Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File: Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier: TmfHS90dVRqSK1vUcdUEteJzN+btFAq2iN+5MqeOVnw=
Subject key identifier: 85:97:D8:0D:A0:92:1F:09:9C:4A:56:A8:FC:C4:76:71:16:FA:07:00
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 04:11:51 +0000
Manifest this update: Fri 31 Jan 2025 04:11:51 +0000
Manifest next update: Fri 07 Feb 2025 04:11:51 +0000
Files and hashes: 1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: OV2OfQE051Y9LKjzmSMi9ZwpXy8PnGXwtTWbn2mzQJc=)
2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: iEq1aNRP/IljFzwgZtZtkJCpzqh+TTJ3bhmSxew1yxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Jan 31 04:11:51 2025 GMT
Not After : Feb 7 04:11:51 2025 GMT
Subject: CN=679c4d87-6bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:1a:9e:7f:04:7e:09:bd:ce:e1:89:aa:c5:
b4:5f:a0:24:39:08:d2:b5:99:43:ee:4d:73:32:e9:
52:6b:5a:6a:15:81:cf:46:ed:4f:94:e1:e6:e7:f2:
b2:f8:54:74:7b:98:d9:49:a8:70:c4:72:a0:7a:b4:
23:a6:50:c6:20:d9:ab:2a:27:a7:a8:17:52:5b:66:
20:13:89:a8:c5:a8:be:d9:fc:8c:2d:44:0c:63:d4:
0b:4b:c3:03:c8:54:01:9a:e0:2a:23:b2:01:ba:1d:
4e:3f:ca:1c:f8:ab:c7:31:58:01:a1:d1:21:2c:19:
87:b1:63:1f:83:df:eb:8c:d9:23:4b:76:13:c1:8a:
69:da:28:30:56:53:92:a6:77:83:ca:17:0a:f8:7b:
38:28:3c:1a:ec:25:97:7f:fd:cd:b4:6c:44:ca:f4:
58:93:8e:04:ef:fb:02:a4:1b:de:78:67:32:f1:c3:
9f:9c:73:07:7b:c5:fa:ad:8e:62:d6:8c:2f:c3:ed:
24:b8:4d:dc:d9:2b:92:7b:81:1c:f9:26:5f:7d:dd:
b6:7c:2e:a8:d2:ee:00:15:f9:18:05:25:81:1b:0b:
5c:aa:b9:d5:d9:7a:f7:32:4c:40:5c:82:03:2a:30:
27:51:26:ba:a5:4e:3a:94:e7:37:63:32:5a:c1:b7:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:D8:0D:A0:92:1F:09:9C:4A:56:A8:FC:C4:76:71:16:FA:07:00
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:56:2f:6c:50:88:31:1e:e9:28:5b:10:7c:67:3d:b9:a1:7c:
54:3f:b4:44:59:fa:e3:67:41:29:17:9e:c0:f0:28:b1:29:9f:
30:c8:8e:6f:b4:69:54:75:a1:94:54:75:ce:1f:72:9d:f9:82:
81:e7:09:44:cc:4c:08:36:6c:e0:41:4a:5b:22:68:92:ab:65:
b2:77:e7:f5:45:18:a2:e9:a8:2e:b8:3a:8a:04:c9:70:38:c8:
2c:de:42:64:97:eb:36:1c:79:32:ae:c5:f2:cc:be:e3:94:6c:
54:c6:1d:b0:6f:e7:01:1e:6f:d1:25:9b:5a:9e:a5:17:9e:6f:
52:ae:38:c4:8c:4d:e1:23:95:db:b5:87:10:21:05:c7:5d:ed:
36:c7:96:28:0f:a2:a5:57:c2:eb:d4:ee:f6:71:2f:83:d2:ec:
67:4f:27:59:02:89:13:f1:2b:aa:f5:3a:40:aa:3d:a6:b4:f9:
00:c6:65:cc:86:8c:09:a3:ea:35:1e:9e:a6:6e:03:76:e4:a9:
2a:b5:71:7c:b4:4f:58:01:d1:4b:50:8e:59:38:4b:fc:80:83:
be:47:85:3f:01:e3:a7:9c:da:5f:90:ed:96:61:b1:cc:70:74:
02:26:52:ff:c3:c7:82:8a:50:1f:41:d0:88:63:65:63:1a:cf:
f0:c1:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:03 2025 by rpki-client