Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json)
Hash identifier: ol17csizLmj9i/OySTSqTm+5t5jUTM/uNo2dsqcOev4=
Subject key identifier: B4:CA:AA:A9:C8:0A:6C:98:28:DB:B4:08:E4:56:61:40:9E:B3:F7:9D
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 0455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
Manifest number: 043C
Signing time: Fri 31 Jan 2025 00:20:28 +0000
Manifest this update: Fri 31 Jan 2025 00:20:28 +0000
Manifest next update: Fri 07 Feb 2025 00:20:28 +0000
Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: QAWpv3gf+07bY/eI1V1BJOwIqSMEodmGPm2TXj/Dbu0=)
2: CA888654D0E011EC9E5ACC1CC4F9AE02.roa (hash: 4by10ick3aOPoEwL9MxmYZych/O61DB95JCCfpjs2l0=)
3: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: zdWwyK62ezTqtldMx3AFhd08v1ee56JEEEGh/b+1bK8=)
4: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: yt5ul2v37If2OMAgvwlcXNvNlpOeU9vk4N82gRjp7ro=)
5: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: tkC8VFhPaMMB7xHukmlTC8vVY5Lai1noTB/JDIdLAEc=)
6: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: ofwlwfDv/f2slgSdPa6hT78BUtn3LBZ837QvOITSXas=)
7: 346A2B4045AE11ECB857890EC4F9AE02.roa (hash: y6Yo94bVO58GlNbuqBWAfuC5sCH6iiyxweKo6sloNrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Jan 31 00:20:28 2025 GMT
Not After : Feb 7 00:20:28 2025 GMT
Subject: CN=679c174c-e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:61:aa:ff:a0:a2:7f:a2:50:c0:d5:fc:7a:
2c:06:82:a5:b3:14:51:92:87:51:56:0a:72:f9:1f:
bc:43:f9:7b:c5:b6:24:bf:1b:1b:ac:3c:bd:c9:03:
77:ac:57:5e:8d:21:41:b9:7e:0c:b8:3e:da:03:64:
5c:6d:1a:35:2b:01:a2:08:75:55:d4:68:cb:f8:a5:
85:16:09:34:b7:f3:e8:8f:2f:6c:19:da:ae:6a:c1:
c0:af:00:c1:e6:c9:93:6c:a5:09:a7:c7:b8:0a:e0:
7b:37:a4:5e:cf:8b:fe:d6:4d:15:61:8e:f5:bf:c2:
96:8e:ba:d7:ee:2d:8f:fa:d7:29:f6:28:ee:a5:9e:
ce:1a:36:2e:4a:0f:0b:47:3c:f2:d5:1d:77:31:6c:
05:cc:8b:f1:e4:06:50:df:a9:b5:83:2c:91:1c:b9:
a3:2a:b9:cc:5f:59:b6:5d:92:e9:fc:ce:0d:21:6b:
79:0b:de:bb:14:5b:ed:b4:29:58:c8:3a:4c:28:b3:
e8:07:55:b2:85:e2:2d:89:72:94:15:f4:e0:d0:88:
12:58:ac:7f:1b:68:2b:d3:1d:30:c0:90:68:6f:e4:
4d:7e:90:17:12:32:86:4d:28:71:29:30:24:63:5c:
b7:23:c8:05:0a:62:1d:2d:6e:d8:f4:12:6d:6c:16:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:AA:A9:C8:0A:6C:98:28:DB:B4:08:E4:56:61:40:9E:B3:F7:9D
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:05:cd:23:38:ba:ec:91:2a:05:e4:5a:40:2e:b4:11:69:
01:3a:d7:2a:f8:1b:00:f5:70:7c:e9:8c:fa:d0:fa:7f:e9:5e:
f1:2f:2a:c2:5a:58:43:91:73:3a:af:9c:e6:9d:c6:0d:b7:1d:
74:ef:82:c2:e2:b1:b8:a7:95:f2:ec:d7:ba:3d:90:5f:84:d2:
a9:de:ad:d1:f8:43:9d:49:ae:2a:da:de:df:3d:98:79:86:85:
70:2a:ed:ce:0e:30:8d:5f:02:d3:2a:3c:65:49:1c:32:9c:76:
65:7b:a7:d5:d3:ea:d4:ff:3a:18:71:ef:11:8c:9c:80:84:14:
ed:77:71:84:7c:76:ae:a7:3d:31:8f:79:47:18:34:9e:4d:f5:
c9:0a:ac:7f:29:f1:00:2c:54:d1:b6:4b:4c:bf:22:bb:0e:31:
a7:9a:1d:7d:33:42:6d:23:d9:79:0d:ac:b0:1f:58:1f:6a:df:
d9:dc:2d:05:20:c1:3e:16:d5:85:6c:3d:68:3c:37:d9:77:ad:
2c:d4:c5:85:9d:04:07:58:6a:36:f1:3b:57:d5:77:c7:ab:63:
d5:9b:d3:b1:ce:2c:a9:5c:d7:49:87:32:9f:0e:d5:04:21:e3:
c8:ae:48:aa:6d:81:7a:c9:44:d3:68:3e:14:89:ad:0e:40:e8:
03:5b:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:39 2025 by rpki-client