Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier: FH3fU+le7i9An2+zl5WziE4pvlTaMnZby4Hf8BsM3h4=
Subject key identifier: F1:89:5A:16:6C:B7:51:90:F7:71:8D:6B:B2:0C:14:4D:20:88:BC:0A
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer: /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number: ED
Signing time: Fri 31 Jan 2025 04:28:47 +0000
Manifest this update: Fri 31 Jan 2025 04:28:46 +0000
Manifest next update: Fri 07 Feb 2025 04:28:46 +0000
Files and hashes: 1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: AdVN0M97JgrPOWny3eq6Ca13+uLI1hhQhaXTECpgpIg=)
2: E8E76DFA77E111EEAD38F454C4F9AE02.roa (hash: fU/RkpVL4z6Cr0cyCUfNUkgmOGc3QWQsXd03NlJ0kdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Validity
Not Before: Jan 31 04:28:46 2025 GMT
Not After : Feb 7 04:28:46 2025 GMT
Subject: CN=679c517e-378f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:c3:b6:74:cb:d9:5c:9f:fd:2a:c1:a7:0a:
2d:61:9e:2a:78:6a:4f:09:42:f8:49:b4:d4:2f:48:
cf:be:1d:04:93:44:ae:8e:33:90:d1:08:3e:5f:ef:
e4:30:02:90:e6:f3:01:97:29:96:8b:64:cd:fa:b9:
a4:4e:69:bf:c5:81:4a:b9:d7:96:c2:bd:37:df:cb:
a1:e9:f5:68:fd:15:59:c9:74:04:22:2f:95:08:14:
20:46:48:7a:52:a6:46:42:ec:04:5c:ec:34:cf:dc:
93:3b:83:1d:7a:be:e8:b8:f0:20:3f:30:11:64:9d:
b4:85:06:39:e8:41:6f:2d:f5:39:6e:7d:ca:ee:80:
df:e7:76:06:3b:21:b9:f7:9d:91:3c:9c:53:f6:cc:
95:a7:48:51:1f:91:64:6f:73:89:fb:01:16:07:96:
6c:12:a1:45:71:f4:78:98:87:27:b2:41:4b:4e:39:
44:8d:2f:73:cd:0f:b0:c4:5d:4e:23:d1:47:df:45:
82:0e:2c:b5:99:ef:72:28:98:d5:86:f3:69:6e:ae:
7b:f7:2e:49:0c:7b:ea:8e:5b:b6:59:aa:e1:1f:c0:
95:37:c6:6f:d9:f3:00:e5:9f:b1:d1:59:72:cb:7f:
33:27:90:e7:1d:87:93:1d:f3:22:44:63:4c:49:83:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:89:5A:16:6C:B7:51:90:F7:71:8D:6B:B2:0C:14:4D:20:88:BC:0A
X509v3 Authority Key Identifier:
keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:53:b0:eb:d1:3f:bc:9d:b4:80:ed:e1:3e:82:19:19:4b:f4:
39:1c:dd:6a:21:4f:20:e2:6d:cc:6c:47:13:45:70:01:bc:4a:
e8:e9:80:61:c0:91:d3:bc:d8:8b:c3:00:62:4e:a6:ac:2d:de:
ec:0b:12:80:48:dd:cb:7d:f9:0b:ef:df:4f:be:19:63:c8:b7:
7f:e1:7a:a0:ff:80:f8:6b:06:98:25:81:6a:3d:fb:f5:74:ee:
a9:1a:45:d4:fa:2b:af:a0:93:b5:16:4e:8e:d1:36:87:cb:3e:
20:16:f5:bd:df:71:71:7b:17:34:9e:3a:4e:5b:27:df:0e:31:
e4:72:95:d4:be:ff:36:4e:50:da:63:2f:de:7a:60:f4:2e:01:
24:44:bd:8d:70:48:65:ff:f5:75:99:fa:50:ad:27:85:7f:f2:
75:02:21:a2:58:38:cf:70:6d:26:32:70:9c:0e:4c:f0:9c:af:
69:86:12:33:35:25:7b:87:b6:60:b3:d3:bf:3e:39:da:c3:ec:
94:d4:ff:a0:c3:b8:27:68:82:6c:f1:1e:c4:ec:2c:ac:46:17:
55:4f:22:9c:f3:d8:22:41:99:57:15:eb:f1:82:75:e5:dc:4f:
2d:b0:2e:c4:db:8f:69:8a:ef:25:1c:68:a9:a6:6d:74:d7:47:
45:f3:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:07 2025 by rpki-client