Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
File: yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft (raw, json)
Hash identifier: wNzCMlbNRvwKrz/BBPpHh9wsZLJEBjlKd1mHI32XlGs=
Subject key identifier: A2:5F:A3:67:AD:93:C5:83:B2:A8:FE:2A:B0:34:CF:25:94:8A:69:48
Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
Manifest number: 0682
Signing time: Fri 31 Jan 2025 00:48:57 +0000
Manifest this update: Fri 31 Jan 2025 00:48:57 +0000
Manifest next update: Fri 07 Feb 2025 00:48:57 +0000
Files and hashes: 1: yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl (hash: IJvvPBP21IetdYRWLDT6/f5KV9M0GwZ7qp0sg7KXSq0=)
2: 36EA74DAB55C11EF9EF5381AC4F9AE02.roa (hash: L0ogohbd+XG2Rt92PSkXg3Zj7mjIKhleupD8sB/ULt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Validity
Not Before: Jan 31 00:48:57 2025 GMT
Not After : Feb 7 00:48:57 2025 GMT
Subject: CN=679c1df9-5bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:4d:a6:ce:b9:a2:d3:c3:a8:c5:fe:80:4b:
5d:6a:e3:e6:7b:3b:d0:95:32:c1:8e:b4:21:c5:cf:
ae:a6:23:1c:f6:77:25:22:b2:d9:61:18:32:d5:76:
01:aa:b3:82:15:cd:41:ea:1b:de:0a:c1:af:6d:e0:
3f:d0:ad:c2:33:7e:55:7c:d8:1b:56:42:4d:8d:ac:
a2:bf:8e:00:aa:c3:98:ce:4a:47:20:60:8d:67:15:
62:24:a8:c6:6b:c5:7a:36:0b:ac:09:d5:f4:80:e1:
2b:22:fb:99:60:74:9f:5c:74:c9:bc:48:48:4a:59:
93:91:38:90:f7:d7:6c:4a:3d:3a:b0:08:7f:a4:29:
4f:ec:0d:dd:5d:f3:fd:cd:17:27:e8:fc:94:a0:85:
11:7a:2e:82:a8:f3:67:63:bd:8c:e2:f6:7c:3e:66:
9f:77:54:d9:e9:44:1a:91:6f:99:08:85:96:05:86:
bb:78:81:7d:d8:30:39:5a:fa:88:5d:77:29:35:d3:
a3:c0:e3:42:8f:c6:b3:2a:84:78:cc:32:09:dd:9d:
5a:da:7f:69:d8:9e:97:bb:23:3e:86:a7:39:5e:be:
b9:1b:ca:e1:41:b3:41:ce:6c:ca:3f:05:95:5e:8e:
1a:e7:80:a6:73:27:a9:6f:4b:62:78:97:c2:6e:8c:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:A3:67:AD:93:C5:83:B2:A8:FE:2A:B0:34:CF:25:94:8A:69:48
X509v3 Authority Key Identifier:
keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:df:bd:42:44:63:1f:66:30:d6:6c:e0:84:ac:40:54:36:eb:
67:ed:83:69:c7:d0:83:1f:dc:b7:15:6b:ab:04:14:33:c3:cf:
0f:33:20:26:19:33:3c:db:ea:d0:0d:37:6b:5e:5e:da:b8:3c:
78:e4:43:63:6c:b6:d9:10:84:5f:a9:4a:69:59:c5:f7:b6:db:
d9:1f:08:df:2b:47:d5:fd:2e:3e:8b:73:59:ec:a9:39:ab:f4:
13:44:9c:bd:27:bc:e6:6e:f6:3e:74:5a:70:0c:16:16:6e:bb:
b5:06:6b:7b:d0:71:a4:d4:d8:01:04:38:8a:1b:73:4e:34:31:
08:3b:ac:f8:42:94:06:df:a8:53:e8:22:5d:87:4a:a1:70:63:
cd:b5:27:57:46:4c:68:84:00:06:43:4a:0b:19:b1:cd:b3:21:
4f:b3:e3:da:61:87:d8:81:78:12:26:f4:ec:99:ee:97:bd:8e:
e4:8f:8a:54:b1:82:0e:b6:89:6f:e6:44:08:31:25:70:1b:3a:
15:70:02:6e:ba:36:14:6b:ef:ed:2c:f1:55:d8:6c:4c:43:42:
08:18:66:79:9f:3a:eb:51:b2:8d:50:58:66:bb:6e:be:25:78:
8c:aa:4d:ed:ac:98:c1:f5:69:f8:0d:a6:cf:10:30:d6:23:bf:
25:88:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:07:04 2025 by rpki-client