Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json)
Hash identifier: VkB4+mL+pTa/FpYBanTgRRDAFzE/H1D48VdeKbdQvxA=
Subject key identifier: 79:44:41:AC:4F:97:F7:DE:03:6E:87:9D:1B:8B:00:67:BA:B9:72:16
Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
Manifest number: 0167
Signing time: Fri 31 Jan 2025 03:08:32 +0000
Manifest this update: Fri 31 Jan 2025 03:08:32 +0000
Manifest next update: Fri 07 Feb 2025 03:08:32 +0000
Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: MwxlBAS9H4X80u7zFirVW9HG/RF1HLpBLDqHw/1vTVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE
Validity
Not Before: Jan 31 03:08:32 2025 GMT
Not After : Feb 7 03:08:32 2025 GMT
Subject: CN=679c3eb0-7c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:d1:02:ab:0f:85:9c:b5:0a:e3:fb:f6:b5:
0f:37:6d:de:ac:e9:bb:32:f1:a2:1d:d3:de:6f:98:
6d:1a:1b:fa:a5:6e:ee:b3:9e:99:ce:62:fe:09:b2:
7e:7a:a4:cd:7b:e4:a6:03:76:7c:6d:2e:02:ea:21:
98:63:cc:85:20:bc:e9:a6:5d:e9:2b:5a:ac:98:1a:
ad:73:5d:db:2c:b4:78:27:3e:06:90:42:1c:05:b6:
4a:56:36:b8:4c:c0:f1:7d:47:df:d9:25:ac:53:c1:
0e:3d:b8:7b:d5:5e:97:9b:56:6c:de:db:db:40:18:
13:0f:aa:18:bd:72:bc:1a:cc:18:27:49:fa:2a:5b:
c2:0e:09:f7:60:28:7d:02:9f:4c:06:c3:b4:b8:ab:
33:98:a8:05:66:50:a0:e7:62:98:7a:c5:b8:90:33:
ff:c7:50:c6:5a:28:53:67:c7:89:4f:23:c2:2c:93:
6d:c8:b0:87:3f:5c:a1:c0:5b:bc:31:1e:ab:fd:5e:
16:c0:73:e2:3d:9e:c0:a1:a9:87:e1:68:7d:33:2d:
62:29:08:10:c9:1a:4f:f0:09:c8:ac:54:cd:4b:93:
c2:6c:b7:43:1e:e2:91:f4:6b:65:19:aa:6e:82:9d:
e7:44:ab:72:94:f7:2e:5e:ac:57:00:25:bd:cd:04:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:41:AC:4F:97:F7:DE:03:6E:87:9D:1B:8B:00:67:BA:B9:72:16
X509v3 Authority Key Identifier:
keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:94:14:da:44:ec:4f:70:da:58:15:b4:50:37:54:28:88:13:
a8:4f:b3:8b:48:59:66:00:e2:dc:4b:59:a5:b7:c5:d7:21:20:
b5:f0:4e:4f:c6:42:f9:d6:23:d5:d1:86:5a:b2:14:a2:13:0a:
3a:b5:02:17:43:cb:ec:a8:00:13:fe:f8:c8:a5:d7:e2:3d:d8:
8e:64:03:50:f7:ed:9d:61:42:37:79:bc:57:11:34:1c:52:57:
94:fe:25:41:79:7c:ed:4d:9b:bc:c0:58:56:5d:56:20:22:be:
62:db:2b:76:a6:f9:55:71:34:b6:93:f6:62:0e:fd:65:7a:bf:
91:5a:6f:f3:c5:39:24:47:04:8c:ec:2a:80:23:f8:7e:de:bf:
39:e7:7e:86:27:5b:23:cd:0a:87:72:7d:74:88:56:ff:a7:05:
b1:22:c7:8a:c7:c6:4b:c5:46:49:cf:e9:c2:59:0f:ea:62:49:
bf:08:30:21:39:3b:8f:78:d2:be:51:97:17:9f:2e:a5:7f:85:
02:82:6b:8a:ec:2e:94:5f:9f:bc:eb:69:74:e0:f1:5d:b7:56:
73:15:0b:d8:36:c3:9e:4d:b0:69:4f:f5:54:42:8a:0f:96:da:
47:9f:f0:a3:53:9f:90:be:b2:62:25:16:f7:0c:16:7b:07:15:
af:e0:30:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE
RTEyMjJDRUUwHhcNMjUwMTMxMDMwODMyWhcNMjUwMjA3MDMwODMyWjAYMRYwFAYD
VQQDEw02NzljM2ViMC03YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAHRAqsPhZy1CuP79rUPN23erOm7MvGiHdPeb5htGhv6pW7us56ZzmL+CbJ+
eqTNe+SmA3Z8bS4C6iGYY8yFILzppl3pK1qsmBqtc13bLLR4Jz4GkEIcBbZKVja4
TMDxfUff2SWsU8EOPbh71V6Xm1Zs3tvbQBgTD6oYvXK8GswYJ0n6KlvCDgn3YCh9
Ap9MBsO0uKszmKgFZlCg52KYesW4kDP/x1DGWihTZ8eJTyPCLJNtyLCHP1yhwFu8
MR6r/V4WwHPiPZ7AoamH4Wh9My1iKQgQyRpP8AnIrFTNS5PCbLdDHuKR9GtlGapu
gp3nRKtylPcuXqxXACW9zQS/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlEQaxP
l/feA26HnRuLAGe6uXIWMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2
ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI
bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCglBTaROxPcNpYFbRQN1QoiBOoT7OLSFlmAOLcS1mlt8XXISC18E5P
xkL51iPV0YZashSiEwo6tQIXQ8vsqAAT/vjIpdfiPdiOZANQ9+2dYUI3ebxXETQc
UleU/iVBeXztTZu8wFhWXVYgIr5i2yt2pvlVcTS2k/ZiDv1ler+RWm/zxTkkRwSM
7CqAI/h+3r85536GJ1sjzQqHcn10iFb/pwWxIseKx8ZLxUZJz+nCWQ/qYkm/CDAh
OTuPeNK+UZcXny6lf4UCgmuK7C6UX5+862l04PFdt1ZzFQvYNsOeTbBpT/VUQooP
ltpHn/CjU5+QvrJiJRb3DBZ7BxWv4DBh
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:28 2025 by rpki-client