Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json)
Hash identifier: NfBqsW6GDo637+vprkM106XI6c/RlZIWFA2rcUzwWJs=
Subject key identifier: AC:32:0F:7F:CD:C6:65:8F:49:A8:0B:4D:20:C7:D4:36:3C:93:67:01
Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
Manifest number: 022B
Signing time: Fri 31 Jan 2025 02:03:27 +0000
Manifest this update: Fri 31 Jan 2025 02:03:27 +0000
Manifest next update: Fri 07 Feb 2025 02:03:26 +0000
Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: CVZ8CN9ZQ5BolUZJIx+5vR2QvJRxZYH0cihgdK+4yYE=)
2: 008C0876148311ED856EF438C4F9AE02.roa (hash: TaT1WGLobUSkn2V8H3yXdWE7g83qq/C9PlZR3+C38jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Validity
Not Before: Jan 31 02:03:27 2025 GMT
Not After : Feb 7 02:03:26 2025 GMT
Subject: CN=679c2f6f-73ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:07:ad:e2:9d:c2:cf:83:93:89:f0:bf:9b:
67:1d:35:d4:08:7c:7c:3b:37:76:33:38:62:f5:e7:
f6:34:87:fb:d9:c7:2d:66:8d:42:92:3c:1c:35:3c:
70:6c:b6:b8:1b:63:5a:d9:fe:9c:42:c4:98:e5:58:
50:90:5a:7c:62:ae:ab:2c:db:37:61:dd:24:de:b8:
43:ae:7c:6d:63:fd:8e:8d:3d:8a:88:63:fb:ab:d3:
56:d2:c8:56:54:e9:15:00:60:b4:40:80:84:e4:64:
c4:71:46:f6:80:19:4a:47:2d:d4:db:e8:39:d6:63:
a7:79:04:b6:86:0e:6a:00:87:a6:93:18:c5:01:f2:
28:37:e8:e1:7e:b6:86:c7:c1:98:84:24:b9:77:10:
35:cd:bd:77:74:4f:12:5b:1d:70:69:96:09:0e:95:
57:2a:0d:67:70:56:dc:37:fc:e4:f4:01:06:31:3e:
68:dd:57:71:f2:f1:19:54:2d:0a:c1:c3:af:6a:ef:
82:e1:a4:94:76:7a:2a:f4:f5:28:28:ff:0e:0f:6e:
e0:42:4b:a6:db:2a:3f:19:2d:bc:7f:b8:c7:f2:d3:
c9:4e:86:7f:25:a3:a6:4a:dd:34:cd:d3:f2:1c:cc:
19:56:7e:b4:4c:59:9b:e8:3d:03:38:e9:79:39:5b:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:0F:7F:CD:C6:65:8F:49:A8:0B:4D:20:C7:D4:36:3C:93:67:01
X509v3 Authority Key Identifier:
keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:8e:ae:78:fe:25:a2:f6:99:bb:e5:b3:59:c1:a2:a7:a9:
e2:d2:89:1f:f9:b0:61:2a:0f:f1:fc:75:00:a5:19:24:68:7e:
3c:5a:6e:af:55:fe:48:04:ba:02:17:08:05:b6:a0:17:51:56:
7a:79:82:4d:65:bf:ba:80:ea:87:72:20:1a:dd:2e:c0:c8:87:
1a:a4:e1:7f:1b:a1:e5:dd:22:f4:f5:87:2d:1d:a5:83:17:75:
25:5a:32:f6:b1:1d:9c:e9:ac:cf:64:1d:fa:be:c4:cb:e4:b9:
11:40:81:ba:7f:af:72:60:0e:9a:16:28:3b:2f:83:3d:e0:b1:
a1:48:c1:96:04:9e:89:80:aa:eb:59:9d:af:fc:60:ef:48:04:
ac:93:ff:e7:a7:5e:fc:b7:a0:30:b2:cc:4d:bc:d9:1e:ee:fe:
a1:c8:14:10:e6:3f:95:79:19:8e:6a:72:ec:7a:47:ac:d7:53:
07:07:ac:5a:7b:07:04:5a:22:f6:d2:da:48:26:33:d9:70:0e:
61:b2:df:f2:c9:4c:d2:ea:c1:c5:fa:35:0c:87:d0:0d:0c:40:
59:12:0f:5e:68:fd:09:33:15:db:b9:f6:9a:dd:ae:78:68:36:
9e:3e:a4:ce:31:5d:df:2f:fa:f3:e9:18:81:47:e0:de:60:98:
b7:0f:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:33 2025 by rpki-client