Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
File: YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json)
Hash identifier: xne8UWzxQZ2aSTUMY1x9ham/8PWtF8+1h22kCem1LVE=
Subject key identifier: C8:9A:E2:51:F8:A4:04:F4:FB:34:94:50:52:EA:83:A2:17:2C:D3:77
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Certificate issuer: /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial: 045D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 00:14:10 +0000
Manifest this update: Fri 31 Jan 2025 00:14:10 +0000
Manifest next update: Fri 07 Feb 2025 00:14:10 +0000
Files and hashes: 1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: WZyLmerux/Fd/LFHfzYNugnDgw7sax8P6JYRkyXeJZc=)
2: E225E68E397411EC8120D135C4F9AE02.roa (hash: GWZiL4+KkXKacwwHdWBVfV3QtoEcyH45HgJbisXMlBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Validity
Not Before: Jan 31 00:14:10 2025 GMT
Not After : Feb 7 00:14:10 2025 GMT
Subject: CN=679c15d2-48c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:67:3a:39:03:33:9e:ae:04:22:ff:00:40:
ab:1a:41:8d:bf:d5:08:4b:13:97:a1:c9:a1:eb:a8:
53:45:22:52:d6:66:1d:db:38:e3:c7:20:e7:7e:e1:
0d:61:92:e5:4e:3e:ff:c3:68:07:05:67:f4:0c:b8:
b5:d9:ce:ea:f4:59:d8:6f:b0:55:73:60:f6:23:a2:
50:be:cd:82:de:e5:4d:2c:00:69:53:65:67:d0:dd:
a2:ca:23:be:ec:b6:1e:66:4a:29:3e:a5:a1:00:7c:
02:0d:cc:33:6c:53:4c:cb:9d:1a:1f:f7:e9:21:b0:
65:4d:0c:3e:a7:3d:c8:e4:44:e9:dd:fa:f9:fe:7a:
e4:17:a3:cd:1b:03:c1:99:e2:5d:11:04:75:98:60:
5c:44:a8:a8:f3:35:b8:6a:e4:37:95:c5:a3:5a:1e:
4d:b7:1f:73:79:3b:1b:86:d0:5d:f3:0c:3a:89:8a:
8f:9f:b0:11:2a:99:9b:ad:0b:19:2d:96:8c:21:0b:
5e:93:1a:7b:f3:cf:ce:ea:c1:ef:dd:7f:81:db:e8:
29:c3:2d:99:99:ff:58:cb:9f:ca:db:b6:04:2b:c5:
41:de:2b:da:b0:36:a2:7f:9e:12:7e:91:3c:e7:ed:
1f:25:98:ca:a2:fa:cc:58:84:de:1f:14:95:8b:bd:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:E2:51:F8:A4:04:F4:FB:34:94:50:52:EA:83:A2:17:2C:D3:77
X509v3 Authority Key Identifier:
keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:d6:94:de:9d:d0:77:ba:c7:0a:93:ce:d6:8f:21:27:40:
7e:be:c2:88:06:99:fb:dc:fa:46:76:e0:b5:6a:65:c8:b8:b8:
d5:d2:4e:67:20:7e:3d:3f:4c:2a:24:b5:76:7b:13:b2:bf:a6:
5f:c2:61:35:01:77:29:2e:25:cc:db:b8:8f:9e:24:b9:bc:64:
fb:44:44:7f:7f:dd:9e:51:f0:2e:15:ea:d2:56:8d:63:51:a4:
fc:9a:d3:0f:10:c0:02:49:75:0f:d2:40:87:66:91:af:99:73:
45:7e:73:5e:a1:dd:fc:bf:45:8e:df:e1:a6:9c:3e:42:03:da:
73:67:8c:db:fa:c9:85:1d:be:bc:be:60:74:fb:59:a9:8d:c7:
72:67:75:8d:40:a3:38:8e:0b:67:ba:05:18:9c:d6:24:b2:fe:
3c:42:be:fc:94:9e:a7:63:8f:43:36:3e:2e:61:f8:d3:f0:78:
86:d5:b8:8a:2e:b7:d9:91:ee:44:f4:01:f5:d6:45:e2:dc:25:
c8:56:82:5d:1f:87:20:5c:cc:4f:0e:d8:c4:9d:c2:e8:50:fc:
82:c1:79:df:ff:36:d4:2d:02:1a:2d:86:99:2e:0d:e0:0d:eb:
e8:a6:53:d1:8a:7e:fb:a5:71:47:31:3a:bc:4e:c6:d8:5c:b9:
a0:7f:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:53:52 2025 by rpki-client