Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier: xRj3hnV/ab1KYj2kCYas1IumNZpSfRCYHrOxtDKyWHg=
Subject key identifier: AD:B5:5A:14:4C:A8:79:DA:BA:C5:3C:07:FD:5C:44:8E:8F:B6:87:42
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial: 0497
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number: 0491
Signing time: Fri 31 Jan 2025 00:03:00 +0000
Manifest this update: Fri 31 Jan 2025 00:03:00 +0000
Manifest next update: Fri 07 Feb 2025 00:03:00 +0000
Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: sAxUF1/EEDQhsJQ9Y5exA8ookC4tAkbN8D6UP2sExy4=)
2: B0A2E01225C411EC88466E59C4F9AE02.roa (hash: 8z4FQ3P4ffexi4IqxjF16x9Xr0QlwFMb8TffrA8dnxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Validity
Not Before: Jan 31 00:03:00 2025 GMT
Not After : Feb 7 00:03:00 2025 GMT
Subject: CN=679c1334-aecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:e1:4b:4f:32:5b:1d:9b:54:d0:be:86:0b:
7d:3a:6c:5d:70:94:eb:bf:f6:da:67:8b:d4:8b:50:
d4:78:93:15:75:53:45:8b:0a:e2:bc:7f:76:9b:ed:
f1:2d:8b:74:95:30:a6:2d:e9:37:ff:1e:3e:df:6c:
59:0a:98:5d:3d:ac:8b:4c:e1:2b:17:ce:d7:54:2e:
64:c9:1c:07:7a:fc:19:84:53:24:33:1e:1f:43:04:
14:51:dd:32:2c:a5:1c:ed:27:58:25:22:64:40:30:
d2:17:71:2f:af:99:fa:3a:12:df:22:f9:2d:92:f4:
3c:ce:9c:7d:06:7c:95:b6:6c:2a:22:c2:cc:83:5e:
c4:8b:20:f7:fb:b5:17:20:b5:d7:6d:b5:70:5e:a2:
10:a3:f7:2d:05:8f:02:7e:92:c4:2e:f9:f9:d1:99:
2c:bf:00:0e:82:0b:c6:f6:16:68:9a:f1:e9:47:7c:
8f:83:d6:6f:07:1d:18:7d:cf:53:58:00:20:77:80:
a6:a3:37:ac:41:76:5b:46:69:b2:74:5f:b8:83:a5:
58:ed:a8:cd:a1:83:68:57:c7:61:4b:b7:b6:d8:8d:
e0:5e:bd:a7:40:f0:50:3d:9e:63:d6:db:a3:dd:33:
f5:5b:9e:58:2c:94:5c:5e:2a:05:2f:5a:09:01:f3:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:5A:14:4C:A8:79:DA:BA:C5:3C:07:FD:5C:44:8E:8F:B6:87:42
X509v3 Authority Key Identifier:
keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:17:4e:1b:e5:31:10:a7:07:cf:46:9c:89:2a:ee:96:10:
3f:2f:0d:e8:32:60:3d:e0:7e:6d:ff:d2:49:a6:82:2f:95:28:
f9:09:d9:52:71:97:78:49:22:06:34:1d:80:f1:3b:8b:7c:d6:
e4:55:f4:b7:87:2a:ef:16:fb:98:2a:ee:06:0e:f3:f1:53:eb:
6c:a2:41:da:ba:ee:a3:3e:be:da:6c:04:ac:d2:33:97:b8:48:
fb:e9:b9:d8:bd:e8:1c:8e:d7:c9:2d:e1:2f:41:ea:b6:8f:36:
e4:c4:e8:a8:50:16:33:98:34:8c:f3:7a:77:ab:a5:1f:6a:58:
4d:38:9f:26:33:56:7e:8d:33:07:aa:da:44:ba:b3:0f:16:db:
77:df:fe:c5:82:6d:c3:7e:b1:43:05:be:20:aa:51:38:e2:1b:
96:40:27:b2:4e:17:c4:e7:7e:e3:39:39:50:a3:fb:37:70:b9:
fc:87:ab:d4:22:c3:e5:d3:0d:01:19:06:28:48:64:e8:e0:84:
36:30:bc:09:a8:d0:78:82:ee:60:b5:1b:ac:40:c0:60:c0:80:
56:c3:fe:d6:2d:88:e8:05:05:24:27:0d:24:3e:92:bf:81:38:
84:f8:4c:cb:ba:3f:c1:19:5e:d3:64:11:61:9f:7b:00:8a:4d:
e1:64:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:11:08 2025 by rpki-client