Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier: 99RwbCU6dSD/efn1EnKBh8Mq99vqjSHSedOQGhVl9OM=
Subject key identifier: 71:C2:88:6E:AE:B9:5D:65:69:61:14:EE:C3:9C:98:D2:91:C4:3F:68
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number: 0287
Signing time: Fri 31 Jan 2025 03:11:13 +0000
Manifest this update: Fri 31 Jan 2025 03:11:12 +0000
Manifest next update: Fri 07 Feb 2025 03:11:12 +0000
Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: hcWaP9QkHMvKobmAudsn8wl75MBy7zmEgSIZfgoOw7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Validity
Not Before: Jan 31 03:11:12 2025 GMT
Not After : Feb 7 03:11:12 2025 GMT
Subject: CN=679c3f50-2909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:c8:79:20:31:c6:1c:cb:b1:ba:27:81:6e:
8d:92:87:b8:5a:52:b0:57:df:92:32:22:5e:af:2d:
e4:e5:4a:4e:26:9e:73:b0:bb:ed:44:33:75:19:aa:
06:c2:7b:10:a4:6f:10:77:f4:bf:a3:a2:3e:96:2f:
5a:9a:3e:33:c2:5e:6e:4e:7b:fe:46:63:1f:c7:1e:
37:04:87:15:5f:66:49:14:06:66:8e:a9:78:db:78:
a9:08:d5:fc:da:d6:ff:8d:ae:bc:c0:1d:43:98:36:
50:ed:e1:a7:c1:b2:93:26:98:38:6f:55:31:8f:80:
65:18:0e:0c:6f:94:00:f9:c6:1e:28:36:62:8f:25:
29:f5:5b:2d:e4:4a:68:da:af:ef:55:7b:69:4c:ec:
ec:73:34:6f:49:ac:24:8d:6d:b8:b2:2b:4f:7d:73:
13:12:25:bb:e1:5e:90:be:67:84:41:04:90:bb:81:
9b:e9:00:0a:be:c2:cc:e2:20:e3:59:fd:d0:bc:73:
b2:13:6b:b5:0b:e2:39:38:79:af:b6:fb:a3:6d:6c:
70:82:59:08:c2:3c:52:dc:dd:8a:df:e4:39:19:32:
14:72:3d:8e:07:89:0a:e3:86:09:5c:47:b3:64:4e:
bf:d2:6f:95:d6:d8:5e:e4:44:79:21:fc:cb:39:d1:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C2:88:6E:AE:B9:5D:65:69:61:14:EE:C3:9C:98:D2:91:C4:3F:68
X509v3 Authority Key Identifier:
keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:bc:e5:7c:f8:a3:c4:bd:25:2b:4d:8a:8f:22:e4:95:ce:
bd:4e:9b:79:52:86:1f:bb:dd:e0:a3:de:cc:59:01:85:0e:e2:
cc:86:5e:8a:a4:60:40:7d:db:50:98:a9:75:54:e5:3c:ca:b1:
e8:f3:84:9d:1c:17:0d:13:f2:3c:f1:3c:4d:75:3f:50:85:1c:
3d:1c:26:5b:19:cd:86:b3:4b:7c:de:f0:32:24:9d:4f:c6:d3:
e3:53:c0:a1:09:b6:d7:c7:33:e7:b9:d0:be:3c:05:62:0e:8a:
f1:a4:f8:49:48:52:71:80:3d:c2:90:c3:97:6d:0a:79:bb:e6:
01:6b:04:3b:ea:42:80:36:c3:ad:5d:1f:44:67:19:04:e2:f0:
21:f9:90:95:73:a4:5c:15:b3:21:5c:17:17:36:5e:d9:00:43:
fa:ea:e8:54:d5:6a:53:d8:59:4c:d5:b1:b2:5a:21:0f:c7:e1:
a7:c1:7e:94:15:2b:84:cd:ea:5d:82:13:36:6d:55:8d:3b:2a:
6a:20:03:19:bd:db:c6:eb:98:8a:72:22:4e:bc:e9:73:e7:cf:
82:03:6d:39:d6:1c:ed:21:d3:c9:60:77:f9:7d:e0:ed:b4:1a:
a7:dc:69:af:5a:26:ee:8f:3f:b0:f5:03:3a:b4:f9:dc:b3:f7:
ca:00:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:41 2025 by rpki-client