Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
File: yut3vPCf9pfximF6qGCJbkMm2dM.mft (raw, json)
Hash identifier: kleC81NwCUaPzlxI5jy97UkrA/0Vfpw+UqMhX1oXHR0=
Subject key identifier: 9B:B3:92:EE:9F:2C:62:BB:3F:69:79:7C:7C:D4:B1:7A:05:D5:6F:0C
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Certificate issuer: /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 06:59:15 +0000
Manifest this update: Fri 31 Jan 2025 06:59:14 +0000
Manifest next update: Fri 07 Feb 2025 06:59:14 +0000
Files and hashes: 1: yut3vPCf9pfximF6qGCJbkMm2dM.crl (hash: UTg4n6TLtDqEBnhAMji8rdCZn4S3o9vWsCC0dkwzaqI=)
2: DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (hash: qIk9+gZ8TbHX8Gukxf70VAnbnxYhLjL95QlSz/2ptXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Validity
Not Before: Jan 31 06:59:14 2025 GMT
Not After : Feb 7 06:59:14 2025 GMT
Subject: CN=679c74c3-8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:9c:ad:a7:c4:39:e6:96:25:4c:e4:c8:c3:
ee:75:88:67:57:b5:7e:3f:76:58:71:15:68:bb:ec:
c0:8f:fd:19:9b:75:2c:99:ba:4c:d8:9a:d2:c4:bb:
1d:70:12:1d:d8:df:59:9d:ba:77:19:12:49:70:ea:
f2:9b:e2:86:2a:ee:9f:92:e5:c5:64:51:07:44:2f:
31:42:d0:bc:c8:28:9b:4b:19:31:1a:da:06:38:96:
60:3d:77:fb:00:dc:2d:9c:7e:e7:b8:22:67:98:bc:
08:c0:26:c6:d1:1e:f6:51:2c:8d:4f:bf:5b:b4:c0:
87:f3:ee:a8:97:2f:a3:f0:71:18:90:42:31:e0:5a:
07:66:7c:2f:96:51:8a:35:05:96:e1:bd:d6:43:7b:
25:b0:46:ab:4e:32:23:15:3d:9d:27:eb:52:d0:17:
09:da:58:a0:3b:88:dd:73:ae:97:5d:e6:29:4e:63:
21:fb:dc:6f:34:c3:a4:c9:28:b2:40:ce:e3:55:7b:
da:db:d5:ed:4e:bb:c8:7a:cd:91:69:18:96:26:ae:
7c:f1:02:83:fa:f6:e5:6c:54:2a:8e:37:aa:76:1b:
63:e5:f7:d8:ae:1b:58:63:65:56:ee:c9:db:c0:4b:
5f:88:6f:3a:d4:c1:cb:33:aa:21:1d:e2:22:17:bd:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:92:EE:9F:2C:62:BB:3F:69:79:7C:7C:D4:B1:7A:05:D5:6F:0C
X509v3 Authority Key Identifier:
keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:4c:f0:40:e2:89:c8:f4:c1:b0:7d:75:be:8a:e5:a5:a7:
64:ae:43:3c:32:a3:29:ee:57:ce:59:0d:69:04:a8:73:ab:91:
bb:d3:ba:52:36:b1:2a:f7:38:44:a1:ba:74:f6:48:c3:6e:e4:
d8:46:ab:2c:12:65:e7:e4:14:28:1b:2c:24:72:82:80:33:90:
b9:1e:5c:1c:81:20:ed:f6:55:62:d8:9c:48:0c:a2:34:ae:05:
c3:c9:41:d3:8a:bd:2d:d4:eb:25:7e:d0:c9:44:b2:b8:0e:b9:
7d:f5:01:8e:f6:0b:fa:3c:7f:74:2a:88:86:f6:d9:a9:b2:ec:
6c:6a:f4:1d:bb:80:f5:6c:5f:91:cb:9e:b2:b7:16:78:cf:37:
da:89:ab:a3:e4:3f:f7:15:2c:05:6a:a5:3c:9d:a8:de:f8:a5:
d4:f4:33:3a:80:2c:13:ac:30:77:90:35:1b:f0:ca:43:13:b3:
cf:d0:b7:37:28:ee:37:aa:6f:1e:9b:e3:b0:61:51:74:45:47:
9d:61:73:66:4b:bb:9d:64:a6:4b:d5:48:5f:e6:a0:00:1e:4a:
d0:44:32:6d:7f:bf:3d:d2:51:c7:ca:ff:51:52:e7:10:74:62:
65:bc:c4:a3:08:4d:2b:a1:bf:e0:17:78:9c:67:f3:4b:d2:8c:
c7:01:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:50 2025 by rpki-client