Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File: YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier: crckhRaGhbluQ/D0a9z6XY3hzfsXk6iP7CKJuQBgG18=
Subject key identifier: 52:13:CA:E4:89:3F:8F:DE:D6:DF:DC:98:08:92:28:8C:90:6E:D5:F5
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer: /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial: 248D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number: 247C
Signing time: Fri 31 Jan 2025 15:47:51 +0000
Manifest this update: Fri 31 Jan 2025 15:47:50 +0000
Manifest next update: Fri 07 Feb 2025 15:47:50 +0000
Files and hashes: 1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: jd6zYuhCGc2QND3kmmA8BqGy+TKLZsq7YeFl1+bJNLo=)
2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: VpHAZdWeijuNJKWvKLj0k1xE9YF+5hfOXRYAI6729SM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9357 (0x248d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Validity
Not Before: Jan 31 15:47:50 2025 GMT
Not After : Feb 7 15:47:50 2025 GMT
Subject: CN=679cf0a6-83ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:cb:f0:47:82:7f:c5:40:25:3b:cd:d1:a0:
3a:b2:36:25:f8:3e:f1:86:d1:fe:de:e2:88:04:07:
e7:85:2a:22:2b:84:57:d0:fb:04:fb:e6:38:ae:ea:
f5:90:87:d5:d0:b5:f6:88:3b:19:c8:2b:e4:d0:2b:
ac:f7:f7:67:0f:03:44:87:52:96:ea:80:c0:02:32:
80:e1:1a:2a:5c:e1:8f:99:85:3b:53:4d:54:f1:2d:
51:59:ae:56:95:f5:b3:2e:2d:e3:42:b8:cf:47:3e:
31:3f:60:c4:96:f7:e2:65:3d:ba:9c:39:f3:bc:da:
e6:50:6a:bc:4a:5f:7f:8d:e9:52:15:b0:b3:c4:0d:
d7:bd:23:88:31:ab:4a:a4:9b:c5:b0:bb:60:37:1a:
69:ec:02:a0:ae:ff:0d:08:e7:f2:f6:b7:18:31:ea:
ec:fa:9b:41:05:c0:38:02:33:44:24:f6:e5:5f:b1:
60:16:b5:f9:f2:16:dd:b6:0b:53:e8:4b:7e:a7:bc:
fc:72:a5:b5:45:ba:35:d5:65:aa:f0:e3:f3:5f:56:
7a:45:34:f3:4b:29:88:29:98:03:bf:06:0d:ca:0e:
50:ea:b6:b3:84:ce:2d:05:4f:b4:58:e4:6d:c7:59:
0e:f2:d8:08:06:84:e9:c5:db:6d:fa:19:05:01:05:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:CA:E4:89:3F:8F:DE:D6:DF:DC:98:08:92:28:8C:90:6E:D5:F5
X509v3 Authority Key Identifier:
keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:c3:a0:30:73:8c:e1:3d:50:bc:92:35:fc:41:d0:17:9d:58:
90:cc:66:bc:45:ec:62:b9:b0:2b:e5:5b:51:23:bc:e4:f2:5d:
96:56:47:3d:d6:07:db:d4:00:95:2e:f6:b2:d3:d8:e6:84:70:
c3:92:5b:8f:6b:61:d0:66:b6:36:e8:d9:29:a3:7b:71:35:7b:
84:73:3b:5f:28:ba:6a:fb:e5:b5:28:0d:f2:f3:19:0c:ad:bb:
62:b4:ae:a3:3f:d4:36:d1:29:87:c5:d0:83:ce:bb:74:91:5d:
85:b8:24:d1:d1:c4:ef:08:a5:f0:61:26:2b:ca:3b:6d:6d:bf:
26:d9:68:e7:df:42:39:32:a0:0a:eb:28:68:64:a3:4a:b3:fd:
7f:60:39:ad:e0:b1:c6:69:60:70:8f:d4:c1:2d:29:d9:84:6d:
33:30:8d:65:f6:b9:91:d7:ed:a0:15:c8:40:7e:3b:4c:a8:ee:
4d:d2:6a:ef:0c:1a:90:f4:de:ee:de:cb:ce:51:f4:68:99:e5:
2a:0c:0d:f5:69:cb:5a:5b:89:21:8c:3a:b2:bf:5b:80:fe:bc:
ea:48:cb:1c:5c:de:f8:f3:b5:e7:05:16:4a:3d:10:ba:d7:db:
1c:f8:c6:32:5c:dd:d2:cc:fc:94:bc:b1:ac:70:fe:48:88:c0:
24:bb:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:02 2025 by rpki-client