Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File: YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier: gvB5FEXaACAaHIOgXaBOcUy910k6WfqLJBRJL7YYbR0=
Subject key identifier: 84:1F:BD:8F:A8:E6:47:62:4D:41:5C:DD:36:91:83:F4:3E:CD:C9:D8
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer: /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 06:33:52 +0000
Manifest this update: Fri 31 Jan 2025 06:33:52 +0000
Manifest next update: Fri 07 Feb 2025 06:33:52 +0000
Files and hashes: 1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: qpngUcOLwRo6KmR5GtiRGTx3KSfxeg3uXb8Dr+5Rfyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Validity
Not Before: Jan 31 06:33:52 2025 GMT
Not After : Feb 7 06:33:52 2025 GMT
Subject: CN=679c6ed0-8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:fc:93:c0:aa:2b:8b:55:2d:02:3e:30:6f:
7b:9b:14:84:9d:35:c3:28:fd:ee:8b:8e:a8:38:fc:
52:7d:8b:4e:a4:ec:a1:e9:e7:a8:fb:2c:4e:32:21:
d6:84:70:60:87:f0:7e:69:d3:52:9f:f2:9c:89:ef:
00:f1:48:5a:a1:61:d6:c0:02:2e:b9:ff:9a:8c:7a:
c9:d8:3c:bf:ad:93:f5:e2:98:52:d4:43:75:d0:f8:
c4:cb:2e:7d:e2:4c:79:27:32:86:27:bf:a0:3e:ea:
db:70:a1:97:c5:cc:15:90:ae:89:79:91:65:cb:9a:
81:48:2b:6f:24:6d:24:c3:c9:70:cb:56:63:c3:d9:
d2:4f:fe:9f:80:1e:97:8d:24:ce:f2:8e:96:40:85:
a6:b6:4b:b1:49:8d:69:a8:32:9b:bb:89:ca:67:8b:
5d:d0:b9:f8:04:89:4c:76:24:b4:0b:f2:87:4c:e2:
ef:27:2b:eb:76:17:e1:a0:55:92:af:69:42:29:68:
10:37:cc:f8:d5:07:a4:9b:8b:72:16:24:8d:af:e8:
b7:76:aa:34:9d:a8:d4:5d:25:2c:3e:f7:0c:15:ab:
33:fb:54:9e:e8:ec:3a:7d:bd:5a:82:af:99:df:69:
bf:55:b6:84:4d:b5:d0:f0:66:34:6f:8b:2b:ba:85:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:BD:8F:A8:E6:47:62:4D:41:5C:DD:36:91:83:F4:3E:CD:C9:D8
X509v3 Authority Key Identifier:
keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:67:22:33:cc:d5:d7:04:e1:71:a2:e8:89:44:11:69:e5:c7:
47:f5:d8:a7:62:30:ff:a9:fe:f1:62:ab:6e:12:51:1b:d1:f3:
36:e0:d8:e5:6b:8d:e0:6e:7a:9b:7b:4d:40:f3:72:52:b7:3f:
79:d7:63:87:ad:58:44:d7:5e:af:5b:b5:4d:33:cd:36:6d:cd:
dc:a0:59:ad:ef:14:62:20:9d:a6:34:e2:5e:6e:73:c0:d7:d0:
01:d5:43:5d:33:61:ce:74:2d:5f:38:42:10:e3:be:ec:8b:4f:
d3:c7:6d:00:7e:83:dd:01:9c:75:34:b7:d8:a5:13:59:51:db:
7e:9c:a9:57:7a:d8:4c:e4:f2:22:1f:99:c8:7f:76:a2:35:ca:
b3:2d:ab:48:55:f5:02:4d:81:cb:69:ae:da:e3:8c:a4:c6:00:
99:f8:34:cc:a6:cb:d6:5c:4a:83:a1:62:53:55:49:fd:3b:68:
bf:f4:95:83:6a:50:b2:23:3c:50:bc:dc:37:5b:5e:59:3f:e9:
88:d9:63:64:1a:30:33:8b:8c:53:7f:d3:ab:27:f7:bb:46:77:
95:59:df:e4:e2:58:e9:60:08:fe:1d:a0:e7:51:3b:a2:40:85:
4b:5e:0a:4b:00:eb:22:da:a6:af:26:a3:43:ed:47:4b:81:68:
c9:24:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:36 2025 by rpki-client