Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File: YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier: wm7df6kka+ny9wtFvi5jfkZaCr9VN9CGlrfch64FB9c=
Subject key identifier: 19:C0:15:BC:77:9F:77:E0:AF:FB:3A:0B:09:17:5F:90:2F:1D:F6:6A
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer: /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number: 0988
Signing time: Thu 30 Jan 2025 20:39:24 +0000
Manifest this update: Thu 30 Jan 2025 20:39:23 +0000
Manifest next update: Thu 06 Feb 2025 20:39:23 +0000
Files and hashes: 1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: DhYc5QrX1C8nwH4a/zXmbcI4rFbwclbnwpGG+IdoMEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Validity
Not Before: Jan 30 20:39:23 2025 GMT
Not After : Feb 6 20:39:23 2025 GMT
Subject: CN=679be37b-41f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:c2:e2:45:64:3e:a3:33:f2:5b:83:d0:57:
b8:ae:7e:ea:f8:84:f1:01:3c:81:0f:b3:62:eb:93:
a0:5d:ad:58:fd:f4:26:52:c8:a8:c7:e4:6d:af:e3:
05:ac:69:fd:d1:5b:e0:10:68:3a:ac:8a:a2:b8:0c:
c9:54:94:78:da:f6:42:9f:be:da:a8:71:bd:ad:af:
59:f8:33:83:35:ce:d5:a4:16:4c:d3:f1:cc:c1:81:
19:6f:a2:45:7b:59:9b:3a:9f:a4:29:36:e3:cd:fd:
d9:20:5f:50:26:f3:46:75:bc:65:6d:1e:ae:24:9d:
05:65:a1:c2:a3:d2:db:53:67:f3:57:cb:90:3d:4f:
79:56:c2:f7:ea:ab:5d:2f:0a:25:85:8b:b0:ca:08:
4c:e0:b0:ae:c5:5c:01:94:0d:8e:d6:0d:74:15:d7:
1c:eb:91:8d:06:35:78:e2:fa:2b:a1:35:e6:ef:9d:
fd:55:5f:a9:2d:26:77:8b:b6:b3:dd:ce:4c:2a:bf:
95:98:20:78:9f:d4:1d:92:ed:7a:6e:81:67:42:d0:
9f:ab:a2:9e:6b:8c:d2:74:84:a3:de:6d:a3:f9:97:
34:8b:24:39:02:ad:b2:60:1c:e7:77:95:5f:76:49:
a7:c9:7f:5f:49:43:02:3a:17:4a:9d:36:44:c7:5d:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:15:BC:77:9F:77:E0:AF:FB:3A:0B:09:17:5F:90:2F:1D:F6:6A
X509v3 Authority Key Identifier:
keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:96:c0:41:58:fe:06:26:09:bb:2f:68:ec:50:78:73:cc:
36:dc:c3:51:df:0e:19:0e:92:4a:60:09:59:32:68:63:9b:51:
76:57:ff:58:ee:09:6d:82:ed:93:88:33:4d:5b:02:cc:e2:f1:
86:8a:7e:ee:55:5c:b9:79:52:9e:a4:80:8c:9f:23:51:88:25:
c0:26:a9:45:fb:95:cd:dc:7a:cc:bd:74:dc:e4:96:74:eb:db:
6f:3e:0d:47:9f:cf:06:b9:7e:ab:ba:58:23:2a:33:e8:e1:9d:
2b:f0:c9:b8:4f:50:a3:82:ca:66:85:cd:3b:20:51:f1:8b:ed:
f3:e6:01:a3:74:98:41:87:79:d4:15:fd:90:15:79:fa:f0:6e:
ff:99:40:5d:07:c6:a3:bc:84:d9:c8:df:a6:89:d6:a3:5f:28:
6d:97:f2:1f:8d:2c:7c:13:ff:06:ba:07:e1:82:e2:cf:2d:35:
65:51:7a:c8:9d:63:f1:92:93:ba:66:d1:94:73:18:21:11:00:
d0:7f:98:29:fd:e7:ae:02:30:d1:15:da:3c:fb:22:0f:0b:58:
ff:ea:d2:a3:ba:d9:a4:f1:11:d9:3f:a4:8f:64:f2:b4:93:ab:
a6:94:90:70:08:c2:98:c5:a6:f0:a4:bf:92:e4:5b:77:98:31:
68:04:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:03 2025 by rpki-client