Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
File: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json)
Hash identifier: +zwLH+SN7DmNOsHvmXEPORDk2pflbudCrmm7T9nxMFI=
Subject key identifier: 88:7F:5C:BE:02:4F:63:16:14:BF:0A:39:8F:C3:D6:BB:B3:FB:4A:39
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial: 0BED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
Manifest number: 0BE6
Signing time: Fri 31 Jan 2025 18:35:28 +0000
Manifest this update: Fri 31 Jan 2025 18:35:28 +0000
Manifest next update: Fri 07 Feb 2025 18:35:28 +0000
Files and hashes: 1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: gL/7s2LyuEOaA2lpU+vht64NZpnwUuPuZJ9h8djdbc0=)
2: 69308C200A9611EABF034172C4F9AE02.roa (hash: 7tTtY2UG5+baXyuNQBfwIK8ila3VnuaOeuIjzJ0fpoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Validity
Not Before: Jan 31 18:35:28 2025 GMT
Not After : Feb 7 18:35:28 2025 GMT
Subject: CN=679d17f0-c63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:f7:a4:f7:d0:b6:43:a6:4b:c3:f8:c0:33:
40:b8:dc:53:21:7e:c8:80:d1:8d:5f:4b:2a:77:00:
6a:b6:03:84:76:bb:23:05:91:75:32:7c:63:45:97:
da:7c:ca:47:f7:ea:71:16:8c:35:e8:38:54:7b:0b:
99:3e:24:d4:cb:fe:1d:bc:d3:1d:a2:1e:82:a7:4e:
1a:ea:fb:40:97:ec:94:1f:fb:ce:6e:5c:67:8c:50:
01:ef:53:ba:47:43:90:93:6e:57:12:14:da:fe:4e:
1f:7d:62:86:39:2c:5a:c3:64:b4:34:c1:30:9c:ae:
74:1c:ce:dc:3a:38:22:f4:e6:28:38:de:8b:d6:91:
2d:67:f4:b3:79:0f:ad:5e:d0:e2:2a:5d:b1:84:3e:
00:1b:78:29:41:b2:d8:fb:05:f2:60:70:5d:9f:7f:
86:22:fe:af:d2:68:f2:54:19:51:55:9c:6d:88:bd:
1b:85:c8:60:d9:51:f3:c5:c5:a6:c3:85:6e:bd:a3:
c6:12:46:51:2a:2e:22:d6:41:4b:57:b3:aa:53:07:
d8:04:e5:8e:e2:74:51:d9:74:0c:d4:6f:36:6b:25:
81:74:d0:57:96:ba:09:3f:4e:ba:00:57:9f:3e:e9:
3a:c4:56:9a:37:cf:2e:15:10:4b:9c:17:a5:2f:64:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:5C:BE:02:4F:63:16:14:BF:0A:39:8F:C3:D6:BB:B3:FB:4A:39
X509v3 Authority Key Identifier:
keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:95:24:3a:ce:36:a0:a9:df:b1:05:1d:01:01:5b:bc:76:b9:
a8:9d:eb:f1:4f:00:dd:4f:9f:88:80:e9:61:34:9a:50:09:d0:
a4:d4:1b:db:0a:59:ed:b1:e2:52:e6:4f:41:9a:94:50:e7:60:
aa:f1:fd:c9:a8:04:c2:30:aa:ce:0d:63:99:d8:c6:5b:33:cf:
45:83:f5:0c:6b:9c:4a:d1:05:e1:0f:cf:2f:91:88:0e:85:e9:
a2:b5:bd:c1:69:09:af:5e:01:6c:09:d4:c0:e9:fa:82:79:2b:
6f:42:2c:b0:7e:d8:63:dd:54:1b:10:07:ab:23:0e:1f:71:ce:
82:86:3f:c3:de:fd:e1:71:e5:b0:bf:d3:8e:7a:0a:32:3b:a1:
c7:ea:5d:58:06:f1:86:15:1b:14:69:9e:74:76:d1:35:82:0b:
12:49:8a:72:5a:05:80:fc:a7:75:3f:bb:54:ca:e6:a3:54:f6:
4a:72:fa:4b:25:e0:57:0f:70:76:88:d2:ee:ba:ac:9c:be:56:
c7:1d:0b:03:ec:13:34:dc:c0:b3:58:3e:5f:ed:47:cb:44:a0:
a3:3f:ee:07:fa:13:d4:63:7e:93:27:1c:80:c6:d0:e9:53:4e:
81:b7:d3:c3:1c:fa:a2:13:f4:45:f6:d3:8d:f2:7c:b3:7b:01:
d4:07:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:42:41 2025 by rpki-client