Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier: hLWkJU86jx8S7pcHdh4GTjnuqYFYX948Ezvj6tYDgbg=
Subject key identifier: F9:FD:A5:31:64:97:08:13:C6:2F:F2:F9:7B:78:E9:92:A2:7F:9D:E2
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer: /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number: 0198
Signing time: Fri 31 Jan 2025 02:41:48 +0000
Manifest this update: Fri 31 Jan 2025 02:41:48 +0000
Manifest next update: Fri 07 Feb 2025 02:41:48 +0000
Files and hashes: 1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: AnI1ICAhfAkygl/u3I8XOA4QMt9fgcTajZnRPE3ZqHo=)
2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: kCv4bHKTur2lJoL7asgYL11dC+z1ZsHw44gWQxYmfaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Validity
Not Before: Jan 31 02:41:48 2025 GMT
Not After : Feb 7 02:41:48 2025 GMT
Subject: CN=679c386c-826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:c5:e9:53:22:44:90:38:5c:84:6f:ce:39:
13:cd:24:ac:07:95:ff:54:53:75:83:c5:12:5f:9e:
a4:fd:05:3b:31:8d:94:65:fb:23:ca:e1:c3:84:6d:
da:69:14:29:37:e6:f5:76:ab:51:3a:09:20:ac:89:
79:42:a7:a0:32:20:ff:52:7b:aa:4d:fd:dc:3c:7e:
cd:9a:a2:3f:3c:58:02:7b:ff:14:bd:79:35:72:07:
46:5e:4c:67:a8:44:f9:0f:62:13:b0:da:16:ac:5c:
b8:90:05:e8:b8:6c:50:1f:fa:21:ba:8d:38:42:27:
09:e3:52:fe:03:75:5f:f5:bf:b6:ff:8f:22:75:5e:
c7:86:c4:37:1e:6d:75:a0:8e:aa:e5:94:b9:0f:84:
71:9b:18:23:74:83:6e:d6:fa:91:8e:d0:04:48:00:
dd:7e:d4:97:83:2e:a2:67:43:3b:53:c5:79:29:60:
fb:49:57:cc:d5:27:15:fd:98:43:b4:4b:46:61:fe:
b4:5b:96:a3:54:0b:53:36:60:dc:69:11:e9:b2:75:
24:f2:4d:c1:82:dc:5f:59:20:94:5c:a8:7d:02:65:
35:8c:e8:08:29:74:a0:d4:36:37:55:5b:6f:40:af:
c7:93:ea:27:34:e0:21:86:62:6e:24:c0:f8:15:59:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:A5:31:64:97:08:13:C6:2F:F2:F9:7B:78:E9:92:A2:7F:9D:E2
X509v3 Authority Key Identifier:
keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:88:3a:2b:b8:23:2b:5c:5a:09:bb:2e:87:d0:d3:eb:35:
63:90:04:5a:af:57:a3:d0:29:13:83:45:2d:69:7e:e3:22:b1:
e2:fd:d4:59:50:02:08:62:63:fe:99:94:a5:e0:57:19:15:14:
53:a1:6c:ae:56:43:4b:7c:7f:50:eb:2f:26:68:1a:24:bc:1c:
24:53:d8:52:4b:8e:2e:db:8e:47:5f:28:2e:4e:c2:d8:37:f8:
8f:d2:0f:2f:fe:6a:05:a1:ff:43:60:74:f6:5f:2c:eb:15:75:
f4:69:7b:26:6c:68:ce:2e:d4:b9:22:07:c1:04:58:8a:8a:40:
f9:04:bc:81:78:c8:b8:15:70:e2:fc:6b:15:43:d3:a2:3b:97:
89:b3:dc:24:af:30:79:23:b9:e2:b7:1b:59:4f:9d:4b:5d:aa:
8b:55:2d:01:68:3a:b6:5c:8f:27:43:40:0e:22:4e:15:e6:17:
d4:be:df:45:ec:1d:b8:25:7b:0a:b8:c8:c6:17:1e:65:dc:02:
47:f3:fa:37:55:06:4a:dd:7c:e7:81:23:0c:64:54:56:f6:00:
2e:ce:20:90:68:a0:e0:f7:14:83:20:41:a2:c0:a0:41:80:38:
e9:4e:00:3b:22:c2:49:53:2e:7a:b9:d9:dc:3d:cd:a1:e7:e1:
7e:d5:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:05 2025 by rpki-client