Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier: 9Ot3m7XM4Ps8tgXkkrs5uOiw71ioQL6ed8/dNjS38m0=
Subject key identifier: DA:37:D5:E2:00:86:36:62:FF:E6:C9:6F:39:9A:EC:A0:CC:0F:A1:14
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number: 023C
Signing time: Fri 31 Jan 2025 02:06:55 +0000
Manifest this update: Fri 31 Jan 2025 02:06:55 +0000
Manifest next update: Fri 07 Feb 2025 02:06:55 +0000
Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: d6wlZhEr5e3PNiIDEHBZE9RkYlbtVpisr/I2qMRyoB8=)
2: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=)
3: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Jan 31 02:06:55 2025 GMT
Not After : Feb 7 02:06:55 2025 GMT
Subject: CN=679c303f-9080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:24:76:77:9e:d0:56:04:9f:92:c3:80:7a:
a8:62:2b:b4:84:d3:04:49:33:94:9d:a7:b2:a5:30:
dd:90:f2:77:e7:45:7a:f0:1b:6b:b7:f3:88:85:ab:
76:0a:58:7a:8f:41:d8:16:56:12:5b:92:c4:6f:cf:
64:d5:f3:6d:7a:4d:13:a0:de:34:14:71:00:75:57:
e5:de:53:7b:29:13:9d:85:1f:e8:3f:3b:e8:5b:a6:
b9:3e:ab:a9:25:2c:7d:00:2f:00:ab:4f:cc:2a:35:
c4:45:df:10:a4:4f:1d:36:89:72:9a:04:8d:84:6b:
ac:ad:2b:d4:a8:e6:f2:43:36:85:41:d2:db:0e:0d:
a6:07:5d:69:e4:73:e1:00:96:7d:5a:9a:13:ef:4f:
d0:85:a3:9d:e2:7f:9a:ff:a9:e8:d5:ee:53:56:6f:
2c:35:fa:5a:62:14:61:b0:6a:ed:9a:87:9b:b9:ce:
58:91:4f:7c:19:6e:e5:c7:66:10:84:8e:10:60:d7:
ba:83:39:d6:e8:bf:ee:c5:90:50:61:ba:86:2e:3e:
b5:6a:41:db:c8:fb:51:c6:1a:80:8a:6d:0c:6c:20:
2e:1a:da:64:89:00:e3:b9:3c:8d:b8:75:7a:64:53:
10:66:b3:94:57:e6:74:9a:9f:2c:64:25:a9:d3:00:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:D5:E2:00:86:36:62:FF:E6:C9:6F:39:9A:EC:A0:CC:0F:A1:14
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:de:12:1d:ef:05:7b:c9:64:0c:6f:6b:80:51:27:ec:c8:70:
56:17:08:4f:bf:0d:e1:ed:77:4b:93:57:10:b2:73:15:18:6d:
c8:d1:42:e6:88:61:ec:5b:9d:fb:33:cf:b9:65:c6:f3:db:bd:
99:5f:e4:7b:50:ec:b1:cf:e7:a4:d5:35:78:19:cf:88:5e:df:
57:f1:64:b4:a1:0b:d7:39:c0:ac:a5:75:c4:a9:c9:2e:7c:9e:
95:11:e0:2e:6a:c4:46:64:ff:16:1d:8c:42:bc:0d:1a:eb:f4:
f8:ac:27:96:a5:ba:9e:b8:f6:58:39:16:ef:6f:6a:6c:f1:33:
89:d7:e3:9d:65:a0:10:2e:be:2e:8c:59:e5:71:4f:3c:de:d1:
00:a3:86:5b:5c:2e:fe:2e:d6:6f:c5:f3:2a:8c:d5:c2:a2:19:
80:dc:6b:bd:54:25:06:49:43:85:e5:23:d6:46:71:20:ca:b5:
0c:79:5e:34:cb:a1:a8:c2:91:04:f7:6f:79:3e:96:a7:c4:05:
e3:8d:fa:fb:d3:92:e3:95:00:31:4e:01:da:39:00:42:1a:c0:
1b:30:a1:bb:b2:ed:b6:0e:7a:83:95:b4:78:f2:64:8f:cc:dd:
ef:1e:ab:69:73:cd:c8:10:62:2d:d1:c1:f3:74:37:9a:cf:93:
b2:4e:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:36:47 2025 by rpki-client