Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: TorqJCMC4ixpMSR0UgWrdfphwv1H9dRte4fk2JTKnvg=
Subject key identifier: 73:9B:B7:04:24:A9:B5:74:9A:6A:DF:2E:0F:1D:BA:3A:EE:72:7E:21
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 011A
Signing time: Fri 31 Jan 2025 04:01:19 +0000
Manifest this update: Fri 31 Jan 2025 04:01:18 +0000
Manifest next update: Fri 07 Feb 2025 04:01:18 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: dZft5TMFGjvfiD+ZLBtE+G0pxwSv+fXLeLSUBXmsNtQ=)
2: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: g09v6jk8fn3awL6foCEfKGlvvvO5I0PHpOGz6LziEuA=)
3: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: rhIhi3I6SpyrkjjQ3cL8Mw2vXOogWSjfaZP+3P/2bFk=)
4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: qvUP6d81IdrzZbKdEjVG1snn+Y2Byr8jMGRCFKnK8TM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Jan 31 04:01:18 2025 GMT
Not After : Feb 7 04:01:18 2025 GMT
Subject: CN=679c4b0f-149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:91:ee:87:22:b0:de:97:c7:79:5e:1d:95:
58:99:93:9b:ae:39:92:c5:f9:04:b5:ca:bf:ff:cc:
77:94:9e:1c:18:ea:a9:50:88:19:aa:23:09:d8:4b:
75:e8:8b:a7:f4:be:2e:ec:b0:d3:a4:a5:05:47:62:
88:88:8a:1e:4f:36:8c:df:b8:89:76:0b:b8:f4:1d:
10:18:b1:85:c3:b4:9a:c7:b5:ac:ed:8e:68:81:82:
f3:44:bd:7e:86:95:d6:9c:d2:00:a7:69:1c:84:d3:
c5:02:e6:c9:1a:35:b5:9e:61:f0:a0:f4:b4:40:23:
91:c8:50:e2:1c:ed:06:af:c7:d4:6e:fc:06:c2:17:
e0:17:39:8c:0e:56:e6:1d:d5:62:4e:4d:f9:1c:9f:
da:49:09:d4:26:83:31:36:ee:18:74:c2:f6:c0:bc:
65:73:50:4a:df:95:89:84:d1:1a:85:66:8b:4f:24:
3e:88:f3:dd:c6:96:cb:3f:fc:3a:01:66:10:1f:f0:
9a:99:83:da:72:da:1f:aa:61:35:59:50:7d:fc:6e:
c2:9f:e3:4a:90:5e:dc:53:68:77:70:1c:ad:ea:5c:
bd:b5:ee:db:71:a6:e2:7f:b0:0a:9f:ce:fb:b5:04:
23:dd:32:09:0d:56:f7:9d:e7:ed:17:51:5c:f4:8f:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:B7:04:24:A9:B5:74:9A:6A:DF:2E:0F:1D:BA:3A:EE:72:7E:21
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:1b:c7:19:8a:b0:a0:ea:27:eb:68:13:1a:0d:e8:82:25:
8c:54:8a:43:a2:89:11:92:c6:a2:ce:f7:66:ac:d4:ea:17:42:
b7:ed:7d:6a:b7:23:cb:8b:de:23:b2:6d:dd:d5:6d:41:96:6b:
ae:fd:c3:12:12:5e:24:a1:68:79:43:fe:d0:24:a7:c3:67:c4:
f8:5d:ff:10:48:5c:76:1b:1e:60:26:9d:db:21:ed:75:ed:98:
d0:73:c4:72:84:1e:b6:c6:85:e0:61:e8:1e:3e:ae:f0:2b:bc:
14:c3:42:54:8b:49:30:77:39:35:12:39:ac:f5:c7:63:b2:56:
de:5c:6e:0a:b6:35:6a:9e:8d:5e:ea:f1:31:72:6c:e7:08:42:
a0:3a:db:6d:61:ae:fa:e4:dd:94:91:f3:c9:e7:63:75:1d:e1:
0b:e9:e9:fc:c5:52:6d:89:e3:93:98:54:7a:a6:6d:cb:ca:3b:
cf:fa:68:a4:fd:2a:e4:8f:ae:0b:ba:56:87:ab:40:db:0b:e6:
ff:2e:25:08:66:69:12:30:95:b0:ee:eb:d9:d0:ad:9e:ca:6e:
de:c1:f9:70:4f:3c:60:1a:18:85:51:a5:c0:fd:fa:a8:29:15:
7b:77:f2:58:60:54:3a:bf:28:99:15:f9:67:02:6b:b9:54:37:
70:98:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:25 2025 by rpki-client