Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json)
Hash identifier: Lu4ZxvG2buQ0DlLF/PVXco3oGIFqj+s6m1cozYxeN40=
Subject key identifier: 64:96:BE:44:A0:1D:B4:B7:9C:7E:F1:88:4D:7F:38:D2:BE:A6:85:CA
Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Certificate serial: 0C67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
Manifest number: 0C5B
Signing time: Fri 31 Jan 2025 18:11:05 +0000
Manifest this update: Fri 31 Jan 2025 18:11:04 +0000
Manifest next update: Fri 07 Feb 2025 18:11:04 +0000
Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: GOWyz+NoRNcoSeQjSWr4JMq2h0ReD0rQU5cXoMqgiPk=)
2: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: hSO23qhSJreuhOLk9R8p+4DtFYxsss4sjYdKljRJK2k=)
3: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: 7iLE2NbcVEE13k7k5xb5wiFVYhBSAES33qNPZQmTZqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611
Validity
Not Before: Jan 31 18:11:04 2025 GMT
Not After : Feb 7 18:11:04 2025 GMT
Subject: CN=679d1238-e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:d4:3f:03:13:62:7c:b7:48:df:54:10:ec:
a4:a6:da:e1:71:c1:2f:17:06:9e:8b:8e:c9:72:ba:
86:96:b1:9a:26:4f:b6:91:69:a7:2c:24:c5:8f:3e:
eb:87:24:65:b4:d4:b2:d7:31:1c:b1:7c:28:8a:02:
ad:9e:d2:52:61:bc:71:7b:4c:1d:7f:2d:6d:54:1c:
a3:a8:52:50:3e:31:3d:fa:d6:ef:59:53:f4:07:48:
f4:4c:d2:4a:eb:82:6d:32:13:21:d4:f4:47:ac:c4:
dd:95:d3:f9:cc:10:e1:77:09:c1:f4:08:1f:d3:1e:
09:f5:67:c9:a1:83:bf:c5:1e:e3:0a:c8:71:a4:67:
1d:d3:a3:ff:ac:5d:92:b6:a3:91:4a:c8:26:b6:7b:
a5:76:ca:3e:68:29:77:57:f2:28:5b:de:23:95:bb:
d8:22:47:27:01:0e:b0:6a:32:4c:15:ae:0e:52:f0:
80:da:ee:01:3d:71:34:5e:bf:95:95:9c:51:10:0c:
c2:84:f4:25:5f:78:41:eb:fc:bf:ff:23:a7:a0:36:
10:56:26:3e:e1:a3:0a:82:6b:c1:62:e5:60:3e:6e:
7f:70:ce:fd:eb:49:c2:e8:47:d5:5e:26:88:15:ce:
d3:8f:25:67:76:c3:12:c2:c3:69:f0:82:02:2a:35:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:BE:44:A0:1D:B4:B7:9C:7E:F1:88:4D:7F:38:D2:BE:A6:85:CA
X509v3 Authority Key Identifier:
keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:f7:aa:6f:8f:48:a9:05:2d:b8:61:be:7a:71:cd:b5:bd:
6c:05:fc:9e:55:24:82:1f:91:36:6c:d2:e7:59:c4:ca:ba:a7:
ee:5a:40:bc:34:d8:91:61:e0:af:bf:21:f9:2d:a4:29:e7:07:
2a:0d:b2:f5:d1:6c:2f:76:46:34:dc:a9:d7:88:29:1d:6c:4e:
89:5b:22:4b:d7:69:32:b8:a3:1d:01:06:3a:6f:8d:61:09:8d:
de:e1:33:ce:fe:99:b9:b2:ad:ed:d5:04:08:62:b8:ee:29:26:
84:76:8d:89:b5:ad:7d:59:ea:fc:64:2b:76:97:b9:94:70:99:
1e:66:cf:51:b7:49:35:65:ec:d0:08:d4:75:a7:5d:ac:d1:34:
01:6b:bf:d8:4a:86:db:58:0d:03:b8:67:d9:9e:39:04:3a:cd:
99:5c:a5:d1:54:ab:c2:2c:8c:6f:25:f8:45:ee:c0:d7:83:06:
6b:7c:c7:1a:45:c0:40:6e:a0:5c:82:df:31:f4:42:a3:de:3d:
3a:30:0a:12:4b:fd:34:62:c0:60:47:2c:41:c4:c1:0e:70:c3:
1d:4d:bc:2e:59:d6:5c:7a:a4:d0:96:a8:47:a5:47:ed:f2:4c:
92:b8:dc:0c:69:48:c4:4b:22:7f:88:cf:49:37:ec:2d:b2:5e:
7c:fb:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:14 2025 by rpki-client