
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier: /LHi0Zde/Q8gPQZveJaog22HSDlnN7JrAZtnln7nwPs=
Subject key identifier: 4C:6F:BD:FA:0C:57:AC:D8:30:45:FF:8F:05:8D:FB:74:E4:E1:DC:06
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 0773
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number: 074B
Signing time: Thu 30 Jan 2025 21:38:25 +0000
Manifest this update: Thu 30 Jan 2025 21:38:24 +0000
Manifest next update: Thu 06 Feb 2025 21:38:24 +0000
Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: zWwt4Wrx1dcLDomKu+3MWoaBhULdHZah5GmEXFNjJYs=)
2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: m3HRY//GpdVT+hpG8y49SxDvHAGnCrO93hZGlg6oP6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907 (0x773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: Jan 30 21:38:24 2025 GMT
Not After : Feb 6 21:38:24 2025 GMT
Subject: CN=679bf151-9a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:d8:d5:b1:13:7c:34:cc:0d:62:ed:65:cb:
71:e3:6b:28:5c:65:55:c7:d5:9e:ab:9c:7f:f5:5a:
03:6a:a3:15:8d:fd:2a:f7:89:f9:1d:bf:2a:6a:68:
25:f2:34:19:d9:eb:eb:b6:9a:49:7e:d8:38:3d:d8:
77:53:ae:87:ff:a4:5a:5a:37:57:13:71:68:5e:db:
79:dc:d0:88:a8:a2:23:64:6c:d7:3d:c1:e1:da:da:
10:cb:65:c9:57:a4:98:04:07:83:bc:a9:59:98:bc:
a4:66:17:c3:06:f8:92:9f:53:bf:eb:1f:96:2e:3e:
32:9f:92:b6:fa:ab:3e:9a:d9:3f:06:1f:e7:73:2e:
e5:f6:c5:40:d5:97:96:05:24:80:f0:11:05:6f:19:
6f:ab:57:ba:79:40:4c:9e:ec:52:b4:18:d7:4a:21:
86:66:71:c5:39:67:06:a9:db:2f:68:39:76:f5:7e:
4d:ee:ca:77:74:2e:80:e9:cf:f9:61:a9:7a:ec:34:
8c:90:6f:bc:f5:42:c8:22:c2:0e:2d:ef:8b:d0:fc:
24:4e:04:90:dd:4d:5c:e1:1b:39:ec:4c:92:12:39:
07:e2:07:27:d7:13:2e:5e:e3:4b:3f:a7:2d:4c:1f:
21:6d:99:50:76:15:23:04:05:f9:a1:c2:71:4a:11:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6F:BD:FA:0C:57:AC:D8:30:45:FF:8F:05:8D:FB:74:E4:E1:DC:06
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b0:0d:6e:d7:14:28:8e:75:4e:a2:66:a3:ef:0f:07:79:be:
7e:63:4b:c1:af:c2:c2:71:0e:0a:0d:3a:65:30:88:a1:1d:bd:
bc:14:e8:4c:03:14:01:5b:82:0d:0e:ef:b2:b3:da:f7:dd:25:
b9:d3:a4:7d:7d:c3:25:90:b8:03:4c:4b:c0:3f:b9:cd:b4:87:
5e:ab:1f:b2:63:e4:ee:97:bf:b4:d2:c7:fe:f2:4e:a5:05:6e:
54:d5:0a:a2:90:88:a6:c3:0e:32:94:38:e0:91:6f:37:41:c1:
3b:c5:6e:e8:cd:bc:1d:9b:a5:57:b6:30:3f:11:c6:02:ec:36:
06:66:e7:87:91:df:80:b8:72:18:46:16:ca:2a:d8:51:97:ca:
08:d6:a6:b9:0f:f7:9a:cb:ef:ec:89:80:6c:b1:85:48:39:fe:
53:7d:62:25:16:93:6a:a9:68:5d:3e:f9:6e:f0:01:ce:19:25:
65:3a:57:3d:4e:7e:53:28:cf:a2:d6:e4:4b:23:ea:84:5e:1c:
64:d8:6f:45:a6:14:f7:e2:80:1e:57:52:0b:ce:34:61:6e:da:
b9:0e:65:ad:88:16:3e:db:db:a2:8b:72:dc:de:97:a1:5a:1b:
74:1c:03:c9:d8:b5:4b:ee:a9:e4:07:b4:77:13:15:8a:b2:a4:
2f:0b:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:24 2025 by rpki-client