
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
File: capYzfG2vXwm5hp1GKTQrSyfGhQ.mft (raw, json)
Hash identifier: ychGdoV5PqB7iNFiVg7d/hInJCjfkvQrbn+kVXwGYFs=
Subject key identifier: B5:27:F2:1F:22:66:9F:F4:77:32:4B:94:95:A2:96:FE:15:11:F7:90
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
Manifest number: 084C
Signing time: Thu 30 Jan 2025 20:50:36 +0000
Manifest this update: Thu 30 Jan 2025 20:50:35 +0000
Manifest next update: Thu 06 Feb 2025 20:50:35 +0000
Files and hashes: 1: capYzfG2vXwm5hp1GKTQrSyfGhQ.crl (hash: EsZgddRrAnMF7RyZnpHAVKWg8kAklOcweD6FPGideWw=)
2: 8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (hash: ulEoG77MrSiwSYhpxeW0HQs0UzURtgxGQwYkMWVPA0Q=)
3: 8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa (hash: fZLciG+K7KBAB8NViLLV71yANJqxZTohTScAC7z2iIU=)
4: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (hash: K/SJXrHKSaQpDMVLZJrukFZmfGOIIuOIUDxauUWHXXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Validity
Not Before: Jan 30 20:50:35 2025 GMT
Not After : Feb 6 20:50:35 2025 GMT
Subject: CN=679be61c-3731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8f:14:e1:91:09:52:f9:29:fc:88:84:30:97:
87:9c:60:d8:73:99:22:7a:2b:09:d8:e7:71:35:bb:
99:3b:c5:3e:1a:1a:11:83:f5:62:ea:65:8e:02:84:
91:5f:f1:88:38:90:dc:e3:aa:20:a9:13:34:1e:35:
53:de:00:84:3d:07:f6:09:36:5c:f7:e7:fa:38:bf:
0b:f5:cb:5c:bf:fd:7e:86:67:35:44:0e:92:e6:53:
9c:e3:a5:a7:99:d2:ff:ac:3d:c3:2a:e5:74:67:a8:
35:e4:28:72:7d:6a:1f:d7:aa:ef:33:64:4d:4f:ee:
44:07:7c:ee:20:56:47:78:20:eb:e0:87:89:1f:5b:
87:48:07:24:7f:e4:12:c9:ce:13:33:f5:4d:83:84:
d7:18:76:40:2c:04:43:22:90:16:2c:60:50:53:fc:
58:b5:d0:a5:b4:b6:27:67:3e:f5:08:9f:df:4e:6c:
64:f4:a3:7c:6e:08:1a:0c:9b:6e:98:c6:d6:b1:f9:
13:74:ea:ca:da:65:e2:e1:7e:28:a8:ed:13:21:08:
d0:3d:08:2f:69:46:eb:0f:5a:b0:4c:9a:b9:f3:35:
2a:71:a3:2c:54:0a:58:b3:63:86:64:44:88:7c:e8:
b0:42:c5:11:66:58:9f:32:63:c4:f6:c4:b1:d8:92:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:27:F2:1F:22:66:9F:F4:77:32:4B:94:95:A2:96:FE:15:11:F7:90
X509v3 Authority Key Identifier:
keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:c3:6e:b6:b6:6e:ce:69:9e:fb:6f:30:db:0d:dd:49:69:
cc:ed:85:3d:75:e3:ac:d2:f8:be:a2:2c:df:37:dd:0a:bc:78:
1c:d6:5a:ef:1b:7f:3e:86:5c:50:94:38:58:16:fe:19:36:10:
30:d5:3c:37:6d:f1:aa:55:60:2f:6d:ce:55:31:41:c7:bc:55:
e1:02:07:5e:7b:c9:bc:28:e1:f4:95:20:fd:df:ec:d6:e0:c5:
60:25:5f:8d:39:7c:39:b1:2b:ed:36:92:97:93:6a:a4:ed:a1:
e7:c9:39:ea:53:dd:ea:34:32:80:cf:38:35:d6:2c:d3:ef:5e:
33:b2:48:41:ce:f8:14:4a:42:21:b3:f4:3d:f5:42:58:8a:59:
ea:4f:e2:15:34:f1:7e:16:66:9f:9a:53:a0:f2:0c:c4:b3:2d:
c2:7f:8e:42:2b:a8:ce:b4:2c:d5:31:05:16:70:22:19:18:f7:
8d:94:a4:4d:c2:57:c5:29:91:fd:33:5a:72:ca:70:e6:93:9b:
9b:cb:4c:41:66:43:7e:2e:a3:41:1b:ec:68:8b:d6:ce:a5:39:
78:7d:67:61:f8:be:94:a1:84:e8:cb:ad:18:e8:47:b1:31:37:
5a:a7:29:4d:17:7f:b1:ec:60:5b:ad:64:fb:50:81:b0:7a:e1:
cb:5c:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:39 2025 by rpki-client