Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier: tg2IG7y19JfnW7qdtILXaacJz2ahEwIdUwyCn442XJA=
Subject key identifier: 2D:75:29:EE:EE:23:BE:3D:23:9E:87:5F:DE:18:96:F5:E4:16:93:4E
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial: 0B24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number: 0B0D
Signing time: Thu 30 Jan 2025 19:20:24 +0000
Manifest this update: Thu 30 Jan 2025 19:20:23 +0000
Manifest next update: Thu 06 Feb 2025 19:20:23 +0000
Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: qcnVj2w9+t1Ib0aIfIBIvG77Zv9y/veFQ1l/PuxhIAM=)
2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: qdT15ZjLC1IrSR6bLqPoZgH+T/K5K2zwaD+DCLBWfqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Validity
Not Before: Jan 30 19:20:23 2025 GMT
Not After : Feb 6 19:20:23 2025 GMT
Subject: CN=679bd0f7-aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:9e:51:19:89:84:37:4c:d7:a8:f1:fd:23:
4f:aa:b5:97:ab:46:b1:5f:9e:3d:57:a3:6f:79:31:
0c:37:ef:2a:bb:ef:86:eb:3e:2d:56:d9:61:e0:68:
e3:57:eb:a8:1e:9f:4f:f0:c3:b4:74:cc:67:c9:4c:
1a:7a:41:f3:3a:36:07:13:b8:27:ae:c3:fa:66:99:
ff:99:15:7c:44:53:c9:b0:87:0c:64:14:63:65:e6:
20:42:79:e6:6a:2b:30:1d:48:8a:89:fa:e7:65:2e:
22:80:fa:55:8a:fc:8e:bb:2d:37:7a:a4:3a:92:a0:
8c:72:56:1d:35:63:e9:52:c8:6d:33:b1:4c:91:9f:
26:d5:7b:69:c8:0e:63:90:14:94:ec:cc:ff:b7:d3:
7b:af:0b:2d:e1:1d:8a:9f:72:67:2f:ea:8c:d0:78:
17:6f:87:af:56:68:5f:c0:b3:01:d0:8f:de:1c:4e:
ed:66:9b:ee:ce:bf:98:1f:d5:a3:35:d8:0c:f5:74:
5a:90:67:51:53:72:9e:b0:e1:a3:30:c1:95:fb:91:
ce:6f:3e:3d:8f:79:b4:fe:93:15:f0:20:48:db:a7:
90:ae:dc:95:93:cd:4d:dd:d6:80:f9:ad:5a:5c:44:
9b:d4:0c:2b:4c:94:87:64:b5:1c:e4:65:b5:68:dd:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:29:EE:EE:23:BE:3D:23:9E:87:5F:DE:18:96:F5:E4:16:93:4E
X509v3 Authority Key Identifier:
keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d1:bf:5e:21:f0:1f:ad:6a:6e:14:ea:62:de:5f:c6:b0:04:
21:36:d0:3f:9f:84:71:b4:27:02:4c:94:bf:f6:1d:e0:5b:a9:
ef:2b:68:c2:75:9a:3d:08:8f:51:e3:fc:ee:71:34:28:73:90:
8b:29:9a:08:72:5b:36:55:2a:cd:ad:1b:d1:2e:7a:bc:80:d1:
e1:08:a7:9c:a7:25:d9:18:09:72:30:0c:15:52:99:31:b8:2a:
79:45:e1:64:c9:4f:d5:5a:65:29:9f:33:18:66:3e:67:da:07:
27:3d:38:b9:17:c1:df:67:b3:51:37:72:5c:18:f4:0d:a9:83:
4d:e1:7a:93:31:1c:d9:06:d0:4f:ac:0b:49:07:4e:07:8d:35:
cd:5c:20:cb:89:fc:63:2b:d3:b5:01:7a:04:3c:f8:aa:8f:41:
5c:d3:f3:eb:e6:5d:b1:6c:a3:e2:21:4d:75:c9:ee:86:26:fd:
f1:ed:67:1a:08:89:c6:3d:74:0a:a5:12:0d:02:17:65:b6:e3:
9c:78:bb:c0:0a:90:95:ed:2c:89:5a:aa:32:f2:47:93:bc:da:
03:84:af:89:9a:a2:ee:aa:d3:d7:48:6e:56:16:0e:0d:11:9c:
e7:63:48:f4:75:1c:bc:d4:c1:fc:37:bb:d2:0f:b0:24:fe:88:
0c:11:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:14:16 2025 by rpki-client