Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
File: ybTeSHSWW_87LwRxASJXfm2bHRQ.mft (raw, json)
Hash identifier: GLsnsaahWgpjsJY7V+gBRX5NTq6aF6zDx8hVO/7/7iE=
Subject key identifier: 33:4D:F9:A5:22:2D:13:7B:DB:B6:FA:22:AC:1D:CC:E0:E0:63:FF:AA
Authority key identifier: C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
Certificate issuer: /CN=A91B166D/serialNumber=C9B4DE4874965BFF3B2F04710122577E6D9B1D14
Certificate serial: 0BA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybTeSHSWW_87LwRxASJXfm2bHRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
Manifest number: 0B98
Signing time: Thu 30 Jan 2025 19:08:27 +0000
Manifest this update: Thu 30 Jan 2025 19:08:27 +0000
Manifest next update: Thu 06 Feb 2025 19:08:27 +0000
Files and hashes: 1: ybTeSHSWW_87LwRxASJXfm2bHRQ.crl (hash: +lwJbfo9Yo93okzEZKOn2Oa/7mnh5s/i2mzIbia6VLc=)
2: AA378BD6405111ECB91F2A37C4F9AE02.roa (hash: YiHdcGxWTXUcZ/kSD9dFHBm9eVNGnT5o+X8IY323ls0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2978 (0xba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B166D/serialNumber=C9B4DE4874965BFF3B2F04710122577E6D9B1D14
Validity
Not Before: Jan 30 19:08:27 2025 GMT
Not After : Feb 6 19:08:27 2025 GMT
Subject: CN=679bce2b-83d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:69:17:ae:f1:f1:a8:bc:89:71:01:44:2d:
ec:64:ad:93:79:57:78:b4:b7:fb:2f:fe:df:8e:37:
fd:e3:a7:0a:de:e1:59:02:ab:3d:60:02:90:34:cf:
68:43:fa:fa:40:16:97:37:d4:31:86:12:f4:da:88:
1f:85:2c:48:7e:21:5f:a8:f9:49:86:2e:3a:da:4f:
2b:7d:49:9b:46:68:2d:b9:c0:33:99:55:01:94:47:
0a:96:77:b3:12:bd:cc:40:fd:bb:09:09:b2:7e:e9:
5f:f2:b9:c4:12:2b:1e:91:33:83:31:f6:e2:58:cb:
e0:a1:69:e9:c1:89:d0:dc:ae:6f:28:17:2e:18:ea:
32:4a:73:0b:71:c3:e8:da:1e:35:d2:e5:90:d9:2c:
97:6e:93:d1:8d:4b:a0:26:3c:91:3a:7f:06:8a:3b:
9b:2e:3e:74:2b:a1:a0:eb:14:7b:e8:eb:c6:6c:ab:
4c:af:a9:b0:32:68:1e:e3:1e:f7:8f:86:f1:7e:4f:
7b:fb:ec:67:17:72:4d:55:d8:0a:54:ef:a9:ec:c9:
9f:16:b6:c7:29:6d:08:cc:6d:7c:d8:a2:e4:a5:a5:
a1:ee:e9:f4:5c:78:80:5b:c0:c5:72:ae:f9:f6:98:
91:8c:95:13:8e:86:83:c8:29:cc:83:9f:fb:e6:e2:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4D:F9:A5:22:2D:13:7B:DB:B6:FA:22:AC:1D:CC:E0:E0:63:FF:AA
X509v3 Authority Key Identifier:
keyid:C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybTeSHSWW_87LwRxASJXfm2bHRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:73:8f:23:e6:ec:b2:1d:fd:4b:57:25:7e:3b:ad:95:b0:
55:fb:7a:3f:4a:9c:39:65:b4:51:80:14:32:16:f1:cd:ca:27:
a5:de:bb:70:9d:67:79:6a:61:d6:75:e6:f0:5b:84:0f:41:34:
cf:d4:cd:5a:ba:eb:d7:7f:0b:54:8c:80:9d:5f:e9:a1:6f:55:
1d:4f:5d:53:64:2e:56:9e:b6:90:8e:83:45:c7:f5:9d:bf:ed:
6e:f9:92:79:1d:7e:20:b6:d5:2c:ac:50:37:71:60:3e:3c:bc:
a5:95:3a:1a:e0:56:e9:f4:e9:ce:04:99:35:e4:52:b4:d9:d4:
d5:b4:bb:d5:27:65:d4:97:d2:c7:22:60:04:b4:b3:d5:ca:43:
14:c3:e9:c7:8a:f7:62:96:c3:90:fe:ae:3d:1e:82:82:74:f0:
99:10:32:17:31:2b:a1:b9:9f:da:a9:a1:22:29:8c:d6:d3:99:
32:22:c1:0a:35:9c:d3:2c:e8:6f:9f:85:3a:40:fc:d3:86:2f:
78:97:db:95:14:2d:fc:56:5a:d7:11:71:81:0b:92:92:d2:9b:
23:60:a3:ae:5d:6c:37:10:92:33:d7:17:68:c2:cd:e7:f1:dd:
f1:73:0f:7b:0c:1f:bb:63:06:d1:07:21:13:57:c4:45:81:93:
0a:d6:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:37 2025 by rpki-client