Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File: yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier: 1Kria4xsyKW+Q+MVoGZiH+PwdsFxwIWfPnNozVZesCE=
Subject key identifier: 3A:70:69:E2:AD:7D:9F:E5:CF:DA:FE:7B:0A:5C:54:89:C2:DC:F0:5E
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer: /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number: 8A
Signing time: Fri 31 Jan 2025 05:36:43 +0000
Manifest this update: Fri 31 Jan 2025 05:36:42 +0000
Manifest next update: Fri 07 Feb 2025 05:36:42 +0000
Files and hashes: 1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: UvrSdRceNHFW6rCZKMRJdB9X+3H0arWs7g20fHClbCw=)
2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: 4Oh915WthhJlwOOKgV/sOS+biKgr/hNx4EVmX21QhO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Validity
Not Before: Jan 31 05:36:42 2025 GMT
Not After : Feb 7 05:36:42 2025 GMT
Subject: CN=679c616b-bd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:1f:3e:36:12:01:95:27:a7:e3:37:ef:79:
7a:2e:ba:1b:ef:2e:d2:e2:92:b3:00:b1:9a:04:39:
00:15:e1:86:5e:b4:90:b5:0b:1a:68:9a:d2:7f:b4:
da:81:7d:31:f2:b3:13:87:54:8d:ab:49:09:77:62:
e4:98:4a:ec:f3:62:04:db:c3:96:33:96:25:e3:39:
09:dd:19:c1:30:0b:5b:af:f2:f9:77:c7:20:e0:8e:
f6:bc:cd:d5:9b:6f:e6:cb:a6:c1:df:97:89:8a:6f:
fb:ba:5e:b7:1c:43:59:85:85:87:b1:87:e8:55:88:
3a:06:2d:01:b5:dd:d2:1c:08:22:2c:3e:bb:a6:d3:
9d:a2:80:f7:8e:9a:62:35:bb:b0:f9:cd:ba:a6:c7:
34:e1:a6:a8:7b:78:fd:5b:d3:86:b8:03:e2:ef:ff:
01:22:31:e6:2c:d0:bc:ba:34:30:b3:f7:44:a0:f3:
d8:71:87:11:41:3e:97:47:18:a0:fd:77:56:3e:72:
a2:4c:59:70:82:46:53:a5:bf:ab:cf:14:ab:91:ae:
3e:48:39:5b:11:40:57:c2:91:a5:15:c2:6e:91:0f:
de:14:8f:d1:b7:1b:b2:34:6b:7b:bd:ef:5d:e0:fe:
76:4b:2c:a3:62:4c:3f:ed:ef:4f:dd:67:70:86:43:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:69:E2:AD:7D:9F:E5:CF:DA:FE:7B:0A:5C:54:89:C2:DC:F0:5E
X509v3 Authority Key Identifier:
keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:09:b1:08:f7:f9:b3:46:f9:a9:88:9b:9c:f6:d0:ec:7b:99:
5c:69:57:aa:81:03:f1:db:b7:86:5e:f4:ee:54:f6:78:90:44:
92:02:b7:a6:82:7b:76:2a:73:48:94:98:31:64:94:42:ae:89:
f1:55:e4:b1:44:61:24:41:79:74:70:30:85:63:3c:f4:ca:a1:
11:ef:16:69:37:8a:3a:7e:3e:91:25:35:f7:bd:33:cd:cb:61:
8b:c1:2c:b7:31:c4:bb:85:67:09:63:2d:5e:5a:e3:f0:4d:c7:
3d:a3:4d:b8:9b:1e:a6:10:b1:4b:42:de:79:29:9d:17:6c:8a:
78:fb:c4:de:e9:8d:89:a3:c4:60:ac:81:f0:44:93:bd:6c:c2:
11:57:6f:bd:c2:bf:d2:5c:01:63:f4:c4:6f:6a:86:b8:f3:c3:
2c:bb:11:de:03:62:f4:fa:98:00:5e:fc:eb:ce:ff:cb:5a:9d:
de:e4:79:fa:81:48:8a:bc:0b:9f:89:e2:b6:53:d2:17:a8:98:
e2:1a:fe:c2:61:6c:2c:0a:8e:f0:d2:6e:db:b6:30:17:5d:8f:
3a:a8:d5:5c:0f:96:5f:c4:c8:48:3e:a6:2d:b4:f7:44:44:60:
21:87:7a:ee:95:a9:66:3d:7b:72:e2:b7:85:fe:00:11:68:02:
16:48:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:46 2025 by rpki-client