Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json)
Hash identifier: WZfmbLDqbQyXTOB6ISYDKkS3nkLX3z0Qs7dMQx2S3KI=
Subject key identifier: 16:3B:E4:1C:35:D2:F2:60:BD:70:01:70:47:A3:0E:00:31:46:B8:64
Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
Manifest number: 0135
Signing time: Fri 31 Jan 2025 03:40:30 +0000
Manifest this update: Fri 31 Jan 2025 03:40:30 +0000
Manifest next update: Fri 07 Feb 2025 03:40:30 +0000
Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: iOIoP1SC20b+nNmlEnr8nHfFWX/4RoV8cCKc2j2KXUM=)
2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: 0rI/XzwPRIVwwabd+r6TwmOXeplcoAxng7nnkYKOe44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Validity
Not Before: Jan 31 03:40:30 2025 GMT
Not After : Feb 7 03:40:30 2025 GMT
Subject: CN=679c462e-d672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:ed:5a:a4:67:90:b6:aa:db:75:f9:d0:f8:
48:cd:a8:f9:d7:7c:ea:81:3a:a9:52:62:00:67:81:
7e:38:b2:b3:a4:93:75:4e:66:e6:02:5f:cc:94:b0:
65:6d:d6:16:7c:7e:87:7f:b5:8b:7a:03:65:d0:b7:
a7:3d:ef:40:cb:e7:57:a9:d6:46:8a:31:10:4d:ef:
28:ad:f8:a0:10:67:0a:e1:7d:b6:22:47:1b:f4:e0:
89:40:d2:8c:74:65:27:c5:c1:77:d7:b4:0b:4f:b7:
60:fa:09:46:fd:84:21:e6:b9:59:06:63:cb:e9:bb:
86:c7:33:7d:5a:0f:b2:71:9e:2d:10:12:e1:65:4c:
19:ce:2a:b8:2c:2c:96:13:c0:88:b0:0f:c9:4e:c9:
f9:eb:6f:de:55:2d:bb:24:ff:f5:6d:42:19:b4:23:
c7:42:96:71:d9:d1:fc:3c:d0:ce:b3:12:37:d0:23:
1f:d6:22:9b:b6:ec:21:3d:5f:6e:83:7a:12:5e:90:
4e:8a:7b:11:f6:fc:c8:3a:90:18:03:55:38:60:6a:
b2:0b:a8:15:34:e2:39:62:d7:3c:2d:e8:0d:a3:59:
06:3e:48:42:5f:45:d6:c4:20:d1:14:3d:0d:86:b4:
71:ba:d5:af:55:d2:85:e0:c4:ed:66:20:f4:43:3c:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3B:E4:1C:35:D2:F2:60:BD:70:01:70:47:A3:0E:00:31:46:B8:64
X509v3 Authority Key Identifier:
keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:99:90:58:13:7c:c3:b9:b4:79:83:26:67:23:18:16:66:
37:93:bd:e9:1a:b1:f8:64:b4:01:39:f2:6c:77:16:7e:66:fd:
14:8c:5c:c6:a8:a8:7c:15:3e:67:12:e7:8d:a7:9f:44:7c:40:
71:45:52:9b:bf:13:1a:d5:52:83:05:1f:be:3d:1c:d9:53:fc:
b2:22:1d:7d:f7:ab:f0:ed:5d:98:a6:d5:43:bf:3e:61:1e:f9:
89:8b:77:bf:c2:f1:cc:e4:9c:64:32:ff:a2:72:c1:4f:4c:61:
9e:50:9b:d5:26:11:ae:42:58:55:fa:8a:83:d2:f8:3a:6d:d7:
35:c9:9f:83:7f:f5:89:20:2d:61:b9:0c:a1:48:3b:45:63:9d:
4a:bd:50:74:d0:2d:49:16:b7:09:bf:fc:76:e1:c2:8f:95:0b:
ec:1d:31:91:e7:1f:d6:6e:ed:f8:3b:22:c4:56:84:9e:6d:cb:
7d:ae:6d:d9:2c:2c:46:64:b6:c2:72:f8:dc:b5:bd:16:f3:e7:
8f:55:ba:b2:c8:48:9b:21:a9:7d:31:bb:23:4d:53:5e:69:d3:
b3:8b:10:9b:bc:e0:2f:2a:e1:4a:41:bc:f0:8f:a1:09:42:7f:
86:60:33:13:76:4b:84:13:41:cb:4c:98:8d:90:59:36:4b:df:
8a:6a:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:44:44 2025 by rpki-client