Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
File: yzDTXHDfyGaoN8rt_vzm_sv8W18.mft (raw, json)
Hash identifier: ixXfY+HIJkYec4DjRG///T54VwanQEjv4gA0xj7Yhqg=
Subject key identifier: DC:B6:00:55:C9:0F:E0:D4:CA:A2:61:94:48:49:4B:25:AC:C2:40:C7
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
Manifest number: 0763
Signing time: Thu 30 Jan 2025 21:26:47 +0000
Manifest this update: Thu 30 Jan 2025 21:26:47 +0000
Manifest next update: Thu 06 Feb 2025 21:26:47 +0000
Files and hashes: 1: yzDTXHDfyGaoN8rt_vzm_sv8W18.crl (hash: X+NvxiwRZOBf1KS3DHdgfRivwYnjeK2e8q1js5VH13o=)
2: C6C096F68D0D11EFB98F225AC4F9AE02.roa (hash: ZAnErhTMQqlpf44jmEYj4wPSId8+FJKW3GfVVc/2yU8=)
3: 77A9A556A23611EF9A9BD341C4F9AE02.roa (hash: xEyHYSI5oulqOzr6UtKqDhYvcGeLcIQ20I8A6gPVm48=)
4: B8BB04788D0E11EF9759C171C4F9AE02.roa (hash: 11/Hh4j/AFFQS1iSbMmvJiVpOU5V6AsyR+Oj8b1vZeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: Jan 30 21:26:47 2025 GMT
Not After : Feb 6 21:26:47 2025 GMT
Subject: CN=679bee97-103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:9f:9a:f7:c5:ad:da:1e:1a:2f:c5:b3:9e:
c3:a8:8b:93:3d:d2:72:d9:8f:db:37:a4:21:c1:70:
cd:a7:46:ce:79:23:5f:0e:88:76:20:9c:c3:47:81:
4e:30:a7:34:82:94:cb:01:91:8c:9b:d5:a2:3b:c2:
a8:8e:45:13:96:5a:59:68:fa:cb:30:4b:af:b4:db:
0c:3c:6b:a4:6c:25:ef:4a:4c:4c:9d:eb:86:42:d7:
5f:a1:09:7d:53:52:95:71:2f:1e:03:6f:dd:61:2b:
c5:3a:53:35:12:ba:fc:f3:f6:5f:fa:d4:9f:82:9e:
04:0b:c8:87:e7:e5:79:df:f7:af:83:33:15:58:e3:
6f:72:b5:22:65:8f:b0:48:0f:16:58:3b:5c:18:6e:
c5:29:7e:45:69:9d:ab:c2:76:8e:3b:ad:23:a8:77:
c0:1d:e3:9b:5b:6e:cb:94:3a:c5:ea:09:ca:fa:5a:
9c:7c:35:96:e2:be:e4:62:c6:3e:71:0a:ad:4e:3d:
b8:f2:3c:65:0a:e4:d4:f3:16:1e:80:45:05:43:17:
27:2f:59:88:06:08:1f:fa:4e:03:dc:26:14:d6:7e:
4b:98:53:06:08:50:a4:fc:b6:95:0d:0f:8c:dc:90:
ff:36:be:f9:d6:8a:16:dc:8c:db:a9:c5:a7:de:bf:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B6:00:55:C9:0F:E0:D4:CA:A2:61:94:48:49:4B:25:AC:C2:40:C7
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:85:b9:45:22:54:12:1f:d9:59:4a:b4:1e:43:df:78:ac:
ae:91:44:03:d0:70:bd:f5:7e:47:60:b9:75:9f:8b:8d:fb:26:
7c:ac:c0:74:6a:3f:f1:53:36:03:97:07:0b:b7:e6:23:36:f8:
62:8c:f9:6e:55:f2:20:1e:ee:32:86:63:50:9e:74:84:eb:fe:
38:e1:9d:81:91:7f:57:41:5e:74:85:35:dd:08:85:7b:8b:b2:
3a:a9:51:61:3e:6a:fc:bf:90:73:0c:74:11:33:17:ed:dd:c4:
10:89:0a:2d:cc:69:52:24:0c:f0:e6:c4:97:e7:3f:c6:24:c8:
a9:a9:7a:c5:85:bf:b7:a7:20:8f:0c:be:8c:8c:bc:50:3c:dd:
8d:b7:8f:79:22:b3:be:3e:46:06:b0:62:68:a2:38:f5:cd:b0:
51:22:ac:46:39:1c:93:2c:c6:27:02:10:02:b8:0b:5b:f2:59:
98:b5:24:e5:07:10:6c:e7:a9:56:cc:70:67:80:fd:75:9d:2c:
20:be:ac:f4:bf:03:1d:38:d0:40:b7:f3:8c:dc:99:10:a3:9b:
2c:02:8e:f1:7a:40:c0:ac:82:e9:29:34:f8:a3:08:6b:7d:31:
3f:3a:1d:aa:e9:de:55:7b:2a:ae:bf:ce:9a:2a:6d:1e:dd:17:
3b:31:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:44 2025 by rpki-client