Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json)
Hash identifier: QSjUdYeVh9rsUyHbKeCK4VaTqAvRnTYW/25AYuvpB4c=
Subject key identifier: 1A:DD:1B:5A:E1:BD:96:34:88:82:88:75:4A:4B:B0:8E:46:DF:AE:2A
Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Certificate serial: 1A27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
Manifest number: 1A1A
Signing time: Fri 31 Jan 2025 16:22:38 +0000
Manifest this update: Fri 31 Jan 2025 16:22:38 +0000
Manifest next update: Fri 07 Feb 2025 16:22:38 +0000
Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: VKzOhswFZrEiuOO2995/y7uvlq14l4pIrn5jxT+5Gtk=)
2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bo/SZs4FQGVCgHbfJ/qOcN+amQtsXWeV9LBgPktlbik=)
3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: XfRW9hpvnBY9LTBMASrvKe5ewyj8spWmKtOVyqPmD0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6695 (0x1a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC
Validity
Not Before: Jan 31 16:22:38 2025 GMT
Not After : Feb 7 16:22:38 2025 GMT
Subject: CN=679cf8ce-29dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:ba:f9:bf:a9:54:9c:78:fe:91:f4:f6:c1:
b5:d0:10:9f:a6:ea:93:da:46:5b:ee:f4:75:f3:f6:
c4:0e:8f:c5:6c:50:c6:42:3d:ad:e0:da:54:1f:5b:
b2:15:f0:36:21:4d:26:44:34:f6:1d:dc:48:2c:ec:
53:70:87:8c:84:47:da:0a:93:2f:ec:a5:ec:d2:d8:
1f:5a:cf:30:7e:4e:b3:3b:2c:37:69:90:2b:da:f9:
f9:f9:7a:26:13:89:7e:ec:cb:b7:d3:15:b9:8f:cf:
46:fc:e7:ef:fc:54:b9:8a:29:76:a5:a9:a7:40:e5:
a0:cd:f8:8a:f1:f2:12:c8:14:24:14:80:94:e2:71:
55:a9:61:4f:18:54:5e:dc:f3:91:53:00:6e:ba:5d:
60:e0:f0:0a:56:dc:2c:be:61:d2:2e:40:04:17:f3:
8e:15:39:5f:19:07:15:2e:82:5f:4b:31:06:cb:8f:
21:23:15:08:d9:be:ed:70:ed:31:88:e8:25:a9:26:
30:46:75:ae:f5:d3:c1:3e:c0:60:89:53:35:2d:51:
f7:a6:77:c5:91:3d:13:fc:7e:17:fa:59:2e:e2:a5:
bc:f0:20:a0:46:9a:e7:87:44:20:bc:f1:2b:64:e3:
64:6a:6e:83:51:c0:e2:65:2f:d8:a1:90:c8:84:f0:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DD:1B:5A:E1:BD:96:34:88:82:88:75:4A:4B:B0:8E:46:DF:AE:2A
X509v3 Authority Key Identifier:
keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:6b:ac:c3:2e:29:fb:28:c1:80:94:2d:43:68:0d:bc:08:29:
11:23:e2:0a:96:6e:12:39:b3:96:ee:78:cc:e9:23:54:56:76:
be:ff:a4:1d:5b:1a:f4:0c:bd:bb:30:dc:26:d2:a2:28:16:ac:
9f:c9:a9:5d:2f:1a:7a:0a:4b:88:42:ab:40:13:6e:e0:17:13:
c3:04:e9:4b:6d:52:c1:ac:7d:8e:48:4c:ea:da:97:a8:f8:ee:
a6:67:e3:77:34:44:b9:89:1e:46:b4:70:48:86:28:0e:35:0d:
28:13:44:c6:fc:07:f4:88:a8:22:99:40:1b:ba:4d:fc:c5:04:
fc:43:8f:d1:cb:fd:65:89:68:51:c8:66:d4:02:5b:82:89:d0:
c6:16:04:c6:00:8e:ec:c5:d3:66:10:5a:dc:d0:dd:7a:97:7e:
3b:fc:80:ac:a7:5a:4e:74:42:3a:4d:c2:d4:6f:8c:ab:ff:64:
1d:92:dd:09:3c:6f:47:bd:98:91:b0:75:3c:44:3e:60:46:4f:
32:12:67:71:36:81:e1:a2:25:f2:d5:96:fc:04:6f:4c:19:c0:
98:51:8c:eb:71:2f:c9:a6:b6:99:7c:e7:98:23:12:92:cc:42:
89:a5:02:c4:ed:98:44:9f:da:f9:55:a4:4a:1e:a7:a6:3d:ca:
6b:5e:68:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:55 2025 by rpki-client