Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
File: y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json)
Hash identifier: b7/NweVATB7gP2boOGtQf51CqMPEKeWEpejxhOvUt7Q=
Subject key identifier: 23:8E:43:07:BF:26:99:0F:69:65:AC:1F:DE:6C:BA:48:CE:99:3C:E0
Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
Manifest number: B3
Signing time: Fri 31 Jan 2025 05:12:55 +0000
Manifest this update: Fri 31 Jan 2025 05:12:54 +0000
Manifest next update: Fri 07 Feb 2025 05:12:54 +0000
Files and hashes: 1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: Hl1bszru3ZCY9Lti3sfVvK3z1g1SNw3yGRTa6Wl4+Rs=)
2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: U37kWMCNqNpu+UU1MaVXsy3rFn8/VgyQ4MzDX4Ugs7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Validity
Not Before: Jan 31 05:12:54 2025 GMT
Not After : Feb 7 05:12:54 2025 GMT
Subject: CN=679c5bd6-fea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:bc:06:00:f1:46:25:7c:60:86:5d:6a:b2:
6e:90:d3:11:ca:f0:d8:84:40:fb:cd:f3:0a:ae:87:
0c:ef:dc:d9:2e:99:e9:09:ea:b4:52:1d:b5:09:48:
5a:46:75:c6:30:54:f8:fb:cc:e4:9b:3a:24:5c:d0:
15:91:08:35:51:05:6a:38:57:b2:b3:bb:e8:51:6c:
42:45:39:0e:e7:83:ee:9c:f1:02:22:cd:47:fb:82:
7e:77:5b:fb:a9:37:5c:99:03:31:74:56:c2:23:06:
bc:80:fe:42:7a:0f:d1:cd:df:f9:3e:d9:67:f0:1c:
dd:5b:4f:3b:7c:2b:72:6c:35:3b:2c:a9:4f:d5:e9:
88:c4:77:cc:c4:21:b6:22:3c:aa:aa:36:11:82:05:
67:1b:9a:37:72:c6:c2:19:ae:af:08:ab:7e:7a:d2:
29:a5:03:90:8d:90:93:78:3b:09:65:24:af:3d:51:
d7:a1:35:0c:c1:86:a3:a9:9f:c3:54:d6:50:50:1a:
46:92:24:e4:6b:c5:3e:f4:49:c2:ad:cc:b4:c9:3a:
34:03:d0:35:47:e2:64:8f:d6:5e:da:90:5d:6c:21:
7b:74:ea:7b:1b:04:c4:f0:4a:7a:4a:0c:54:fd:6a:
36:f5:35:5d:ef:8f:98:11:02:08:40:f2:e7:4d:45:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:43:07:BF:26:99:0F:69:65:AC:1F:DE:6C:BA:48:CE:99:3C:E0
X509v3 Authority Key Identifier:
keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:39:c9:91:ec:72:16:0c:db:a1:6f:08:b5:a4:b1:1c:88:f5:
0b:af:ac:26:4e:9b:ff:b7:31:3b:66:38:93:03:34:1f:b8:33:
51:07:56:fb:4b:ad:19:eb:2e:9e:3d:30:bf:41:3c:b4:41:7f:
05:e4:01:62:de:da:06:0e:f0:12:c2:e4:29:f6:56:dd:8f:33:
c6:41:17:2e:d1:d0:7e:5d:cd:21:82:4d:56:30:0c:d3:7e:5a:
a6:61:53:7f:45:25:a3:13:02:56:d4:6e:25:67:f2:63:09:f8:
bc:1f:7b:00:cd:d0:76:10:05:67:d8:d1:04:b1:d4:ac:18:d8:
fc:98:ac:3f:81:8f:bf:61:d5:6b:6f:d0:f9:c7:86:0a:43:10:
33:32:d7:af:e5:cc:41:d9:2a:18:19:f0:90:7d:1d:92:e5:4a:
38:3e:96:84:d9:04:94:ba:da:80:26:18:84:35:68:0c:fc:2b:
7b:60:88:0e:a1:af:47:18:3b:e3:94:77:d2:5e:c8:05:23:e7:
6e:d6:47:cb:e8:02:10:98:4b:ac:1d:fa:21:a9:1b:74:57:e5:
d8:e6:0f:67:0f:2e:d8:54:04:b4:43:db:36:ab:7a:66:b1:4b:
91:ed:ba:fa:ef:30:89:cd:3b:43:00:2d:d3:d9:ac:e0:7c:53:
9b:85:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:50 2025 by rpki-client