31 00:41:25 2025 GMT
Not After : Feb 7 00:41:25 2025 GMT
Subject: CN=679c1c35-1199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:e4:ac:e6:b7:1c:ee:a4:20:33:af:82:5b:
fe:d3:8e:35:b6:36:25:22:2e:10:b9:9e:a2:05:2d:
b7:35:8d:61:b3:d6:06:f6:7b:41:2a:6f:d4:15:fc:
5d:aa:a4:62:0b:18:fe:6d:98:ae:31:6f:36:bd:e3:
b8:cc:74:89:52:31:f3:f0:2e:37:8b:aa:8c:e9:9a:
6b:d2:ec:15:b0:d7:df:27:55:3f:5b:63:84:b2:05:
00:cf:aa:d7:0b:06:21:24:7d:99:14:97:d9:73:51:
85:e6:97:7f:50:8b:14:30:79:89:45:f4:87:1d:bb:
89:11:66:ba:4b:61:fa:ee:f0:99:d2:e5:1c:1d:0d:
4e:ae:00:82:d8:f5:2a:39:8c:17:1e:7a:c4:ea:e1:
94:85:9a:f6:46:bd:fa:94:68:7d:fd:f2:af:62:77:
65:96:e5:26:ab:9e:a4:71:36:61:ee:91:c4:d6:cf:
6a:cb:3a:09:4a:75:6c:cc:6c:39:0b:51:fe:71:5e:
da:44:ec:d7:b1:fb:40:ee:ca:0c:63:ab:6b:d6:07:
52:d3:f9:ce:de:2c:12:8e:e7:fb:97:ba:03:f5:64:
18:df:d5:95:8f:24:af:3d:c3:70:f9:5f:30:ca:cd:
00:13:08:1c:8b:18:d6:15:b4:d9:f3:eb:83:ee:19:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:40:8C:0D:FF:00:86:56:E9:D9:BD:FE:EE:CA:9B:C3:B1:B0:2F:76
X509v3 Authority Key Identifier:
keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:28:b7:e3:bb:50:a0:72:9c:cb:d6:e8:f1:a3:c2:9c:95:
44:4b:bf:ec:97:b1:ff:8f:27:23:94:0d:b8:8d:89:16:39:dc:
14:6e:4f:0d:28:3b:63:b3:ec:ab:16:41:3b:aa:bf:42:5a:4f:
a5:cb:72:6a:72:3e:95:23:2c:f5:7f:12:df:21:dc:7b:9b:8a:
a2:6a:45:21:57:0a:1d:58:c6:57:e5:05:d5:77:8c:b7:3b:15:
7b:29:58:64:e0:c1:f5:d1:6b:fc:df:bb:79:3e:47:71:2d:17:
36:81:b0:03:f6:ed:a4:c8:40:f9:41:6f:e7:ab:55:73:56:dd:
5a:15:36:0f:45:50:75:f2:57:fa:b2:f9:0f:12:8b:a4:81:ff:
56:a2:5b:2f:31:89:74:97:72:e9:e7:02:3d:59:14:54:6e:1f:
a4:9f:7c:43:db:db:f6:76:dd:95:ba:95:4a:f2:23:37:7a:a2:
bb:62:5e:26:70:fe:50:c1:31:13:8a:96:71:30:f8:d5:02:75:
df:fa:0c:de:0f:cb:c3:80:8a:28:cd:aa:44:46:21:ac:48:fc:
e7:40:eb:2b:6a:03:97:21:70:1a:67:b9:a8:ad:30:f9:25:64:
6a:22:79:6e:f4:4e:e3:a1:64:be:d5:26:35:62:ec:48:8e:77:
80:f7:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:01:51 2025 by rpki-client