Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier: 0L0He0mPuEBp6Y+KbtsuEwpbrYhwggKMhj3myXYv9VA=
Subject key identifier: 75:47:7A:64:BE:D7:8A:25:18:23:9C:AB:A5:22:C4:29:7D:A1:3E:F4
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number: 060F
Signing time: Thu 30 Jan 2025 22:45:51 +0000
Manifest this update: Thu 30 Jan 2025 22:45:50 +0000
Manifest next update: Thu 06 Feb 2025 22:45:50 +0000
Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: L0nwdFVq6Ht74AI0tRDJ5MWUoEjLKPja1wHEGT1N6EU=)
2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: 1AEXU+7Y4PfWz8jQxA5HlFwuXkljqopTv6bNdtPTBW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Validity
Not Before: Jan 30 22:45:50 2025 GMT
Not After : Feb 6 22:45:50 2025 GMT
Subject: CN=679c011f-2d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:19:d3:18:01:a3:af:1b:64:ab:a5:ab:41:
d6:71:c6:35:3f:fc:83:11:bf:fd:68:f0:c4:39:34:
bd:60:cf:1e:f6:42:10:4a:e1:5d:fc:b5:b6:6f:74:
81:06:52:42:79:56:ec:f4:5c:2e:ae:21:86:17:a5:
00:c0:78:59:6a:90:c7:9e:31:a0:66:55:bb:2f:77:
09:0c:5d:fb:54:69:f6:06:66:57:96:26:70:32:75:
f7:04:e3:59:b1:f8:75:73:c7:d7:20:1f:34:8d:83:
27:ca:72:55:6f:5e:8b:9c:42:20:8e:7b:b9:7b:32:
4f:b8:2c:6d:ad:19:58:cb:71:e4:97:55:66:0a:41:
c0:33:78:ef:cb:3c:ba:c3:ff:ea:cd:f9:89:be:46:
46:16:1e:83:76:c2:ac:2d:a2:9e:b5:37:e8:2d:b5:
fc:cc:6e:43:9e:6a:27:33:53:ee:f9:c7:9f:72:1e:
2d:82:7e:10:a8:44:98:c8:18:61:57:07:b4:e5:07:
e7:07:c6:46:fa:d4:91:74:d0:59:b0:c8:7d:c5:6d:
e0:6f:ad:b2:68:a0:08:0e:34:2f:e9:df:14:0e:dc:
0e:08:17:6f:e2:0b:26:fd:6e:74:53:f7:43:a9:ed:
26:59:9f:7a:92:47:48:08:f6:88:fd:33:17:c3:13:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:7A:64:BE:D7:8A:25:18:23:9C:AB:A5:22:C4:29:7D:A1:3E:F4
X509v3 Authority Key Identifier:
keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1a:33:45:03:29:10:07:df:e1:b6:a7:bb:e7:ca:c3:4f:42:
94:17:83:b9:54:db:4f:42:c2:da:c7:57:60:b5:bc:71:3e:2e:
07:af:b7:fa:bf:b1:d6:02:b8:ab:dc:82:e8:f7:92:dd:4b:21:
41:d3:a6:06:53:fe:dd:e6:29:37:25:f3:d0:68:56:6a:b4:2c:
50:a4:e4:79:46:94:52:7a:eb:90:43:7d:46:b0:59:1d:10:52:
be:4d:cd:ae:a8:57:4a:84:49:25:87:4d:83:a6:5d:3e:37:d2:
6b:40:84:03:2f:f7:de:81:e1:6c:b3:c5:1d:b7:7d:30:26:bb:
55:ee:2e:df:ec:b2:3f:7b:df:cc:5a:b3:24:28:d4:8c:f5:2c:
d1:77:e3:71:f2:01:06:45:20:bb:7e:8e:33:7c:0f:63:78:02:
1b:33:1a:06:55:a9:22:1f:b4:3a:8b:1a:7b:54:1d:f8:b0:e5:
ee:70:e6:c1:16:e5:e0:fa:d8:2d:68:5a:73:a4:93:80:c5:1a:
08:fe:fa:64:08:05:85:6e:74:c4:90:23:41:46:d9:46:ca:8f:
3d:92:55:77:dc:e5:cb:fd:f9:ef:5d:d6:bb:84:29:60:5a:ec:
b8:75:cd:93:81:32:77:4f:f4:f3:2b:34:ff:66:c5:19:53:98:
3e:90:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:54 2025 by rpki-client