Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json)
Hash identifier: BJRQ/ZJ3wmtaX+UD3kqUd6n2yq2vk5OM/OLNMpzqGhc=
Subject key identifier: 0F:E0:29:19:99:E1:E3:39:A6:31:14:1E:AD:A5:CD:3F:A0:45:0B:4D
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial: 0BEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
Manifest number: 0BDF
Signing time: Fri 31 Jan 2025 18:39:23 +0000
Manifest this update: Fri 31 Jan 2025 18:39:22 +0000
Manifest next update: Fri 07 Feb 2025 18:39:22 +0000
Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: hTFTK748V2PMTDpzShigT/cLQM2Yy4OxDtUkJ3C8ozM=)
2: A62A1B786E6911EF85E53E66C4F9AE02.roa (hash: L3HTbFeRfnXd8aker4hjWUQjIJnyuV60oQDdUGiSBi8=)
3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: fi7FEW5PKizqZyT+ody3libBNjg0FtOoMpVnmmBqGT4=)
4: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: /tzJtiKlrc3v7323AOuAnl0ze6HPA5F6z5bM+LQYDFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Validity
Not Before: Jan 31 18:39:22 2025 GMT
Not After : Feb 7 18:39:22 2025 GMT
Subject: CN=679d18db-cc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:ed:d6:fe:4f:83:79:af:71:e1:f8:18:4d:
fe:9a:b7:e6:1f:53:0a:cb:fd:a4:ac:8d:30:0b:21:
8f:49:fa:c1:f7:ca:09:71:85:8b:16:56:c8:c3:3a:
69:8e:7f:c8:e3:ad:be:55:9e:9a:84:4b:7d:9c:82:
78:b2:d4:64:0b:4f:3d:79:7b:10:06:6a:48:29:af:
89:07:21:a5:67:a2:08:bb:0b:8a:22:1d:c6:81:97:
f8:61:e0:8c:fc:44:a0:48:ef:28:47:0a:ae:ba:ec:
7c:5a:27:c6:01:e9:6d:d4:bd:f1:a0:6f:23:8c:85:
c4:24:3e:39:ea:1d:a6:a6:0d:78:07:14:c4:fe:b1:
98:ec:6e:30:bc:a9:16:ad:67:7b:ec:55:1b:95:f7:
32:71:21:c0:bb:97:3c:e1:cf:b2:4c:01:53:3b:83:
7f:ca:91:9f:c8:90:50:8a:3c:64:09:f7:a6:8a:a0:
7a:40:17:18:9b:1c:53:10:d8:72:aa:f8:0d:49:78:
b5:07:80:99:7b:34:de:76:dc:6e:d6:71:5f:09:19:
40:52:c7:e3:c5:b3:ff:0e:56:51:56:d5:ef:11:5d:
a6:46:ed:85:90:74:20:e8:79:da:1c:fa:97:b0:7f:
83:af:1c:01:82:aa:a1:1b:40:38:a1:9b:78:e2:34:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E0:29:19:99:E1:E3:39:A6:31:14:1E:AD:A5:CD:3F:A0:45:0B:4D
X509v3 Authority Key Identifier:
keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:60:cb:61:46:7e:38:81:4b:3b:ad:d9:e5:7d:d2:81:db:1a:
8d:34:34:4a:71:af:ef:c8:28:d5:59:6c:c9:67:50:02:4a:55:
03:ac:54:ca:09:20:12:9d:0d:0b:3d:2b:bc:9b:a1:02:68:b4:
07:16:14:e4:c0:dc:81:a8:ef:35:59:f1:44:d0:b3:fe:47:8e:
05:a1:30:66:cd:3c:8d:77:3b:8a:d3:30:32:a4:3d:45:b1:50:
7b:40:70:38:6b:0e:4d:35:fa:b6:14:a7:1b:2e:37:35:c9:6b:
ec:6d:e3:7f:8b:3c:c7:36:9f:94:67:22:33:33:90:57:ec:34:
25:43:e1:3d:51:0c:42:b2:1e:70:b2:4f:91:6c:b2:92:58:b1:
fe:d3:37:25:2f:8e:65:7d:2b:39:a3:25:64:ec:ff:14:d1:cb:
9c:d0:d1:31:ac:3f:e9:8d:e7:af:85:ee:fc:fa:ae:bc:ad:d3:
da:f6:f7:f8:0e:77:c0:0a:6b:44:a2:1b:25:8d:c4:64:bf:43:
3e:0c:b6:03:62:4b:b8:e1:ce:c2:fb:47:d6:d0:47:23:5f:a9:
c2:dd:71:5e:a7:1f:ae:a1:1d:26:19:8a:f3:7a:a7:90:86:1d:
77:f7:f9:2b:fa:09:87:1a:02:92:ec:58:af:2f:cb:7e:5e:b3:
68:aa:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:18 2025 by rpki-client