Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft
File: X2BRhzuBUG4leKxYsyaPAd_ybsw.mft (raw, json)
Hash identifier: Wn3aYdgxIskm/JSNstqNVg832EhdFwQ4AZl/zElNWZM=
Subject key identifier: B8:C7:8F:ED:F0:63:3D:23:F5:3E:CB:5B:D2:D2:0F:C9:25:DB:02:1C
Authority key identifier: 5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
Certificate issuer: /CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC
Certificate serial: 06A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft
Manifest number: 069A
Signing time: Thu 30 Jan 2025 22:13:28 +0000
Manifest this update: Thu 30 Jan 2025 22:13:28 +0000
Manifest next update: Thu 06 Feb 2025 22:13:28 +0000
Files and hashes: 1: X2BRhzuBUG4leKxYsyaPAd_ybsw.crl (hash: Nsu4s3kUy2aiZ7xBh59mlv+K7xp1F6eXD+6j7gh5MvI=)
2: 0F28A28037CA11EDB8E79257C4F9AE02.roa (hash: pF3/SCpjqWZzJ0zKbIk7nxneope2I0jviiYqOPZYauI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1697 (0x6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC
Validity
Not Before: Jan 30 22:13:28 2025 GMT
Not After : Feb 6 22:13:28 2025 GMT
Subject: CN=679bf988-304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:21:dd:ee:c9:a5:bb:5e:f5:d6:69:c9:2f:
0d:77:3c:27:af:20:72:d4:de:12:e9:f9:cc:9c:e8:
86:e3:6d:0b:d9:be:f1:ad:8d:6f:fe:f6:93:50:63:
9c:3e:48:77:92:7d:20:ad:d4:e9:76:e3:ea:71:b3:
3d:f0:03:e7:76:e5:34:3a:ae:9f:92:2d:42:96:08:
05:6f:e1:eb:6f:94:f4:7c:a8:5f:46:df:c4:fa:69:
c1:84:bb:a6:e9:0e:14:5b:36:39:e0:f7:b6:ed:8f:
f4:ed:6f:bf:b4:a0:b4:66:6a:d3:8e:17:22:5c:4c:
c3:a7:ab:0e:76:37:57:cf:bf:15:ea:db:3f:e3:35:
8d:84:14:14:8f:40:8a:15:91:b0:57:6a:b6:0c:57:
5b:c0:09:12:35:d2:d7:ae:8a:e2:31:02:83:c1:63:
8b:05:a9:c2:9d:76:e0:02:69:2f:d8:ac:7c:09:e4:
a2:1a:ab:3e:f6:b3:7d:82:3d:4a:65:1f:19:6f:f3:
5c:12:a6:0b:96:2f:48:a1:0a:8a:8a:9d:9c:b7:a6:
02:be:08:bf:ab:c1:ce:f7:b6:49:ad:e7:09:13:68:
1a:b1:c3:e5:50:d0:3e:19:1a:a0:1c:18:fa:8f:b4:
82:b9:ae:61:07:4c:16:b4:85:88:5c:6d:b5:4f:ce:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:8F:ED:F0:63:3D:23:F5:3E:CB:5B:D2:D2:0F:C9:25:DB:02:1C
X509v3 Authority Key Identifier:
keyid:5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b5:11:0e:b6:23:ab:33:d9:ef:db:2a:2e:ae:de:60:9c:81:
be:be:aa:17:7c:6f:53:eb:5c:98:61:a6:15:27:b0:8f:61:27:
10:d9:64:02:f0:8e:dc:8a:22:54:26:01:74:f9:06:89:f6:f5:
89:ac:c5:73:2b:2d:dc:81:c4:21:fb:9e:c5:23:72:c3:18:ae:
a7:56:29:80:b7:c1:9a:88:c8:e4:c8:40:17:ce:e4:45:69:f9:
2f:f2:8b:63:ff:a0:03:63:6a:b6:92:44:ed:71:46:69:6f:c3:
78:41:fe:96:84:63:62:aa:26:4a:f0:55:9b:7e:af:b6:bd:84:
e7:9a:bc:91:46:a7:7f:8b:4b:5e:82:c4:26:c9:e4:c8:44:73:
c6:7e:b7:91:a8:7e:e6:df:a4:0e:eb:00:2b:bb:4f:ac:15:9c:
ba:73:4a:29:67:77:cd:b3:19:ed:0a:d3:9a:3b:51:fd:60:68:
dd:e9:ab:5b:c9:cf:23:4f:6f:1a:d4:3d:07:8e:44:d0:cb:7b:
1b:6b:8b:d9:70:77:75:ea:dd:f9:fe:09:c8:c5:9b:15:ec:1b:
14:29:c1:ab:cc:4e:a8:47:85:98:f5:cb:17:e9:e9:b0:fb:ed:
c3:56:cd:49:e9:d5:c4:d0:c6:c7:08:32:b6:e9:25:22:70:65:
04:ef:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:13 2025 by rpki-client