Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier: I6/v15pR1RKS70kk7ESHWqKaUKOOta2m7qkiEdOoBX0=
Subject key identifier: 51:C9:52:D5:23:B3:B2:17:11:70:67:B8:87:D7:AD:94:0F:14:DD:7E
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number: 012E
Signing time: Fri 31 Jan 2025 04:02:59 +0000
Manifest this update: Fri 31 Jan 2025 04:02:58 +0000
Manifest next update: Fri 07 Feb 2025 04:02:58 +0000
Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: CRPyuo1VAc4ZO4zLBknoWpXBRVS79VypQcLb63NLlOk=)
2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: n+UG6V5XV7UFganlBH1N62nTVgBD1jdXRIOHq8v8JMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Validity
Not Before: Jan 31 04:02:58 2025 GMT
Not After : Feb 7 04:02:58 2025 GMT
Subject: CN=679c4b73-c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:5e:67:24:35:ab:50:6f:5e:55:f4:de:ef:
d0:d6:d8:85:7b:9a:9b:bc:d5:7e:42:a3:55:3e:19:
ea:81:46:02:83:18:0b:52:c6:56:c9:54:c7:d8:91:
34:78:7b:4e:2e:93:a0:f1:a5:3a:c1:8d:a2:ed:42:
b9:b9:a1:9e:53:69:f4:78:5a:c9:74:4f:bd:95:cc:
96:a3:20:eb:c2:82:9d:b2:32:5b:5b:d1:84:61:b3:
83:14:8c:5d:b1:2f:a1:dc:a3:fa:33:73:de:ae:0a:
21:a8:19:5a:78:27:34:60:31:73:aa:72:d7:0d:85:
99:1d:ee:e5:b0:bf:c8:6b:40:c2:45:7c:ee:5b:3b:
14:b0:e9:fb:ab:6d:97:53:64:3b:28:be:eb:6d:8c:
3d:cb:32:fd:9c:f2:fc:9d:89:40:24:cd:bb:ee:5f:
23:96:12:9f:2c:ac:59:9b:37:f9:39:b2:2d:e4:2d:
d8:20:c6:8d:75:95:d8:7c:a8:e4:1c:cb:2a:2e:91:
60:96:88:4e:e7:3b:89:42:2b:88:27:f6:85:88:f8:
c6:96:4d:51:19:11:46:30:76:83:a9:25:b0:66:e5:
d8:d4:7c:c1:b5:0a:6b:70:51:33:ad:98:4c:11:57:
af:75:27:e7:33:ab:99:4d:fe:09:1e:cc:68:c6:5d:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:52:D5:23:B3:B2:17:11:70:67:B8:87:D7:AD:94:0F:14:DD:7E
X509v3 Authority Key Identifier:
keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0f:00:d3:32:0b:bf:56:61:d6:3f:3a:38:10:23:e8:18:5d:
d1:1f:58:c6:bf:f6:c7:f6:b1:30:af:8f:50:a9:d0:e4:15:bf:
ce:bd:ea:dd:d1:8f:33:17:d6:62:e6:e7:db:d0:94:1c:38:8d:
b1:f1:f6:7d:32:77:c4:2c:40:51:ef:7b:a1:f5:4f:97:01:0a:
d0:e0:37:45:30:f8:56:dc:78:d3:44:fd:df:9a:55:00:b3:be:
05:1c:65:5c:c6:e7:74:40:bf:c3:12:54:f2:aa:1b:f9:79:a5:
0c:8b:d6:b3:7e:97:8b:68:ef:06:18:84:c9:0b:cd:7c:5f:46:
c5:e7:70:48:30:3a:90:8a:d8:b1:72:ba:52:1f:aa:97:e6:78:
53:a7:6b:89:a2:62:0e:ec:1a:08:5d:24:bb:28:7e:b7:36:23:
d7:01:a9:99:83:06:a2:87:a7:af:a0:63:3e:b5:51:a1:96:2a:
66:87:e3:d2:06:36:70:b7:90:fc:d0:49:c1:6b:56:b8:56:11:
e3:a3:3f:b1:de:a8:e2:fd:a2:33:bd:5d:ec:52:84:4e:ea:41:
36:fc:40:06:12:5f:95:fe:78:ee:8d:2f:93:98:16:4f:ad:c6:
a6:89:4d:54:68:ad:bd:00:39:bf:50:b5:d3:d1:81:09:29:bf:
03:69:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:40 2025 by rpki-client