Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft
File: y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json)
Hash identifier: m8IjY3Qnbkfc8+49wXlG4D04h9PuRomVvt5vJf8hWlE=
Subject key identifier: 58:BE:F5:1F:05:CB:46:93:0A:98:6D:3E:F5:37:41:20:EA:E1:D2:5A
Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9
Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9
Certificate serial: 0EE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft
Manifest number: 0EDC
Signing time: Fri 31 Jan 2025 17:38:09 +0000
Manifest this update: Fri 31 Jan 2025 17:38:08 +0000
Manifest next update: Fri 07 Feb 2025 17:38:08 +0000
Files and hashes: 1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: 5AiKNm1RlCVxvWqUMjBzxYmB6jhmUS9CQqxE/zPIZyI=)
2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: Ce9BbpW+u6Lf3eiA8gD0/jqkNi4bCrcEPxDFa4yC7Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3812 (0xee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9
Validity
Not Before: Jan 31 17:38:08 2025 GMT
Not After : Feb 7 17:38:08 2025 GMT
Subject: CN=679d0a80-35f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:62:ad:78:e9:32:a6:84:fd:cf:c4:22:7b:
ce:cc:7c:e3:47:fa:34:d4:af:01:06:45:30:96:15:
36:0c:a8:d5:cb:9b:02:06:79:87:14:b3:91:52:96:
db:fd:5c:af:63:05:7b:fc:7f:c1:19:08:5e:e2:73:
36:04:18:94:b7:ca:25:ad:b2:7b:7b:91:c3:9e:c8:
f2:59:b6:6d:fc:82:bb:01:db:af:a8:06:56:5c:85:
05:d3:87:ce:7a:1f:cb:b7:fd:7a:8d:c3:dd:bb:c8:
1f:f0:6f:32:78:08:20:5c:15:29:51:6b:94:e8:5f:
fc:d5:d1:33:91:64:a8:f5:17:74:b7:dd:cd:36:ed:
cf:e8:2d:1b:32:8a:3d:8d:20:c9:fc:e3:55:f4:5c:
3c:7f:5e:c0:95:02:89:47:b6:5c:19:9a:2b:80:d1:
b6:c2:f4:aa:e4:b1:54:be:d9:a0:05:c6:fb:52:8c:
c4:e6:2a:a7:62:5b:ef:50:49:0d:5e:66:f2:4d:2b:
59:de:9c:15:5c:90:f0:f6:6b:32:42:3f:29:39:24:
b3:af:26:ae:48:8c:b5:c4:8f:d7:f5:f7:f0:72:37:
11:69:e4:8e:52:b2:09:ae:77:be:6b:8e:9f:48:a2:
05:63:65:da:c2:46:13:f9:32:a9:cf:89:79:9a:52:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:F5:1F:05:CB:46:93:0A:98:6D:3E:F5:37:41:20:EA:E1:D2:5A
X509v3 Authority Key Identifier:
keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:3f:5c:59:fb:79:34:51:0f:50:ae:f0:da:65:e1:c6:56:5e:
c2:eb:88:6e:09:09:75:5e:91:0c:0b:13:fd:fb:ef:a3:57:7f:
b6:e0:f5:8d:ab:30:55:cf:8a:04:25:54:76:7f:ce:21:d9:ca:
d2:53:1e:77:0c:51:00:e7:87:86:6d:50:47:4c:4f:e6:20:bf:
19:f9:d5:67:b8:a0:fe:48:b5:70:d3:93:54:c9:8e:90:69:ea:
63:b3:b5:63:33:9e:16:1b:e4:2a:dd:89:44:2e:f3:bc:f9:18:
85:09:a2:b8:67:5e:02:34:52:58:84:33:1f:3e:0c:83:ea:60:
0e:57:98:2c:1e:2d:81:e0:c7:a9:1e:e1:f6:58:30:4b:17:ea:
c7:ec:a2:d5:89:05:11:6d:80:55:96:91:7e:6c:17:9c:6b:8b:
5d:7e:71:90:3b:b4:59:b4:8f:a3:b6:5b:cc:67:77:65:22:5c:
d1:d1:63:3a:76:d5:a5:d5:fe:d9:9f:76:63:87:d6:bf:4f:ce:
90:3d:8a:87:b0:fb:ce:cb:85:e3:e4:48:7c:13:fd:29:3c:6f:
9b:80:22:04:d8:87:2f:52:54:91:ae:1a:86:2f:9d:f0:30:9c:
8f:31:44:e4:fa:62:e1:0a:47:82:34:07:a7:84:8f:02:3b:a6:
6f:d2:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:36:14 2025 by rpki-client