Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier: 14bk1lPs75Z2UUax0FzuHywyBa6R6+Q1uwNJNIJXPc4=
Subject key identifier: C3:E7:E5:19:E5:DB:13:80:D1:5A:0B:0F:EB:3C:AB:BA:E4:E6:54:E8
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number: 94
Signing time: Fri 31 Jan 2025 05:29:56 +0000
Manifest this update: Fri 31 Jan 2025 05:29:55 +0000
Manifest next update: Fri 07 Feb 2025 05:29:55 +0000
Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: sAHzajY/HpgcQ03sqtQxhgkhVUVJ12xVdZQicu5uTlQ=)
2: 0A2301B2FCEB11EEBA59DC2BC4F9AE02.roa (hash: /AyQMqWZ57bgXPGZC6xfQU7bxlqUkG6/f7HGBOIGwIM=)
3: B65959F8FC7411EE841CC07AC4F9AE02.roa (hash: uHLbpnlfbFwZRtw8r9GbeL/ZYB4FyowNXtoVbmMIJOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Validity
Not Before: Jan 31 05:29:55 2025 GMT
Not After : Feb 7 05:29:55 2025 GMT
Subject: CN=679c5fd4-80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:88:5c:b4:38:02:fc:3d:fb:a3:eb:9a:56:
f8:9f:f4:9e:28:24:e4:45:1e:fa:06:a8:05:d9:d0:
2c:1e:c0:9c:f2:91:ed:c9:8d:a5:2d:64:ce:12:dd:
08:c5:fe:ae:b4:c0:2f:d1:75:c6:f1:55:d3:b9:58:
7a:0e:a0:ce:36:f6:cd:f9:77:1b:15:9a:2e:bd:c5:
6f:3a:65:de:9b:b7:ce:a5:a4:e2:e8:b3:57:57:c9:
21:cc:d9:a0:94:37:fc:5a:43:ce:f3:3b:72:ca:a0:
c1:5e:55:d8:63:51:eb:6b:94:27:15:3e:d8:d4:f0:
39:14:42:dc:9b:94:5a:49:13:31:b0:23:4d:1a:22:
a9:9b:02:61:0e:a5:c8:8d:89:9f:95:97:47:e1:ad:
d5:5a:47:e6:e4:a4:60:83:58:44:b6:27:0c:61:4e:
d3:8b:10:c6:65:4a:a4:8b:af:74:5c:f2:6e:2d:c4:
b2:59:d0:d6:58:8e:d0:5d:62:4f:5d:62:e5:3a:14:
44:c4:d4:85:9e:b0:a6:cf:26:c6:c9:de:e3:46:0d:
dc:3c:24:59:fd:c4:e0:a9:34:02:a3:e1:a0:77:34:
e4:02:2f:82:23:15:65:e2:70:13:15:53:3f:c2:17:
45:fa:e4:a6:32:84:07:19:fd:3c:e4:31:06:10:3e:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:E5:19:E5:DB:13:80:D1:5A:0B:0F:EB:3C:AB:BA:E4:E6:54:E8
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:0d:5e:95:64:42:38:00:13:21:e3:46:ff:71:2c:d1:a7:
ee:e7:5f:cb:c4:09:18:d4:b6:8d:2b:87:d0:e4:1f:93:81:14:
36:a3:da:c0:1b:01:85:bb:02:13:12:9e:72:f1:37:1e:88:3a:
c2:cb:0c:87:d5:de:b2:e4:f7:c3:ad:17:a9:07:59:6d:37:14:
c8:50:5d:6e:5c:8d:ad:26:34:e5:30:73:c3:6b:60:4e:3d:64:
95:36:4b:0b:a3:c8:cb:b6:5e:b9:d6:84:6a:b4:a6:2d:61:e6:
84:8b:6d:f8:3e:6e:94:6a:de:03:1a:6e:b5:46:de:1d:55:17:
62:86:6e:07:ac:cf:2e:44:24:be:51:07:a8:40:01:5c:e3:5f:
43:17:5b:10:ec:05:c5:ed:91:c7:78:0a:bc:af:a8:24:b1:53:
c8:ea:fa:ba:98:49:8e:d6:0f:fe:f3:f9:fb:49:4d:13:20:7e:
16:64:c3:ad:9d:54:e3:cb:d2:19:05:46:88:b5:6d:75:9b:17:
db:2f:20:f6:2a:77:ba:85:9c:15:49:37:9b:9b:42:31:52:e8:
8a:27:e5:ea:99:a8:ea:74:ad:61:dc:d2:ed:82:bd:24:6f:87:
38:62:bf:34:be:08:49:bd:9d:81:2c:8a:0a:e1:2f:f7:6f:22:
62:6b:93:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2
MzMyOENENkUwHhcNMjUwMTMxMDUyOTU1WhcNMjUwMjA3MDUyOTU1WjAYMRYwFAYD
VQQDEw02NzljNWZkNC04MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4FyIXLQ4Avw9+6Prmlb4n/SeKCTkRR76BqgF2dAsHsCc8pHtyY2lLWTOEt0I
xf6utMAv0XXG8VXTuVh6DqDONvbN+XcbFZouvcVvOmXem7fOpaTi6LNXV8khzNmg
lDf8WkPO8ztyyqDBXlXYY1Hra5QnFT7Y1PA5FELcm5RaSRMxsCNNGiKpmwJhDqXI
jYmflZdH4a3VWkfm5KRgg1hEticMYU7TixDGZUqki690XPJuLcSyWdDWWI7QXWJP
XWLlOhRExNSFnrCmzybGyd7jRg3cPCRZ/cTgqTQCo+GgdzTkAi+CIxVl4nATFVM/
whdF+uSmMoQHGf085DEGED5RVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPn5Rnl
2xOA0VoLD+s8q7rk5lToMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD
NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC
cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBow1elWRCOAATIeNG/3Es0afu51/LxAkY1LaNK4fQ5B+TgRQ2o9rA
GwGFuwITEp5y8TceiDrCywyH1d6y5PfDrRepB1ltNxTIUF1uXI2tJjTlMHPDa2BO
PWSVNksLo8jLtl651oRqtKYtYeaEi234Pm6Uat4DGm61Rt4dVRdihm4HrM8uRCS+
UQeoQAFc419DF1sQ7AXF7ZHHeAq8r6gksVPI6vq6mEmO1g/+8/n7SU0TIH4WZMOt
nVTjy9IZBUaItW11mxfbLyD2Kne6hZwVSTebm0IxUuiKJ+XqmajqdK1h3NLtgr0k
b4c4Yr80vghJvZ2BLIoK4S/3byJia5O0
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:57 2025 by rpki-client