Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
File: yizBAkNd6FHdppmDFZEvBvQQTrE.mft (raw, json)
Hash identifier: 5JbGeyFAlbR/kCHok88I1HZ/m0YKA9BXnl97AAUUBs0=
Subject key identifier: 62:97:CB:B7:0F:46:33:A1:9A:BB:CC:EF:30:4C:BE:28:42:CE:FF:21
Authority key identifier: CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
Certificate issuer: /CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Certificate serial: 04DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
Manifest number: 04D5
Signing time: Thu 30 Jan 2025 23:50:42 +0000
Manifest this update: Thu 30 Jan 2025 23:50:42 +0000
Manifest next update: Thu 06 Feb 2025 23:50:42 +0000
Files and hashes: 1: yizBAkNd6FHdppmDFZEvBvQQTrE.crl (hash: aQE/NW/nwNkBJhEYcf0CjmyIT9tIaedFUtkhhnv5zhg=)
2: 973E6B76107C11ECB1F7DE5DC4F9AE02.roa (hash: SQGdKb1vFGjNIUOuBUka92JYyHUgvE8twdlpTLjrdUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177562/serialNumber=CA2CC102435DE851DDA6998315912F06F4104EB1
Validity
Not Before: Jan 30 23:50:42 2025 GMT
Not After : Feb 6 23:50:42 2025 GMT
Subject: CN=679c1052-474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:63:d5:f9:7a:77:f7:e1:e2:70:cf:21:2b:
16:f2:7a:b5:c1:f1:d4:3b:2f:d5:3a:55:17:91:f6:
70:a4:c0:c6:55:03:21:f7:9b:d4:e1:42:16:a0:5a:
42:46:22:0a:b2:1f:15:f0:b7:37:8c:13:80:39:9b:
52:7e:b7:19:18:9c:e7:dd:c3:db:c7:21:f5:3d:81:
a4:15:f3:ba:3a:c3:23:e0:ed:42:87:02:88:dd:7c:
99:f8:d8:23:5d:5c:c4:06:91:6c:2e:ec:89:db:5d:
42:34:c3:54:9a:ca:24:68:a4:03:29:7c:73:cc:5e:
49:64:c3:ad:52:a4:df:40:e3:6d:8c:ec:35:c4:95:
a9:2e:f0:0b:64:d0:45:b8:7b:2e:fc:5f:93:fd:e6:
21:2e:df:cc:1d:a9:84:ea:ed:c2:e1:2e:e8:27:a8:
ee:98:93:f8:5f:64:6b:0a:f5:df:a4:29:cf:e6:e8:
37:0e:74:70:eb:84:55:86:9d:f8:a4:2d:a9:0d:68:
fd:cb:5f:e4:97:69:4c:79:ff:fa:f5:77:36:92:38:
22:8b:52:39:be:b7:47:55:38:d5:bb:27:fb:93:88:
39:3a:42:ea:16:d9:6c:00:75:87:57:b8:31:6b:65:
5b:80:41:aa:67:6f:4f:4a:2f:19:c3:95:37:8a:8d:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:CB:B7:0F:46:33:A1:9A:BB:CC:EF:30:4C:BE:28:42:CE:FF:21
X509v3 Authority Key Identifier:
keyid:CA:2C:C1:02:43:5D:E8:51:DD:A6:99:83:15:91:2F:06:F4:10:4E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yizBAkNd6FHdppmDFZEvBvQQTrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177562/6A3F921C073011ECB1249841C4F9AE02/yizBAkNd6FHdppmDFZEvBvQQTrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:71:97:38:0d:50:c2:7d:83:7b:a8:a6:56:0f:ee:d1:06:
1e:0c:e6:ad:57:1d:fe:0e:32:7f:ae:33:99:5c:7b:f4:0f:df:
ba:8a:e3:bb:6e:65:06:34:31:eb:86:72:59:2c:a7:7f:d4:f5:
48:bb:c9:97:4c:46:c2:d3:62:a9:f5:0f:89:ab:83:c8:77:9e:
53:cd:fb:a3:a1:74:d1:57:93:da:f9:68:99:e2:c1:b8:e6:a1:
60:20:0e:9a:66:0a:7e:ca:7a:25:45:45:bb:ec:1b:df:82:ff:
9b:f3:fb:f0:e7:de:3d:ca:a5:e9:34:d1:71:82:fa:5d:67:6c:
f2:03:f2:22:f9:22:c9:fc:3e:1e:80:c8:29:03:1a:a9:3f:53:
0e:7c:1f:e3:a1:67:62:06:37:72:14:e1:e6:25:54:4a:3c:f0:
42:32:68:af:98:36:63:cf:4b:a0:4a:f8:c3:09:c8:57:8a:77:
8c:eb:9d:ff:49:4c:c6:94:d0:ec:92:74:27:31:c9:87:7d:95:
1f:e5:b3:23:68:5c:63:f4:46:0d:94:fa:11:f5:f5:3c:f5:40:
a8:21:18:69:bc:56:e4:1e:33:22:50:95:98:cf:20:e3:ad:b0:
b5:8a:b0:e0:5d:bf:52:c2:3e:b5:b2:50:b7:5e:5d:81:18:b3:
73:0c:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:14 2025 by rpki-client