Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json)
Hash identifier: I8uNmwh6bFL0Zrr2oUs9gojcFXznUUrCU+1+VF8pvis=
Subject key identifier: 8D:7B:E0:2E:C3:05:85:DF:CE:6C:A3:45:4C:55:EA:77:7F:EF:4E:CF
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial: 065D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
Manifest number: 064D
Signing time: Thu 30 Jan 2025 22:29:17 +0000
Manifest this update: Thu 30 Jan 2025 22:29:16 +0000
Manifest next update: Thu 06 Feb 2025 22:29:16 +0000
Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: Ua9QLCLEWDSB7r34+gXANkBCqElXhFEaIelDygOpHy4=)
2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: lOLFJc8vBmUkvxax4qxV0S+lMr9KViScT736UtosP4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1629 (0x65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Validity
Not Before: Jan 30 22:29:16 2025 GMT
Not After : Feb 6 22:29:16 2025 GMT
Subject: CN=679bfd3d-c667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:e6:04:bf:cc:f8:f6:0e:37:2f:7e:3b:87:
7c:b7:74:2d:39:23:b5:b5:9a:92:a7:29:62:4b:cc:
d1:aa:45:c9:65:a0:55:11:21:3f:4f:ea:c5:d1:b6:
4e:b6:67:04:d2:15:5f:bd:e5:04:a1:e2:bb:28:d3:
42:7c:4b:64:c4:37:36:79:46:ab:0c:8c:45:81:8e:
62:f7:50:d3:f9:fb:b7:20:5f:0f:6d:d5:a2:bd:11:
ef:5b:70:29:85:9f:9d:f0:a8:e1:e9:d7:00:4d:50:
ca:10:10:30:a5:63:1c:30:e9:47:b8:ca:d2:f3:f5:
79:38:ad:ab:39:66:ba:99:2d:1c:a0:17:b3:bc:49:
6f:6c:84:0e:71:c1:b5:35:df:be:ca:54:e2:35:47:
3b:76:f1:6f:0f:33:16:f2:cd:53:d8:26:ce:66:8b:
5e:b4:fc:35:d9:ac:08:6d:20:7c:ee:96:72:62:21:
74:45:ec:39:f7:d0:90:ee:a2:91:fa:44:65:74:f7:
68:7e:b0:96:22:8c:b9:d5:f3:cc:59:73:e8:e4:59:
65:d7:cf:d3:48:b6:6c:44:56:8f:70:b2:5f:08:fa:
a5:c6:7a:fb:32:fa:e8:cb:be:d4:2c:d4:11:b1:13:
85:61:ce:d3:17:b4:cc:b1:c0:7e:72:94:3c:44:47:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:E0:2E:C3:05:85:DF:CE:6C:A3:45:4C:55:EA:77:7F:EF:4E:CF
X509v3 Authority Key Identifier:
keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:b5:5e:cb:71:9e:84:ea:ae:2f:20:65:01:5f:f1:7e:f4:
55:35:2f:42:dc:fc:14:a5:28:83:53:06:2a:f8:df:30:80:bb:
db:b7:d0:da:f4:64:36:77:14:9e:ba:a0:88:54:ad:cd:af:70:
a2:05:2b:cc:d2:5c:32:42:eb:a2:9b:3a:0d:93:84:e8:93:8c:
4a:ff:a9:f8:83:54:16:91:11:b9:ad:e5:1c:c1:97:d5:4f:0f:
e1:6e:e2:ad:7c:ad:17:b5:f2:2f:2e:53:07:6d:af:01:3c:32:
26:c3:d3:d8:af:f4:27:d1:08:78:c4:57:1d:b0:cc:19:1b:84:
de:b5:bd:45:01:75:20:77:9a:87:ec:30:11:e1:a6:6f:ac:4c:
97:7b:99:2e:90:cf:c0:85:ee:05:a0:c3:96:ca:dd:d7:82:52:
e9:e7:42:1d:55:93:4a:63:b0:d1:3d:2b:be:d9:a9:db:b9:ad:
c0:5b:f7:84:89:56:b8:7b:86:6e:ae:45:25:59:c0:76:d8:07:
b9:1c:83:9c:a1:99:9b:00:2c:be:39:65:e7:62:eb:be:b1:01:
3d:59:65:37:20:e7:05:83:2d:fb:e9:e9:70:ed:b1:86:e7:44:
51:c8:87:e7:7d:27:91:89:8b:34:ad:e6:c8:d3:82:5b:fc:4f:
c4:4d:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:39:14 2025 by rpki-client