Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File: RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier: rOT036hvm/s5+tY2YICd/lhHvEO0Gc+w1rggtY9Fqfs=
Subject key identifier: FD:7F:36:11:01:C5:42:F0:10:87:56:F8:42:86:83:9F:1E:21:A3:4C
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial: 17A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number: 17A0
Signing time: Fri 31 Jan 2025 16:34:55 +0000
Manifest this update: Fri 31 Jan 2025 16:34:55 +0000
Manifest next update: Fri 07 Feb 2025 16:34:54 +0000
Files and hashes: 1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: Oa4l63cQAkXbBtMUhVv4n9PRiaN/Ik560utLM3c5qCw=)
2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: KWbJbgpGfDdYPVO+KIuyWusqQxr6PU0FBc6ESlEd+IQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6057 (0x17a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Validity
Not Before: Jan 31 16:34:55 2025 GMT
Not After : Feb 7 16:34:54 2025 GMT
Subject: CN=679cfbaf-965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:05:8b:ad:b8:bc:fe:82:63:fd:0e:56:28:
49:fb:3d:31:10:b3:a3:2d:04:2f:ab:06:95:5d:04:
20:41:a5:1e:55:ab:d4:42:ad:11:42:5a:7a:eb:2d:
b1:47:bf:f9:c5:39:15:be:7e:d0:a2:03:b3:e0:eb:
13:43:38:0e:d8:08:65:25:7c:2c:50:82:99:d1:8d:
21:1d:44:70:54:f4:d7:c1:36:29:d8:8a:33:38:63:
41:7c:1e:53:ac:b7:5e:51:f7:9a:6d:21:e4:d4:c8:
42:fe:1b:b7:2e:55:56:2f:60:4f:38:1d:e1:f2:b1:
14:8f:b7:8f:8e:b7:8c:1b:dd:95:de:d7:79:16:af:
49:88:8d:ae:49:78:95:4e:67:87:4b:cb:94:b7:db:
4f:0f:77:fb:2e:ce:a5:a9:ef:d8:2a:73:3e:8f:b3:
8d:36:6e:b0:70:5b:e4:99:c9:0f:1b:bf:6b:c4:58:
d0:c7:fe:f1:92:cd:ed:df:b1:cd:8a:04:6b:66:f7:
d5:32:a0:69:a6:3c:17:43:cd:17:98:99:03:de:80:
21:f0:e2:24:38:ee:b7:00:7d:df:e7:f6:41:b0:a2:
0f:96:95:d6:2f:f6:8a:83:b2:02:fc:c9:08:1d:f3:
e3:42:29:ea:d7:fb:85:50:65:fa:7e:29:e4:13:a9:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:36:11:01:C5:42:F0:10:87:56:F8:42:86:83:9F:1E:21:A3:4C
X509v3 Authority Key Identifier:
keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a3:e3:47:29:c1:53:7d:bf:b3:81:98:58:3f:14:ac:1d:9d:
93:61:41:01:52:4f:c5:63:d2:65:9e:8d:50:4e:6f:66:d9:9c:
c5:91:de:e0:16:a0:bb:e9:28:72:37:d6:09:e6:6c:c3:b8:91:
35:68:7a:72:93:9b:9a:3c:3c:bf:f8:b4:4a:99:f3:33:5e:cf:
8e:29:81:dc:42:b3:37:c3:3a:0a:1d:15:5e:e2:70:97:df:ef:
08:b4:90:ab:ca:ce:e3:8d:5b:7d:c7:57:a1:53:e9:06:54:38:
01:5f:80:d4:e0:04:b3:03:1a:36:16:70:62:91:e2:d2:8e:b0:
9d:1b:1f:5a:87:75:62:fc:02:a5:d7:c4:db:95:00:e3:ba:39:
20:3d:5d:5f:80:78:b0:8e:11:5b:b2:7f:6d:83:43:f9:d4:5d:
16:b1:59:b7:55:fe:2a:b7:69:be:08:70:97:a5:06:57:7e:f7:
5a:e1:82:09:91:42:77:7d:d3:10:b2:15:23:53:89:f8:ce:eb:
fe:74:e7:19:b6:af:78:d4:a1:9d:72:36:22:da:87:5b:06:28:
c8:d4:52:7f:af:b9:1a:89:9d:e6:79:96:71:7b:08:72:3a:c2:
be:cd:93:08:eb:4f:dd:68:43:9e:88:dd:ea:f3:ae:fb:31:e1:
ab:04:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:07 2025 by rpki-client