Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json)
Hash identifier: Pb1hZSK7P9S33aIh//PbExTM/Sd8NivUAQs7Jp8RP+I=
Subject key identifier: 13:78:80:D6:A2:6F:44:9D:A6:03:C4:EA:E8:E2:23:19:BC:6F:5D:8A
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
Manifest number: F4
Signing time: Fri 31 Jan 2025 04:24:19 +0000
Manifest this update: Fri 31 Jan 2025 04:24:18 +0000
Manifest next update: Fri 07 Feb 2025 04:24:18 +0000
Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: UNIhOo8O6XwEsZXzfvLO0zY54Dm6DkzKt91TXu9JN4o=)
2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Validity
Not Before: Jan 31 04:24:18 2025 GMT
Not After : Feb 7 04:24:18 2025 GMT
Subject: CN=679c5072-2ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:ca:eb:00:05:df:b2:1c:7d:53:d5:d5:04:
d4:87:5e:0d:51:26:91:89:a4:8e:46:bd:69:5d:c7:
d6:5d:f0:36:47:c4:a9:33:2c:e7:62:34:77:78:3f:
36:86:9f:9b:a9:cc:95:f5:e2:38:ea:ed:f9:d9:9b:
3f:11:47:88:ff:66:94:a3:e7:58:e8:92:a8:e4:37:
94:c8:27:5c:84:f5:29:3c:3d:c7:95:ba:39:a0:ef:
68:1a:07:6f:e7:95:c4:f1:15:99:33:66:3f:0c:71:
be:af:2b:0b:32:ed:bc:33:78:1d:d2:89:13:ed:a4:
be:92:86:6a:75:70:7f:73:54:af:92:c5:b9:62:60:
d1:84:d7:47:c4:49:2d:d7:01:1e:96:93:ca:cc:a0:
6e:0d:bf:eb:5c:88:0c:a9:b0:4e:59:a8:c8:25:07:
37:68:f9:d2:40:cf:22:8d:e7:d8:9e:f6:4d:d5:85:
33:60:21:71:82:31:cf:e9:2b:e3:77:d9:ac:c6:81:
5b:02:8c:84:85:77:85:98:89:b3:a9:b5:9c:b6:c4:
51:de:27:0e:73:bd:d8:b0:3d:ee:d1:51:b4:3e:50:
79:06:a4:f4:fa:c2:fc:62:48:85:91:fc:4d:5c:88:
e6:9f:51:64:3a:7f:21:33:84:6b:a9:f9:96:ea:bc:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:80:D6:A2:6F:44:9D:A6:03:C4:EA:E8:E2:23:19:BC:6F:5D:8A
X509v3 Authority Key Identifier:
keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0c:41:c3:b7:47:44:da:5a:51:2a:c2:a2:34:39:20:af:27:
97:dd:3e:b8:7b:a6:c6:cc:cc:e8:9e:dd:5b:77:fb:53:86:8c:
0e:6d:40:4d:99:33:b7:45:95:88:69:8a:d4:c1:a3:ae:3b:17:
ec:66:f8:f6:0a:0f:7f:9c:ab:c9:78:1d:73:47:da:80:5f:36:
13:50:d0:ef:5a:32:ec:83:43:91:d6:93:a7:bc:c4:c1:65:11:
61:2d:3d:e7:0a:da:b5:a8:2e:c6:da:b7:d4:52:83:89:f4:c8:
51:c7:a0:47:c1:06:54:c4:66:f1:28:b5:54:a7:8d:3a:b2:b5:
d6:55:a3:82:80:98:ab:0a:ba:7f:b4:78:05:4e:b1:7b:3e:3b:
cb:4b:20:e1:e4:5f:af:48:a6:7c:c8:77:c5:b6:c7:fc:4c:dd:
df:13:df:8a:19:46:ef:96:f3:e5:6c:be:17:d2:17:54:13:b7:
6e:28:6c:67:9d:71:cd:93:37:e6:32:b5:7d:5e:b3:6d:a5:d8:
93:e5:ac:ca:cf:bb:af:3f:89:4b:95:60:29:b6:b3:63:78:ea:
f1:6b:0c:b3:c2:4b:5d:55:79:92:0a:23:8e:78:cd:8b:0f:9b:
7c:c6:f5:de:66:13:be:50:7f:bd:99:53:46:31:a5:c0:6c:37:
1c:fa:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:51 2025 by rpki-client