Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File: yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier: 82+gRharroCM4jvG3nI6DlrIfEWWNxYVLPFzV5wkG2o=
Subject key identifier: D8:97:08:CC:96:D2:44:4A:DF:43:44:40:00:CB:88:97:FA:C8:A0:B9
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number: 0599
Signing time: Fri 31 Jan 2025 00:05:20 +0000
Manifest this update: Fri 31 Jan 2025 00:05:20 +0000
Manifest next update: Fri 07 Feb 2025 00:05:20 +0000
Files and hashes: 1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: CC0H6BssO57Pqxd/dWvsGUzUz7E+iV+SYWTaqiAaVpQ=)
2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: F7+eS/2mxj8NPkOaATw5jcjuastn33+xdcT4OGIAl6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Validity
Not Before: Jan 31 00:05:20 2025 GMT
Not After : Feb 7 00:05:20 2025 GMT
Subject: CN=679c13c0-f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:a6:91:86:fc:8d:bc:9f:80:69:4d:ab:f7:
c6:da:63:0a:b9:87:24:85:56:dd:67:1c:ab:df:23:
3c:9f:c6:c2:21:63:5a:87:b7:2c:18:89:67:54:f1:
99:b6:61:f9:1e:84:58:78:60:ad:bd:fd:2f:ba:a7:
86:02:19:db:3b:b6:14:e9:1d:04:31:cd:d1:48:1a:
df:08:66:82:b4:f9:7d:2b:7d:ef:29:91:9b:cd:a2:
1c:19:94:74:d1:5a:67:80:2b:8c:d4:38:12:8f:54:
03:54:3f:be:52:de:c8:ad:0d:84:5b:80:12:f3:a3:
39:08:fe:a1:97:f3:9b:ed:64:17:16:29:40:86:70:
a5:92:72:31:70:74:05:97:22:f7:fc:a2:bb:ac:df:
25:99:9f:21:1e:a6:c4:76:7a:e7:86:87:4d:4f:61:
2e:d3:1d:e8:1f:bc:a0:76:3e:94:3b:bd:a3:93:55:
82:31:76:7b:77:ec:45:c0:6c:39:2e:1b:f1:01:f2:
55:76:2b:0a:6f:6f:a5:13:79:fe:f0:71:80:89:be:
0f:4b:5c:2c:e5:92:6b:00:94:7a:49:3c:b0:d7:49:
94:a6:95:21:d2:75:4d:80:ec:3f:cd:cb:90:76:59:
15:05:2c:8a:27:a9:6a:2a:86:c6:1b:94:3b:fc:0a:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:08:CC:96:D2:44:4A:DF:43:44:40:00:CB:88:97:FA:C8:A0:B9
X509v3 Authority Key Identifier:
keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:5e:e6:1d:a7:b9:f2:77:76:42:44:b2:74:95:82:1a:54:
97:c5:17:f3:61:dc:1b:4f:f0:0b:69:5c:e5:e0:6a:d4:d6:f7:
55:e5:48:34:7e:b4:03:15:cf:f0:71:5c:25:0c:db:d0:fd:c7:
5e:15:ae:5b:e4:95:af:d4:f8:d0:12:f1:32:62:98:05:36:69:
11:a0:78:f6:3e:e1:09:ad:58:b6:21:3b:9d:26:5e:48:0a:cf:
cf:d5:94:fd:ca:a4:36:b9:31:ff:b6:d3:94:ef:ec:84:92:c6:
0b:3b:07:3f:ce:e9:8d:78:1a:bb:c9:01:70:49:cb:0d:84:79:
3b:7c:d8:16:ea:fb:9b:c9:67:66:cf:3a:b0:d7:a4:39:78:36:
66:28:28:26:1d:cf:bc:39:c0:df:23:75:ab:12:a8:4f:ae:3e:
df:ca:33:4e:94:64:74:cc:24:90:73:cf:1e:e0:28:21:16:77:
ba:7f:db:cc:5f:1f:2c:04:d9:4f:c9:57:11:31:54:0b:17:7c:
7d:4b:9f:a7:11:e7:cd:25:31:32:5e:b4:69:18:06:ae:8c:bf:
d8:4f:a1:c8:05:67:52:8a:b5:23:4c:47:4f:87:b0:f2:a8:83:
33:98:39:02:e6:bf:6c:c6:5a:ce:bc:23:e4:81:3b:fb:d5:89:
57:79:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:42 2025 by rpki-client