Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
File: yegJAGD4rmNwoBt-HsHW4m5PwBo.mft (raw, json)
Hash identifier: qj0ffBXQhBDhzykmv4hAzszlmo8BSv8UVTkeK1vYSSA=
Subject key identifier: E8:B0:F6:8C:44:BF:92:C9:49:2A:8A:EF:33:3E:7D:C1:A6:C9:7E:80
Authority key identifier: C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
Certificate issuer: /CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
Manifest number: 0137
Signing time: Fri 31 Jan 2025 03:37:57 +0000
Manifest this update: Fri 31 Jan 2025 03:37:56 +0000
Manifest next update: Fri 07 Feb 2025 03:37:56 +0000
Files and hashes: 1: yegJAGD4rmNwoBt-HsHW4m5PwBo.crl (hash: U/g+bYLhdVkLqa/usMzFI7Yx/PmvQ/8WX1R5cnqwlEY=)
2: 5261CE84068511EE9F71F964C4F9AE02.roa (hash: dHhZT58EPueclWY/wjCtwq28vLwEg1BiZyhs8/2Uyog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D4A/serialNumber=C9E8090060F8AE6370A01B7E1EC1D6E26E4FC01A
Validity
Not Before: Jan 31 03:37:56 2025 GMT
Not After : Feb 7 03:37:56 2025 GMT
Subject: CN=679c4594-d73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:11:5b:f2:ec:ae:76:2b:c0:22:58:7f:7d:
04:09:75:b8:2d:6e:14:05:57:c5:8f:99:aa:76:57:
69:6f:a3:dc:31:61:d0:0a:e0:16:37:65:c3:b8:25:
37:72:5e:da:af:d5:e6:7d:f2:60:ff:bd:ff:a7:fa:
b8:aa:9d:a4:53:92:66:47:35:3b:c4:28:59:6e:67:
b8:1b:9a:7e:03:a9:84:18:71:af:26:0c:79:b2:91:
00:64:2c:3b:05:78:d2:e8:14:0e:da:62:40:ca:db:
fd:b9:e0:90:33:9e:09:34:90:90:dd:a6:03:dc:13:
56:33:05:07:21:4c:e1:94:1d:37:37:96:b5:95:0d:
4e:6f:08:c3:63:3c:8d:41:f6:a2:8b:ce:90:f9:e3:
54:6c:98:52:2d:d9:38:ad:39:f6:f2:14:01:cb:62:
b6:62:8f:b9:fc:95:cf:9a:a7:37:83:4c:26:0e:93:
54:aa:89:0e:f7:76:53:1b:d4:ee:0f:b0:25:26:0a:
cb:46:2b:50:39:f4:f1:6b:ba:1d:d2:07:c3:7a:fb:
ab:b8:30:7d:93:8c:0d:6a:67:7b:f4:a2:31:05:36:
8c:ea:5a:12:70:eb:80:c2:3a:04:bb:60:f2:df:6b:
80:af:c6:6e:59:85:50:84:a2:e0:f6:e4:c5:2a:84:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:F6:8C:44:BF:92:C9:49:2A:8A:EF:33:3E:7D:C1:A6:C9:7E:80
X509v3 Authority Key Identifier:
keyid:C9:E8:09:00:60:F8:AE:63:70:A0:1B:7E:1E:C1:D6:E2:6E:4F:C0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yegJAGD4rmNwoBt-HsHW4m5PwBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D4A/819698FC05D511EE93F91C15C4F9AE02/yegJAGD4rmNwoBt-HsHW4m5PwBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:42:18:e3:4b:5b:37:d5:90:75:75:b6:72:61:fc:af:c5:1c:
10:c6:96:84:7e:77:88:38:bc:00:8b:06:c5:2d:e6:d2:35:5c:
24:04:ae:75:0c:a3:45:38:5b:24:67:43:28:d8:26:c0:ea:8c:
73:d7:af:47:b5:ee:9d:ad:2b:84:d1:9a:36:b4:0a:f3:50:ea:
29:4b:11:b2:23:cc:ea:be:1b:10:02:da:5e:6b:39:0d:a1:e3:
04:2f:e6:6f:22:57:c1:e8:a2:4c:c1:12:c7:c2:a6:41:43:fe:
0f:5d:24:02:f0:42:bb:f8:8d:1b:fd:76:d7:e2:ca:16:8e:31:
e5:b1:50:51:60:64:91:cd:96:79:15:76:69:90:b7:3e:0b:5b:
ec:a2:17:56:9a:98:1e:8e:57:0b:ac:02:2a:56:90:49:25:5d:
c7:7f:9a:94:00:ed:01:ea:cf:a9:22:e5:e5:52:f1:24:d3:e2:
a0:22:ae:8c:19:ca:02:ff:99:11:77:21:34:c0:66:83:3a:b2:
a6:14:b0:ff:3b:dc:3c:78:91:c7:9f:15:28:bd:8c:ba:e2:30:
76:5e:6f:26:b8:45:2f:cd:2f:51:8b:c2:8a:53:6a:00:5f:3a:
b5:b1:a6:9d:fc:33:af:5e:a8:9c:59:cc:b5:4a:87:2d:eb:33:
b1:ce:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:23 2025 by rpki-client