Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier: pxReArzBA1oEO8nNwfo4jeQ0+tt0oXy/Np1qBUPGYbU=
Subject key identifier: 2A:AA:E4:F4:C9:EE:C2:49:B5:01:93:EC:EC:D3:49:2B:E6:EE:38:6E
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number: 046F
Signing time: Fri 31 Jan 2025 00:12:44 +0000
Manifest this update: Fri 31 Jan 2025 00:12:43 +0000
Manifest next update: Fri 07 Feb 2025 00:12:43 +0000
Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: ky3bOLU9Fb/PjSTLsF90V5Opn2g6rlo6WW/aKSPJvH4=)
2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=)
3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: Jan 31 00:12:43 2025 GMT
Not After : Feb 7 00:12:43 2025 GMT
Subject: CN=679c157b-a0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:f5:04:3a:e5:12:62:a2:a7:ed:a9:75:9f:
ab:e2:aa:c2:3e:ed:4d:56:3a:fd:bb:bc:7e:4f:bc:
c8:62:05:74:4e:cb:e9:ea:1d:d7:ec:ef:26:42:b5:
3c:74:f6:0c:f8:9e:3a:f3:d3:35:0d:ae:a6:a2:19:
39:46:21:60:63:18:48:0a:af:5a:ae:d2:6f:16:9f:
38:36:ed:63:93:23:0c:c4:0c:ec:8e:54:18:4f:99:
d1:d0:57:b4:94:81:14:9b:42:f8:78:0e:b5:1d:0f:
68:a9:5f:ca:fc:bc:b6:47:38:20:79:b3:53:bd:21:
c4:4c:41:de:95:06:17:7e:34:a3:1f:e1:7e:79:67:
5d:ff:2c:76:b0:66:fb:d1:d0:a3:04:06:f5:9d:c6:
58:fc:b0:d9:c8:f0:a6:43:7f:5f:a7:0b:4d:46:68:
a9:bf:72:85:62:be:b0:58:b2:15:1c:bd:f2:b5:90:
7f:3a:18:ef:6f:9e:9c:a3:b9:29:03:a5:03:ae:fa:
aa:6c:04:87:ec:dc:f1:83:8b:08:0b:32:9b:ee:c8:
b7:bd:1a:bc:0a:2a:43:01:76:ad:91:fb:3f:37:14:
84:b6:da:34:3c:0c:60:c6:b8:6a:ff:60:95:c4:01:
37:9f:ec:5d:40:1f:e7:e2:07:64:e4:8e:56:ff:99:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:E4:F4:C9:EE:C2:49:B5:01:93:EC:EC:D3:49:2B:E6:EE:38:6E
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:8c:de:8e:b8:7f:2e:ed:ae:45:03:7d:5d:e7:a1:a4:80:b6:
c3:27:02:0c:38:29:f7:87:57:a5:f7:3c:e6:28:a1:be:6d:f1:
8d:c9:21:fd:b8:d3:92:ea:a7:8c:dc:e2:c5:51:52:d8:d9:6b:
a5:b2:8b:08:f2:ed:a6:d3:a4:8f:6b:bd:83:3d:28:57:84:87:
cc:31:2c:23:df:fa:82:70:60:f3:ac:90:d7:50:10:b9:18:bb:
e5:5d:c2:c4:57:26:97:81:58:f7:d4:06:a5:7a:3c:b5:86:ed:
d9:66:6c:5a:10:c7:63:80:ed:b9:66:be:b2:be:d6:ec:96:54:
75:7f:f2:a3:c3:22:bf:b0:f1:1d:55:ff:f2:f3:6e:20:b0:2c:
00:f6:e8:45:2f:c4:d7:3f:d7:59:9f:b7:0a:74:36:5a:c2:50:
a7:75:57:88:ce:54:bc:0f:97:61:e8:58:35:56:b6:c4:ee:2e:
de:61:0c:39:4d:da:df:32:2b:ae:8c:90:02:20:ca:9a:9b:4a:
0b:1d:e7:17:8b:fb:df:39:69:d5:38:61:f7:60:14:1c:c4:e5:
70:bf:ca:bf:69:6f:f2:31:01:6e:ba:ed:23:78:e0:9c:95:5d:
21:89:56:da:f6:e2:9c:a1:04:64:10:02:18:bf:f5:14:8c:91:
6f:45:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:08:17 2025 by rpki-client