Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
File: Ys-2EOllD-PIACvGF7cFck0qAt0.mft (raw, json)
Hash identifier: 6AnIDswn3iO8PRrHBFwxBciMGl3IuzGpOHN+2mdx1ew=
Subject key identifier: 4A:3E:B8:A6:99:08:17:BC:6F:AD:5B:B3:B2:08:54:95:79:E4:C4:6D
Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Certificate serial: 17E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
Manifest number: 17DC
Signing time: Fri 31 Jan 2025 16:33:11 +0000
Manifest this update: Fri 31 Jan 2025 16:33:10 +0000
Manifest next update: Fri 07 Feb 2025 16:33:10 +0000
Files and hashes: 1: Ys-2EOllD-PIACvGF7cFck0qAt0.crl (hash: 0EoSolHkBXrlCRg7273cbod9dt5ABU8bdGJk3dgHg4U=)
2: C1C12662CFC811EB9A5C5879C4F9AE02.roa (hash: YxR/IEAXYjhKk4qyNbFNVRXx2+Bty0U++VTURHi/7GY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6121 (0x17e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD
Validity
Not Before: Jan 31 16:33:10 2025 GMT
Not After : Feb 7 16:33:10 2025 GMT
Subject: CN=679cfb47-a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:01:d9:08:30:53:81:5f:c0:b8:fb:c8:84:
c2:26:02:06:72:3a:47:c8:cd:8e:ec:a4:48:80:f2:
df:c7:79:91:fa:90:63:bf:8a:97:95:e0:95:ce:d7:
b0:51:d0:3b:fc:ae:a6:ca:4f:dc:fa:25:39:c3:b1:
c0:c9:87:0a:3d:f6:53:8a:94:ee:b3:fb:98:1d:26:
21:87:58:ea:46:93:02:20:3a:65:4f:63:c3:9a:73:
1b:0b:60:58:aa:b6:ec:cb:06:60:12:8e:4e:90:42:
10:be:57:0d:ae:c7:e5:f5:b6:43:e1:9e:de:4c:59:
9c:20:67:7b:9a:71:f1:9a:c0:90:6e:64:c5:20:d8:
5f:0b:57:4b:df:93:56:b5:71:1e:4e:47:03:c2:6e:
81:f1:4f:c0:2a:fa:1e:9e:3a:d6:72:62:f0:02:49:
c4:7c:cf:e3:c3:3e:fe:ea:05:c0:77:d4:35:35:40:
99:dd:65:e0:29:57:c7:c6:1f:1a:65:b1:2c:bb:d4:
c0:f9:8f:7f:cd:e3:e7:ba:93:17:13:86:9d:13:15:
68:f6:7f:8d:ff:a8:97:6a:a4:e6:7e:be:1e:a2:12:
06:2a:ea:f3:39:52:ff:03:1e:34:cf:1d:61:3d:65:
09:5e:f9:e1:0e:b9:a7:60:5d:bd:72:ce:c9:7b:ae:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:B8:A6:99:08:17:BC:6F:AD:5B:B3:B2:08:54:95:79:E4:C4:6D
X509v3 Authority Key Identifier:
keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ed:25:c4:50:5e:1e:2c:de:58:c1:eb:8f:e0:2f:26:7e:fd:
2d:6f:49:d2:96:24:bb:98:ba:a5:22:04:73:b1:77:4f:ee:42:
24:8e:6d:c0:95:69:f6:73:b8:78:50:50:79:d0:eb:52:35:1e:
77:ea:5b:6d:fa:84:88:76:32:40:bb:ee:56:64:b3:41:e5:72:
7c:f5:15:21:f9:bd:9d:75:98:32:92:d4:88:2a:91:a4:44:4a:
d5:13:0a:cd:79:fd:20:32:c8:09:7f:64:c9:d3:91:c5:cb:7d:
d1:f0:df:cd:99:a1:34:54:dc:57:f1:1e:14:84:52:cd:83:42:
60:57:4b:47:88:8d:b9:11:2d:0e:cf:f4:a3:69:9a:e2:1e:27:
90:3f:2f:f0:c4:da:ec:50:19:e6:fc:e5:0c:92:34:1c:6c:0d:
44:13:3f:9b:98:b0:02:40:d9:2d:20:28:33:62:5f:7c:96:ee:
e4:a5:ac:b5:51:b0:08:4c:07:6a:8a:63:98:14:e9:a2:cc:92:
c4:37:3c:79:17:53:08:a0:3c:2b:2d:c0:89:92:e2:54:cf:0b:
1b:19:fd:07:e3:44:83:6a:6f:ba:f4:99:b3:62:39:9c:84:db:
73:55:24:89:40:cc:37:20:f2:63:09:35:e6:0c:7f:5f:fa:45:
0c:ed:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:58 2025 by rpki-client