Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft
File: YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft (raw, json)
Hash identifier: HNnfI1P6NPJvZvHe0YPdcdAgJa18X2uhj3RVj/tBu2w=
Subject key identifier: C8:F4:95:32:DC:03:72:DB:AC:7E:05:B1:49:24:28:6A:76:55:ED:3C
Authority key identifier: 60:27:6B:41:1F:6D:F6:94:DD:36:4C:4F:D3:82:F2:5C:9E:6A:60:62
Certificate issuer: /CN=A919FA55/serialNumber=60276B411F6DF694DD364C4FD382F25C9E6A6062
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 04:01:46 +0000
Manifest this update: Fri 31 Jan 2025 04:01:46 +0000
Manifest next update: Fri 07 Feb 2025 04:01:46 +0000
Files and hashes: 1: YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl (hash: oPnqR1YGQnyiTbbdZF8L9Dbd1Y3QhQrismfaDCSrNCI=)
2: 730BFF8C428B11EEB9A5EA63C4F9AE02.roa (hash: kkjE94BBiiWiAJ9He43Jc/0GO/LlMOG+ydM9xjAZ/oQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FA55/serialNumber=60276B411F6DF694DD364C4FD382F25C9E6A6062
Validity
Not Before: Jan 31 04:01:46 2025 GMT
Not After : Feb 7 04:01:46 2025 GMT
Subject: CN=679c4b2a-0918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:e5:20:6c:53:18:15:72:10:4f:72:de:c3:
14:b0:45:5f:92:ef:d7:b7:62:0d:20:03:9a:85:69:
af:41:4c:cf:cd:73:e1:6b:ce:e3:42:c8:c3:53:85:
4b:9e:58:51:ba:7e:f5:b0:c2:8f:50:da:04:da:30:
91:0d:37:f1:7b:6d:51:b7:62:d4:06:8d:3f:85:a8:
33:3b:e7:0b:da:fe:6f:12:ed:c5:02:61:d4:eb:70:
3f:c9:36:34:f6:39:79:c4:90:90:61:99:de:43:5d:
69:72:64:f3:25:3a:89:c9:46:20:cd:c5:3f:32:3a:
1e:3e:12:89:90:85:b9:1f:ee:d8:f6:47:ad:11:c6:
02:3d:18:e0:6b:f1:aa:8f:18:1e:17:40:f3:f9:eb:
c6:a8:18:d5:df:53:f9:56:5e:38:d9:08:05:15:06:
0f:94:ff:b4:46:c7:89:34:72:18:b0:98:f4:06:3d:
a6:73:c5:b2:a9:48:e9:64:e9:65:54:46:8d:3c:06:
12:7d:b4:4c:92:04:59:7e:69:82:f5:34:6b:99:d9:
3a:8b:ca:b8:93:4f:cb:71:3e:c4:98:dc:bb:25:6b:
6a:48:54:f0:0c:2b:99:4a:15:b4:79:87:ea:24:79:
42:fb:85:f1:c7:64:79:26:1b:7b:d1:f5:21:6c:df:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F4:95:32:DC:03:72:DB:AC:7E:05:B1:49:24:28:6A:76:55:ED:3C
X509v3 Authority Key Identifier:
keyid:60:27:6B:41:1F:6D:F6:94:DD:36:4C:4F:D3:82:F2:5C:9E:6A:60:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCdrQR9t9pTdNkxP04LyXJ5qYGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FA55/0F9E616E40FC11EEB8206744C4F9AE02/YCdrQR9t9pTdNkxP04LyXJ5qYGI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:93:cb:0b:00:91:e5:b3:64:4a:d2:be:09:e7:d1:a9:b1:
2f:99:81:c6:ba:ad:df:f5:3f:65:88:44:11:5f:1a:9e:02:a2:
d3:4a:ec:ee:83:b2:e5:3a:d8:7d:3b:a1:46:86:f6:0a:44:fb:
ed:e4:f5:b6:ca:0a:7b:b3:c0:02:bb:ef:e0:4f:6c:65:0b:bd:
1a:19:90:c4:9d:ca:d5:03:32:f2:15:93:0b:29:d3:13:cf:0b:
6d:06:fe:aa:3f:e4:a9:e5:11:d6:69:31:b8:64:9a:5a:d1:e1:
4d:04:fc:a5:fa:73:c8:52:5d:af:fa:d5:0f:90:15:06:0a:fa:
f0:5b:60:7c:eb:ba:c0:ad:8e:4f:fe:97:85:d4:32:4d:9a:fb:
42:2e:92:8e:1f:56:c6:b2:a9:2d:a6:07:a7:42:ff:30:a0:0d:
c3:39:37:e9:a5:43:da:13:92:0b:af:c2:a4:f5:5c:4b:26:6a:
b5:7a:5d:a5:a6:78:a7:27:5a:fe:4d:98:5b:79:12:ae:95:20:
83:b8:7b:7f:78:d5:cf:04:71:5e:08:75:9a:8f:39:01:98:8a:
ff:3e:15:f4:af:7d:b0:94:51:af:55:d1:af:99:51:51:33:05:
1a:93:44:3b:bf:f6:a5:ff:53:93:b6:d7:8d:2f:9b:7c:ce:cb:
7e:20:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:51 2025 by rpki-client