Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: /9drJIC4ryRBssaImMyRjeLMhrUeNzQxY3PRM1f1D9s=
Subject key identifier: F9:51:70:EC:67:7F:CD:4F:3B:80:A1:9D:B3:08:EA:C4:42:43:DA:D0
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 0576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 0570
Signing time: Thu 30 Jan 2025 23:21:35 +0000
Manifest this update: Thu 30 Jan 2025 23:21:34 +0000
Manifest next update: Thu 06 Feb 2025 23:21:34 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: XqbkyiaSZDwzmin9hPhrlphBMHbcr/W373Ig6Ithq9c=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: tl2kppVQ05tVhEGA0iZghAdvk5il8hkt04HkORheCWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1398 (0x576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: Jan 30 23:21:34 2025 GMT
Not After : Feb 6 23:21:34 2025 GMT
Subject: CN=679c097e-0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:bf:db:9a:71:a4:44:cc:06:b4:c9:b8:3d:
97:0f:f0:39:78:24:80:aa:ca:61:37:f9:c5:10:52:
f4:9e:95:ba:7d:7e:38:15:9d:32:2e:41:5a:04:d4:
17:27:c0:7e:af:09:38:62:f2:d0:6f:16:ec:1c:c2:
d9:ba:32:f3:63:69:d8:05:f6:f4:ea:c7:22:28:4d:
67:81:a6:ce:ef:98:2d:9b:13:a3:59:7f:53:ac:94:
aa:34:2b:9e:21:bc:9a:a9:89:de:07:4d:40:8b:52:
e9:5e:1b:46:76:90:41:25:c2:6f:5d:90:48:8b:36:
1f:49:a2:2d:73:93:6a:a0:61:64:da:c7:9a:b3:c4:
1d:38:6d:e4:dc:e5:d8:8e:bd:97:98:a4:1d:d2:a4:
c9:c0:dc:13:d4:18:18:b7:d2:59:3e:cf:4d:17:53:
38:91:02:ac:c8:7e:df:95:bd:ae:40:9b:76:84:a7:
33:50:f8:2d:b1:2e:39:de:c7:7c:f7:a0:02:20:65:
18:5d:f1:cf:48:d5:74:3a:82:cb:4c:1b:42:1b:a9:
35:fa:ed:48:96:b8:e5:96:9a:e7:58:71:05:04:67:
5a:a7:7a:a6:90:3c:2e:71:c3:d8:66:e9:6b:de:0a:
bb:71:7d:35:55:2c:f4:40:00:02:d6:ab:13:67:73:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:70:EC:67:7F:CD:4F:3B:80:A1:9D:B3:08:EA:C4:42:43:DA:D0
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:35:58:ae:34:6e:a7:d6:18:ae:0e:40:a5:8b:29:4d:4f:fd:
00:2c:2d:43:d0:82:b1:3c:34:06:ff:23:67:11:21:74:1d:8a:
95:42:a1:50:bb:9d:4d:59:45:66:5b:8e:64:83:85:e3:ca:11:
49:7b:df:00:9e:62:b6:55:5a:6d:07:9e:20:83:71:bd:92:94:
e3:65:d8:5b:45:ee:68:39:ee:7e:0c:b2:29:88:35:ba:20:01:
a4:fd:ef:36:b0:cf:af:13:48:ef:df:cc:85:82:d5:0c:47:d6:
64:96:ae:3b:9e:b8:e6:5f:26:dd:20:3c:86:0d:4a:33:d2:f2:
60:ed:46:d9:13:24:38:e9:8e:ec:7d:c3:ad:37:dd:70:d7:49:
19:d6:d3:1f:18:1d:33:db:f5:5b:1f:12:86:2a:32:cb:06:f2:
86:3d:e7:f6:11:c1:8e:15:7d:6d:80:a5:68:0e:fc:06:7d:11:
d4:1f:d8:b4:a9:0a:cb:fa:ba:43:97:df:39:1f:81:74:4d:c3:
6d:3b:b9:14:06:c6:94:3b:5c:eb:d0:a3:f9:bb:56:92:47:fa:
1d:f6:cf:8f:f4:1f:c3:0a:ae:92:63:43:89:87:97:3f:5b:e9:
45:4a:66:76:0c:0e:e2:f4:0f:dc:1b:d0:59:15:10:70:fa:fc:
33:37:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:25 2025 by rpki-client