Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
File: y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json)
Hash identifier: OXjJB3yO3QfC3bGXAyd6Iv0B2rMONYtB+lT6TLsjwUc=
Subject key identifier: 96:28:97:EF:B4:51:1A:B1:C7:D1:49:62:26:5E:BB:82:0E:90:24:E9
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1AEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
Manifest number: 1AC3
Signing time: Fri 31 Jan 2025 16:20:49 +0000
Manifest this update: Fri 31 Jan 2025 16:20:48 +0000
Manifest next update: Fri 07 Feb 2025 16:20:48 +0000
Files and hashes: 1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: zDVFmiF6y3QQ9xo0QfSaoq3stiaAjNhfm021QxKjnXU=)
2: D90961489C1311EFA0BF1480C4F9AE02.roa (hash: Jv1d6fF3qu1qMz0c/kGUVQ3xOsIZk2UWH2dC2+4vagE=)
3: DE0A76C805B511EE95562E2AC4F9AE02.roa (hash: hMIakiTTivB+fRa4Rnc2jL//XFH58YMCoj5LWIbNoBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6895 (0x1aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Jan 31 16:20:48 2025 GMT
Not After : Feb 7 16:20:48 2025 GMT
Subject: CN=679cf861-b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:bf:93:81:fc:3d:f1:e9:3f:e6:91:af:72:
bb:24:65:63:56:66:69:3a:9b:9c:23:e6:57:88:f0:
15:52:c0:c3:5a:39:33:a0:6c:63:b7:42:a9:62:98:
91:54:d2:fe:ab:12:f4:66:12:74:2a:94:e9:04:05:
ca:f8:29:ac:81:3a:cf:d3:d0:8b:b5:e8:4e:8a:3c:
19:8e:16:4e:55:1f:e5:57:5b:19:4a:1f:a4:f1:bb:
06:48:8d:1b:d9:77:50:21:51:79:29:22:b4:68:c1:
97:2d:a0:06:b6:01:25:eb:e8:49:fb:c5:51:c2:e3:
18:71:a6:3e:f6:de:db:25:97:5c:dc:5e:51:d7:7a:
4c:df:65:ab:05:42:67:b0:08:f0:8a:83:47:42:ee:
81:2c:af:5f:02:a8:7b:6e:b9:7b:e3:2f:4a:b9:f0:
3e:38:47:63:32:ae:ac:6c:9a:2b:72:4a:16:f9:6a:
04:b6:f0:de:18:e3:60:52:c8:bb:db:ef:9c:42:b5:
58:89:d8:20:c3:3d:6a:ed:d9:49:05:af:ed:47:e0:
66:cd:92:70:cc:bd:2a:de:5e:bd:de:bb:17:1c:00:
e8:2c:da:86:9e:e5:04:d9:ce:32:6f:96:10:a6:6f:
f8:4d:33:ca:12:e5:c6:3a:88:f7:b6:66:f6:d3:c8:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:97:EF:B4:51:1A:B1:C7:D1:49:62:26:5E:BB:82:0E:90:24:E9
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:2f:40:c8:f1:e1:e8:e2:4b:8f:a4:b0:be:ae:0e:43:e2:
83:88:c1:6e:07:b9:e1:66:7c:d3:3e:b9:14:2e:5c:68:f1:0e:
e7:06:3c:4e:b3:45:9f:62:2b:d1:e1:6e:ac:9e:eb:fb:29:71:
27:30:08:88:c9:3b:b6:92:ae:27:6d:4c:1d:84:b7:0c:67:7c:
0a:ba:a9:52:9b:bd:61:24:2d:8c:12:49:c1:bb:6c:2b:fa:b9:
e3:16:ca:6e:15:2e:55:c3:34:82:c0:2e:08:92:70:7c:1c:f9:
ee:79:0c:f4:f5:8c:82:c5:c7:21:87:7e:e1:ef:44:4c:3d:03:
e3:30:1d:cf:b7:9d:67:27:9b:a5:d8:68:66:2e:98:e0:ce:ec:
f1:f7:9f:22:8b:11:f7:5e:75:08:9d:3a:a4:39:86:d0:68:99:
5d:e7:ec:96:0c:ba:a5:2b:40:16:20:87:15:03:a1:e7:0d:9c:
0f:32:02:62:f5:49:14:fe:f4:6c:6a:be:82:4e:22:5e:53:f0:
a3:dd:64:cb:5b:03:c9:59:96:ab:06:32:4d:ae:6e:86:bb:84:
df:30:23:e1:4e:78:b1:33:f7:19:61:4a:aa:20:e9:09:ee:cf:
65:89:de:f1:0b:45:84:97:ea:dc:f4:56:88:69:7b:7e:24:7d:
1a:48:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:33 2025 by rpki-client