Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json)
Hash identifier: +SnSUBoM8iotUEDSLl1cgUhb0vDpmratpD+BI86w2/Y=
Subject key identifier: A3:B5:5C:52:98:DF:B7:38:B3:B8:EE:10:C5:A8:D9:9F:06:57:9B:12
Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09
Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
Certificate serial: 2097
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
Manifest number: 208C
Signing time: Fri 31 Jan 2025 15:58:04 +0000
Manifest this update: Fri 31 Jan 2025 15:58:04 +0000
Manifest next update: Fri 07 Feb 2025 15:58:04 +0000
Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: oN9ILX5nscBrX6kigZgSvOG61KQZ9PpQvKWAR2FNuPc=)
2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: 8rysbZt21FvuQ0omuoFXFp8YfdP5EnJpmuu61zguRxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8343 (0x2097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
Validity
Not Before: Jan 31 15:58:04 2025 GMT
Not After : Feb 7 15:58:04 2025 GMT
Subject: CN=679cf30c-434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:26:4c:00:02:04:84:38:04:fa:16:8f:e0:
82:33:f8:98:60:45:3b:db:bb:7b:e8:6d:61:a0:04:
46:36:fc:af:7f:a8:0a:61:87:36:8b:d2:08:f9:9e:
7b:f8:eb:58:ab:db:02:98:dc:11:45:84:56:ca:e9:
35:c0:85:eb:a6:6e:89:25:c7:ff:8e:31:a7:4e:79:
a5:49:d6:f2:1a:f5:1b:84:a6:88:d5:c7:37:c5:7c:
da:c2:e2:42:de:9e:bf:7a:d0:bb:d4:1f:43:aa:7e:
40:33:58:65:33:e9:64:6f:28:38:0c:1d:26:fc:d3:
3a:d2:4f:fa:f0:20:01:2a:3e:02:90:ac:38:41:a1:
34:8e:3f:b5:14:f0:98:bb:3a:fb:5f:be:87:58:48:
06:22:f4:47:c5:ff:cc:5b:f1:e6:e3:c0:be:20:61:
3e:8d:d7:5a:0a:ac:fc:73:6f:f3:b4:1b:63:8e:2a:
ba:02:aa:93:40:c9:21:e6:2d:68:42:4f:c5:94:25:
36:2c:2f:8d:80:ad:7e:a9:2c:9b:3c:4b:b3:a8:23:
cd:fd:98:ed:94:70:37:b9:59:33:2b:7d:1a:a5:08:
da:32:41:80:17:db:9e:5a:17:cf:02:65:22:ae:d6:
f7:e2:f5:4f:df:a7:b0:c9:fe:db:8a:b1:57:65:1e:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B5:5C:52:98:DF:B7:38:B3:B8:EE:10:C5:A8:D9:9F:06:57:9B:12
X509v3 Authority Key Identifier:
keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:73:d1:28:07:bd:3f:31:79:dc:39:5e:bc:73:ec:ba:16:5f:
66:2b:ee:32:50:57:3c:d1:39:90:af:29:8d:3f:c3:9e:30:86:
54:0b:cd:95:fd:84:0c:d8:f0:64:8f:14:6b:c1:55:dd:e1:3f:
3c:e8:df:5c:ce:05:e5:b6:46:45:47:e9:34:2e:2c:da:6d:e4:
de:09:23:3a:9c:80:d0:32:4c:d6:d5:05:4c:03:2b:75:11:a7:
83:22:8f:47:10:45:ce:77:69:ef:81:91:93:75:e9:d9:93:1b:
51:93:a8:70:3d:7a:1f:77:f9:ff:ec:04:fc:21:f1:b5:95:3b:
07:f1:e2:d4:60:07:e1:5f:d5:f0:db:b5:5d:92:34:fc:0b:0c:
aa:3e:d4:2a:83:e6:06:e6:68:5a:52:68:00:09:15:da:da:b2:
78:fc:43:2d:3b:52:be:f2:70:94:1f:5a:1c:9b:25:9c:d0:36:
8b:de:fb:5c:42:e4:81:c7:50:c1:01:5c:5c:b0:7e:f9:7b:04:
57:e2:30:49:d6:fe:28:f0:37:f5:28:19:fc:cd:47:49:c8:ae:
f0:c9:ff:fb:23:dc:e7:e8:a9:4b:d3:61:cf:2f:57:6a:33:fa:
66:eb:ec:29:2d:ef:c6:f1:66:aa:a3:69:fb:bb:11:60:b8:18:
30:d7:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:15 2025 by rpki-client