Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
File: y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json)
Hash identifier: KXCzydhzv3Qkjlor4MyU+0H2GOeLGgQSbhlQeHzM0xw=
Subject key identifier: F5:C2:C9:52:02:D4:B0:4C:43:F0:35:28:C1:0C:20:80:93:D2:30:44
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial: 07E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
Manifest number: 07D8
Signing time: Thu 30 Jan 2025 21:01:14 +0000
Manifest this update: Thu 30 Jan 2025 21:01:14 +0000
Manifest next update: Thu 06 Feb 2025 21:01:14 +0000
Files and hashes: 1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: M4gbSh3XdnuucwuECYgkm21KgKnqHMIaNoJZOKDPjAk=)
2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: hwrYZn+i2OUNCmUoK3ena1siLJOV1HVO2m5EjPVb3kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Validity
Not Before: Jan 30 21:01:14 2025 GMT
Not After : Feb 6 21:01:14 2025 GMT
Subject: CN=679be89a-d0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:eb:d6:37:aa:f4:78:81:d8:e7:e6:bd:4a:
d7:c5:24:bf:eb:60:2c:87:68:cc:c4:e2:b4:48:0f:
09:88:45:23:ab:b3:1c:26:f1:d9:38:67:b9:30:f1:
d8:ac:91:15:c1:cd:46:60:26:1e:8e:c3:f0:b0:d1:
e1:63:89:2a:7c:52:7c:ae:05:b4:5a:de:77:11:cc:
1c:1c:8d:62:cb:26:34:63:c3:97:25:3c:ba:a2:38:
c0:7d:18:1a:30:18:c1:b1:3c:74:7e:80:d8:87:8c:
80:98:44:e3:36:c5:bf:68:85:0f:9f:cc:9b:b1:38:
d5:7a:f1:5c:c5:b8:76:b1:a5:a0:6e:f4:fd:a9:60:
d7:df:6d:77:d8:b3:ff:a8:e1:d1:02:31:81:76:66:
e2:17:cb:a2:e1:f2:2e:4e:a7:ef:bb:a2:70:87:48:
11:ff:4f:bb:ca:a6:13:ba:d3:9e:0f:5d:99:df:c2:
36:67:fa:22:d3:d1:ee:85:4a:30:16:12:5d:6a:e3:
6f:04:34:52:29:87:b1:c7:b6:9e:03:41:d0:a6:57:
d8:1e:79:3c:0d:16:82:44:50:2c:04:9b:a2:19:c6:
15:16:ce:d8:21:43:de:a2:ab:81:c6:f6:8f:f6:c0:
4f:77:de:28:c6:e5:19:b0:8e:6a:e8:f6:e0:6a:bf:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:C9:52:02:D4:B0:4C:43:F0:35:28:C1:0C:20:80:93:D2:30:44
X509v3 Authority Key Identifier:
keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:cc:4b:db:cd:bb:50:ef:d4:2b:89:a0:e9:ae:d8:f0:6e:
f5:61:e9:af:f2:35:33:35:8f:4d:e6:0c:6a:62:35:8e:58:5f:
9f:d6:42:dc:df:64:fa:b3:57:92:e6:f6:21:9e:fe:b4:aa:83:
9d:98:b9:b5:a4:46:39:46:d6:a5:af:44:65:cb:12:a2:72:18:
50:54:5e:34:1a:b5:29:44:b7:ce:44:ed:2c:4d:8c:63:2b:ab:
7c:02:61:95:6d:ac:4d:60:96:5e:5e:11:d7:33:8a:0f:f2:09:
34:73:a6:a0:b9:17:0e:bf:64:56:8a:36:b1:59:ea:83:17:8d:
2e:08:bf:08:a8:0b:2c:0b:66:6a:e6:3a:dd:1f:ca:a6:01:0c:
d1:f5:58:f7:5f:30:70:d7:a5:34:70:1c:01:6d:fc:79:ac:27:
33:a6:88:e3:c1:6d:d8:0d:01:f4:54:66:1d:47:d0:41:1d:ad:
fa:bc:08:8f:a8:64:e2:19:95:8c:7f:69:e7:43:6c:05:96:dd:
30:1d:19:ca:7b:fc:35:81:6d:ab:6b:25:cb:bb:2b:86:64:fd:
fa:56:19:91:4e:3a:6d:a4:74:c1:60:7d:1e:7b:69:24:79:f1:
4b:d4:53:49:75:a5:66:a1:c7:e1:5a:75:dd:08:47:94:52:9e:
b6:59:51:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3
MkEzQTA5MkEwHhcNMjUwMTMwMjEwMTE0WhcNMjUwMjA2MjEwMTE0WjAYMRYwFAYD
VQQDEw02NzliZTg5YS1kMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs7jr1jeq9HiB2OfmvUrXxSS/62Ash2jMxOK0SA8JiEUjq7McJvHZOGe5MPHY
rJEVwc1GYCYejsPwsNHhY4kqfFJ8rgW0Wt53EcwcHI1iyyY0Y8OXJTy6ojjAfRga
MBjBsTx0foDYh4yAmETjNsW/aIUPn8ybsTjVevFcxbh2saWgbvT9qWDX32132LP/
qOHRAjGBdmbiF8ui4fIuTqfvu6Jwh0gR/0+7yqYTutOeD12Z38I2Z/oi09HuhUow
FhJdauNvBDRSKYexx7aeA0HQplfYHnk8DRaCRFAsBJuiGcYVFs7YIUPeoquBxvaP
9sBPd94oxuUZsI5q6Pbgar+riwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXCyVIC
1LBMQ/A1KMEMIICT0jBEMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC
N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEZFNy81QTJEODlFQURCN0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxM
bFk3c08ycVVSWGR5bzZDU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCyMxL2827UO/UK4mg6a7Y8G71Yemv8jUzNY9N5gxqYjWOWF+f1kLc
32T6s1eS5vYhnv60qoOdmLm1pEY5Rtalr0RlyxKichhQVF40GrUpRLfORO0sTYxj
K6t8AmGVbaxNYJZeXhHXM4oP8gk0c6aguRcOv2RWijaxWeqDF40uCL8IqAssC2Zq
5jrdH8qmAQzR9Vj3XzBw16U0cBwBbfx5rCczpojjwW3YDQH0VGYdR9BBHa36vAiP
qGTiGZWMf2nnQ2wFlt0wHRnKe/w1gW2rayXLuyuGZP36VhmRTjptpHTBYH0ee2kk
efFL1FNJdaVmocfhWnXdCEeUUp62WVHE
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:57 2025 by rpki-client