Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json)
Hash identifier: e08CcXZksCq4ue8Ag4aM9yYxHyQvoT9VqAlX2Ajn34k=
Subject key identifier: 0C:28:2C:53:53:10:BE:72:C4:EA:28:C3:71:62:7D:58:8A:47:C7:65
Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 06:58:25 +0000
Manifest this update: Fri 31 Jan 2025 06:58:24 +0000
Manifest next update: Fri 07 Feb 2025 06:58:24 +0000
Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: oVtd32TP42oMp7vaeOPt3nsaOjJ9V/dD+dLuwuH5qoo=)
2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: 3WNjmfHJVoQBd0rENGvmjv5pVSXIpaYmoJ+4Year8YI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Validity
Not Before: Jan 31 06:58:24 2025 GMT
Not After : Feb 7 06:58:24 2025 GMT
Subject: CN=679c7491-4d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:1e:fe:70:a5:5c:27:c9:00:73:ac:2f:cd:
44:e8:86:f5:4b:c0:b6:13:27:e1:9b:84:8b:2a:16:
ed:bb:7d:df:e0:6a:a0:7f:3f:22:fe:42:d2:77:c9:
39:b4:bb:2f:33:00:76:e4:ae:a5:26:44:91:d6:57:
e7:f6:73:e8:46:0a:7a:15:53:ae:10:3d:da:8e:a9:
a0:5d:09:0c:76:02:4d:90:1e:57:3b:72:4d:22:a7:
08:17:ae:8f:e0:a5:91:62:f1:97:c5:b5:a0:13:65:
bd:75:15:61:37:6f:f6:e9:59:b3:d8:2d:eb:38:ac:
f0:e4:f2:9b:19:01:4b:c0:6d:8a:38:ef:cc:de:29:
05:17:67:7c:9d:ff:2e:01:a7:11:f4:91:63:56:3a:
5c:d8:a8:35:63:85:dd:f3:b8:e0:19:ef:7e:ce:f6:
88:83:a9:ec:d4:d1:9e:72:da:0d:fb:5f:1e:f5:18:
74:1c:42:6f:53:a6:c4:a1:6a:74:90:33:1b:19:e2:
87:3a:bc:b8:1d:8e:4d:66:b7:c5:e4:2a:0b:57:31:
ae:93:1e:68:24:5f:6a:0f:cc:42:c0:88:8a:f6:ee:
ac:1d:28:d7:6c:ef:16:6b:af:41:75:06:8c:93:ff:
b5:36:58:c4:8d:8d:d5:c1:e1:1a:93:46:f0:ed:b0:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:2C:53:53:10:BE:72:C4:EA:28:C3:71:62:7D:58:8A:47:C7:65
X509v3 Authority Key Identifier:
keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:0c:99:26:fd:5e:a0:2d:7b:4c:1a:d4:92:06:44:31:d0:64:
57:84:01:89:46:d8:11:57:e1:fe:39:c3:a1:0b:62:ad:4a:9e:
49:3a:5b:a1:0d:65:db:e1:16:f3:dd:82:0f:75:75:4d:19:63:
62:05:fc:4f:f1:c1:66:56:9d:ed:19:f9:f1:e7:d3:d1:e6:ad:
23:00:e2:39:84:54:b4:2d:70:e0:3c:fa:1d:5b:fb:1d:2f:09:
0d:bd:41:12:ad:ce:61:64:b3:82:cc:56:27:7a:8b:42:04:78:
1c:61:58:db:4d:33:13:c8:cd:1c:da:6b:12:2d:fe:b9:5b:74:
41:d4:68:0e:19:d7:60:11:13:65:6f:c7:a9:dc:06:28:5e:4d:
c7:46:3e:e0:ca:cc:a6:c6:59:98:d7:4d:e9:26:3c:31:5e:90:
f2:09:15:f6:b3:93:11:e3:1e:be:15:11:2f:cc:3b:5f:74:2a:
ad:48:57:0b:a4:db:96:72:22:28:61:a2:5f:e9:d6:ba:c5:37:
2b:a8:21:84:1e:88:48:28:04:05:b7:c4:c0:17:57:7e:b8:41:
86:84:3a:bd:08:ef:5e:09:68:80:d0:ab:1b:9a:c5:19:8e:01:
0f:15:58:9a:f2:1f:ec:64:16:5c:6d:f2:23:0f:41:79:c2:e6:
2b:36:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:34 2025 by rpki-client