Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json)
Hash identifier: 1fmcz/0RoYMOxG4jTVFf64jXN0dRC7SppUJgwD2x+OI=
Subject key identifier: 35:E9:9A:2B:D2:C9:B4:88:74:B2:72:E6:19:BF:65:19:9B:3A:17:B3
Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Certificate serial: 0AAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
Manifest number: 0AA9
Signing time: Thu 30 Jan 2025 19:36:59 +0000
Manifest this update: Thu 30 Jan 2025 19:36:58 +0000
Manifest next update: Thu 06 Feb 2025 19:36:58 +0000
Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: 587Vr51RRdqgqax8VOSS3Txdzm8okFVgbX4ULljAaZI=)
2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: sHAaO7xcMRnAefggiAO9NIlqTNGd1VBO4+XdHoCcPBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2735 (0xaaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Validity
Not Before: Jan 30 19:36:58 2025 GMT
Not After : Feb 6 19:36:58 2025 GMT
Subject: CN=679bd4da-6313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:35:30:38:33:1e:80:fd:2f:9d:24:1f:ef:
c5:67:58:a2:87:39:b0:12:6f:38:dc:4d:27:02:a4:
8a:e7:73:36:ec:42:61:a3:dd:a5:ee:19:a0:d0:94:
53:3a:6f:c0:56:80:58:94:a8:9f:50:93:45:67:e9:
bf:fb:5d:ad:33:a1:4b:a8:1e:5d:0c:ba:73:d2:23:
f3:e3:0f:51:45:59:4f:98:f0:e7:80:87:3a:38:58:
89:12:42:fa:ab:ce:63:7b:b3:eb:72:8f:93:a6:83:
14:7a:8d:0b:77:ac:d1:66:68:7f:35:82:b4:8d:bf:
44:e8:fb:0c:bb:f8:63:5b:7c:27:f2:a7:c6:fa:4a:
b1:0e:68:6a:d5:cc:2e:b6:ae:77:17:d5:36:e1:44:
5c:e4:cc:7a:87:1b:ef:aa:33:c6:d4:d3:f3:18:5e:
a6:60:3f:ca:21:2f:3f:fd:fc:45:b9:57:0b:77:34:
61:e3:e4:3d:9c:38:96:77:95:20:93:8c:42:6d:82:
a8:19:30:9f:b2:67:3b:b9:e7:34:3d:47:06:f2:ea:
2e:91:44:ce:b8:31:27:71:5e:94:24:94:9d:a1:0f:
05:3d:70:24:58:82:63:d4:9f:3d:1c:43:c8:57:38:
6c:fe:17:92:ba:8c:b8:53:59:0a:e4:d8:b1:55:e1:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:9A:2B:D2:C9:B4:88:74:B2:72:E6:19:BF:65:19:9B:3A:17:B3
X509v3 Authority Key Identifier:
keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:30:3e:4a:1b:20:2b:73:01:16:6e:1e:6a:07:a9:7d:a6:aa:
c5:98:a6:54:3d:c0:70:6b:fa:20:f3:0a:23:dc:89:3b:f0:09:
9e:a8:ff:9b:67:0e:67:a5:17:29:78:bc:df:c1:20:8d:de:6a:
26:4b:87:45:2f:8b:ac:f7:63:17:69:a5:e1:3e:0b:28:9b:f3:
1f:f9:de:f1:c7:e7:92:35:b7:9c:d1:29:7f:11:5b:ec:65:e8:
3f:b5:5a:dd:9b:d8:1e:a4:93:8a:e9:4f:2d:65:f8:8c:d1:a6:
ee:98:6e:3b:9d:58:13:09:58:a0:d1:eb:2c:bb:62:c3:9f:f9:
d4:e0:85:62:f1:a3:4c:d4:6c:ce:8a:a0:50:03:e6:d8:4c:bd:
2d:d8:b0:49:a1:f9:4e:aa:57:f7:9b:8f:7d:65:1f:3e:a4:85:
c2:c8:b4:0d:dd:16:a4:10:80:c0:be:6c:b4:b6:2c:47:0e:07:
be:d6:27:05:b1:5a:d6:a9:4e:26:5c:44:8a:8d:53:a0:0d:02:
8a:7d:88:7b:51:8a:fd:75:a9:0b:16:08:e5:e2:23:0e:0d:53:
43:82:df:52:69:f3:f3:c6:70:81:cc:27:db:d9:49:dc:21:0d:
00:85:57:ac:f4:64:3b:64:08:eb:9d:26:3c:8a:db:8f:48:28:
b0:e5:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:54 2025 by rpki-client