Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json)
Hash identifier: TMA1ZlzIOBSs/M11WYXUFexHvAcm90TphpVugHYPia8=
Subject key identifier: 4D:10:57:EE:E5:F4:2F:DC:19:24:C9:A5:BF:A1:16:EA:9B:3C:75:0C
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 03:49:29 +0000
Manifest this update: Fri 31 Jan 2025 03:49:28 +0000
Manifest next update: Fri 07 Feb 2025 03:49:28 +0000
Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: 1OVAcn3rNVkuKK88W5rU2UkLN1gwS0vsNKlwWBN0YhE=)
2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: mEyirxNNF/HUjbME+0mygxI2/51XwzfUXk7qYYI6cLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Validity
Not Before: Jan 31 03:49:28 2025 GMT
Not After : Feb 7 03:49:28 2025 GMT
Subject: CN=679c4849-cea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:28:6f:b8:61:49:71:e6:4d:eb:06:f6:89:
2e:aa:52:40:cf:cb:ef:2a:cb:ce:38:dc:83:0f:cc:
a6:ed:6e:86:92:94:31:f3:0f:fe:37:a0:e5:48:9f:
e3:bb:88:08:6a:be:67:1c:77:67:87:30:29:9c:91:
ca:92:be:49:7e:19:a5:5c:25:f1:f2:51:1b:77:dc:
96:bf:fd:41:4b:df:ba:60:71:6c:bb:13:0a:96:f4:
64:31:9c:a0:07:00:00:5d:6a:1b:83:7a:53:f5:b2:
9c:0c:58:5a:0b:04:98:7f:b5:b5:49:fc:8a:f1:87:
bb:9b:a8:60:8c:f1:77:c9:55:b3:ba:df:1a:3a:52:
2b:c2:f5:88:4b:5b:0f:41:f0:41:c3:9c:5f:e5:e6:
2b:5b:a0:8d:c5:c9:02:cc:fd:94:21:84:fe:14:3b:
c7:51:be:60:63:1a:82:bb:68:e5:40:0f:10:7e:57:
0d:fa:41:d7:1d:88:1d:5a:7c:84:e2:bf:8e:b0:fe:
6d:16:26:e0:99:c4:41:b4:52:3c:bf:70:45:66:ad:
5d:d2:a1:67:0c:ed:5e:ac:b9:03:5d:eb:9f:35:ea:
09:e2:3f:2a:b6:3e:d5:46:99:6a:10:d7:74:24:8c:
99:d8:5c:d4:dc:b0:47:16:74:2c:ba:6b:8f:b3:e0:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:57:EE:E5:F4:2F:DC:19:24:C9:A5:BF:A1:16:EA:9B:3C:75:0C
X509v3 Authority Key Identifier:
keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:45:a0:06:5b:99:a5:32:4c:45:c1:d4:9b:7d:47:4a:f0:
40:ba:16:ad:b7:7a:93:25:1b:d2:54:c5:62:9b:e8:d9:cd:03:
b7:62:69:3d:0e:5c:04:cd:ef:a9:5a:a4:ac:a5:db:58:c7:b0:
d4:d5:7d:c3:19:21:ea:6f:85:ed:a9:a6:10:d0:06:04:d2:28:
64:1e:d2:ab:8c:0f:bd:98:02:d5:f4:3c:b5:50:ec:dc:1f:66:
54:0d:11:b2:0e:aa:63:c2:b5:3d:3b:e0:96:23:f1:97:54:54:
79:32:d3:b6:e9:36:e1:d4:5d:75:55:4a:60:2f:9b:cf:e7:9e:
c7:c6:7f:f1:0e:0e:2b:44:c4:88:06:51:cb:ff:42:4e:ab:99:
1f:e0:aa:9c:00:b4:4c:46:39:a4:08:c7:4a:31:d8:b4:a6:1b:
ad:06:ef:f4:46:31:30:e8:d3:ba:1f:9a:c8:9b:1e:a0:eb:88:
e4:63:3c:20:d5:c4:94:8c:95:d8:75:31:2b:72:90:b3:c7:b6:
6b:56:3a:55:f7:b2:29:d7:cd:e0:02:b0:ca:dc:35:9c:bc:64:
23:e2:42:cc:1a:8f:26:86:38:e4:a5:27:bd:e6:df:30:cd:e0:
f0:d3:2b:58:cc:20:70:91:a1:b2:6a:c7:39:cd:60:b8:54:e1:
9b:97:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:41 2025 by rpki-client