Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File: YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier: uhHGEHSn9mY6LW5QFuOeHvDWfPnZty4owrqh47s55T0=
Subject key identifier: AE:18:E5:16:9D:53:08:0F:5F:B9:11:BF:8F:E6:1A:83:A2:DE:06:84
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer: /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number: A5
Signing time: Fri 31 Jan 2025 05:19:27 +0000
Manifest this update: Fri 31 Jan 2025 05:19:27 +0000
Manifest next update: Fri 07 Feb 2025 05:19:27 +0000
Files and hashes: 1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: eHzIbBcUfzJ534BPrS/VLkOhU1C0yOKbjaaM+pK8HXE=)
2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: yl/E8QHLka4/lwMsB6BevGouPJwrIPgnFEOjdbPwsG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Validity
Not Before: Jan 31 05:19:27 2025 GMT
Not After : Feb 7 05:19:27 2025 GMT
Subject: CN=679c5d5f-c35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:e1:25:c1:f6:48:86:ab:20:ab:3e:3d:9a:
cf:00:59:44:90:cc:6e:de:ab:34:df:09:91:b0:39:
a1:e5:de:01:7a:1e:5b:41:10:80:ce:38:12:3a:3e:
67:1b:24:a8:1c:ea:5b:f3:35:16:56:68:79:a1:ee:
be:f3:4c:5e:1a:be:ea:bb:11:da:60:78:3a:f5:10:
c3:8d:92:cf:2e:df:ee:4d:f6:ab:08:63:a5:26:d0:
50:30:a6:d3:5a:b2:97:c3:8a:46:98:8f:e4:a1:90:
e9:bd:7a:76:3d:4c:27:01:d0:12:b2:40:cc:94:b2:
59:28:b1:d9:72:3f:5d:0a:46:27:27:17:78:42:e4:
9c:66:f3:ed:01:7e:da:8e:6e:0e:a3:8f:35:69:7b:
8a:f1:cc:62:21:af:2d:a1:81:80:43:74:96:b7:f9:
fc:69:0c:0d:9f:6c:54:03:08:99:1f:4c:45:bf:7c:
f5:84:c2:2c:be:ff:76:3e:5e:4c:02:91:54:83:05:
c7:66:12:2e:59:34:7d:12:65:e7:b4:b8:3e:56:3a:
1f:dd:9a:f9:9b:12:78:8f:2b:54:71:e2:9b:be:49:
64:63:94:64:37:75:c2:73:ff:06:ed:b1:54:46:01:
65:30:54:70:03:e1:62:13:5c:d7:d8:61:c3:f9:1c:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:E5:16:9D:53:08:0F:5F:B9:11:BF:8F:E6:1A:83:A2:DE:06:84
X509v3 Authority Key Identifier:
keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:4e:93:72:f9:8d:d3:94:c0:e6:73:e9:51:02:bd:be:a4:
24:3c:1e:dd:86:00:91:43:b8:78:c3:42:c4:1c:b6:3b:af:3f:
e4:92:02:2d:4d:d1:4a:55:64:c0:2a:d1:69:3a:2b:92:30:e1:
9f:6e:a8:51:48:b1:d5:96:56:11:15:1a:67:a0:c4:d1:df:9c:
f4:89:5f:df:5a:60:ba:ca:5c:b0:69:39:23:ae:b2:74:f2:ff:
c5:29:7a:d7:fe:47:34:b1:f6:74:a4:18:6f:31:20:ce:c1:be:
2b:3d:cf:fb:07:26:a5:b8:eb:00:8f:00:a1:d7:04:00:49:a0:
70:93:cb:d2:82:88:f4:67:3d:e6:16:4a:17:e2:55:e1:6c:c3:
dc:4f:0f:45:ca:6e:82:ff:fe:19:74:cf:ac:f0:4e:29:62:31:
bb:35:34:11:41:58:cf:3a:4c:a1:dd:1d:c8:4f:33:fe:ed:34:
04:5a:02:f8:be:ff:15:e6:2f:5d:9d:99:1c:9c:98:fb:cf:29:
a3:fa:f8:23:5f:09:3d:41:33:28:24:4a:a1:a8:91:b6:1d:7d:
66:6f:4a:50:8c:63:91:de:04:e8:0e:ec:e6:05:e2:32:f9:32:
43:82:46:07:da:63:ab:92:ed:09:5e:72:e1:fb:75:de:31:fb:
df:cd:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:00 2025 by rpki-client