Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File: zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier: 52KbEdSaqtEM1ruxANvqWuc7NYKT6C1XeU/TWVRUtvc=
Subject key identifier: 5C:57:E4:90:FD:5A:2B:7B:29:CB:FC:0E:74:90:16:6B:E5:D7:F7:46
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer: /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number: E2
Signing time: Fri 31 Jan 2025 04:42:36 +0000
Manifest this update: Fri 31 Jan 2025 04:42:36 +0000
Manifest next update: Fri 07 Feb 2025 04:42:36 +0000
Files and hashes: 1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: ufd70v/p7Zkgo7XS+SAF/wTGU3Xt9Gdr/Xm9ZTNs5Ro=)
2: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: 05BxmRyvKNcOlG0da2lnXsYOxEsMKdSx2ZRkaVaMWv4=)
3: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: cOcYEcKHuf/JYD0AEBC5IpcPkABHQnNi85MejRVjkMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Validity
Not Before: Jan 31 04:42:36 2025 GMT
Not After : Feb 7 04:42:36 2025 GMT
Subject: CN=679c54bc-6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:3a:0b:46:06:62:c7:8d:7d:c2:51:6d:5d:
0e:60:43:25:6c:b3:da:98:ae:c2:69:e8:1d:74:98:
82:a6:36:97:00:26:9c:fa:42:42:99:db:b7:1f:c0:
d6:41:01:86:03:1a:72:b3:46:f9:49:9a:dd:de:ee:
ad:27:27:a8:6e:19:e4:7d:ce:1a:22:cd:3f:e0:4b:
5c:6b:fe:30:9c:ef:35:5b:75:2c:89:f0:d9:bd:03:
1d:1a:32:77:d0:cc:b1:ee:6e:ba:5c:ef:f5:38:e0:
9b:c9:46:ec:92:c0:73:36:26:5c:b3:fa:c8:5c:6d:
10:4a:d0:a0:f6:f1:b0:ee:31:21:25:b8:5b:d5:f1:
96:73:05:97:c0:5b:e8:ee:27:4e:47:92:cd:2a:20:
dd:c8:8e:34:fb:e9:0d:28:91:f2:c8:8c:1e:0d:6b:
eb:b3:e3:79:92:da:16:de:ea:ef:2b:67:c8:a9:01:
2b:a1:80:2e:2f:b5:56:8b:51:8c:89:60:63:d8:c7:
a4:a7:0e:18:39:4d:06:5b:c9:e8:89:4d:0a:35:7a:
8a:67:c0:31:02:d5:e6:44:9e:7d:76:78:a2:b1:8d:
34:a2:73:62:b4:27:d7:be:fa:33:7c:ac:60:df:34:
26:37:7a:24:2f:63:7e:a4:f6:95:0c:05:74:bd:f6:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:E4:90:FD:5A:2B:7B:29:CB:FC:0E:74:90:16:6B:E5:D7:F7:46
X509v3 Authority Key Identifier:
keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:56:5f:13:26:6b:79:f8:d7:bf:c0:0e:07:c4:62:7b:d3:
17:46:5a:24:80:f0:7b:eb:30:7c:83:45:cc:30:76:3d:c9:1f:
f1:7b:49:21:cd:64:68:81:d2:20:2f:7a:66:4c:27:d4:b2:99:
b2:62:3e:8e:0d:ba:b7:9e:92:04:07:c3:2b:71:7c:47:ae:24:
b0:e7:6d:c7:db:1f:0a:ed:b7:24:fa:a0:11:9f:3d:48:3f:31:
dd:91:fa:67:fb:01:28:58:69:2c:1f:68:d9:68:b4:4b:0b:59:
b0:70:b0:1c:30:f3:3d:bf:ff:e7:c2:aa:9d:06:6d:58:09:ec:
fb:79:5f:3c:a1:5e:d8:9a:b2:c6:83:c4:ba:e4:ed:c4:4a:98:
7e:e5:f7:40:e7:e8:e2:62:59:f1:34:69:6d:cd:5c:75:31:6e:
fe:d7:f2:14:7c:78:a8:67:d9:76:f6:ba:84:90:f1:25:df:a5:
91:44:af:17:57:28:fd:b6:bd:0e:dd:38:78:55:bf:3a:df:0f:
56:30:9b:54:92:c8:ee:77:d3:cf:5c:0e:a4:1e:a9:0c:c1:58:
99:ed:de:3d:ca:32:86:83:d6:3a:3c:e2:f1:91:bd:52:f1:b4:
36:91:6c:01:b0:9a:c4:b8:35:53:f1:2e:4e:21:01:22:02:3f:
3f:e8:78:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:35 2025 by rpki-client