Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier: fcqM1QsT2mnrASlpiDuytjroX6sh3HuO7G+RtQI0poU=
Subject key identifier: A7:03:30:CF:7F:27:58:81:CD:74:03:B1:FB:F4:FB:62:22:45:64:BA
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial: 0727
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number: 0719
Signing time: Thu 30 Jan 2025 21:46:21 +0000
Manifest this update: Thu 30 Jan 2025 21:46:20 +0000
Manifest next update: Thu 06 Feb 2025 21:46:20 +0000
Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: FKpmjRIzYYt2zaB2w8sKZO+c+84IHps75zyWJZ/Enfw=)
2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: FIzrdEMOv1fIZmcPJP3FzubQvP1+SNQPr2X+yXFsJHc=)
3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: jLETSgP+BBiNgHQWnELyI/5SSWT6c6N4U6vnmqcVGjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831 (0x727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Validity
Not Before: Jan 30 21:46:20 2025 GMT
Not After : Feb 6 21:46:20 2025 GMT
Subject: CN=679bf32d-ef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:6d:7b:c6:d1:1c:94:d6:fd:88:0d:62:50:
e0:cd:f0:58:2c:cd:4c:96:e2:89:37:44:86:5e:7d:
33:8a:8a:06:69:3d:21:52:87:56:0e:a7:a1:23:32:
62:43:1a:62:e4:97:92:34:fd:5e:ac:4b:28:78:4f:
e0:40:c0:1e:d3:6a:30:99:3c:97:e6:69:c7:9c:ab:
0e:2b:a1:c9:cf:da:1e:d2:af:82:d4:f2:22:14:8e:
66:7d:c3:7f:49:4f:42:29:40:88:51:7e:e2:ba:80:
30:f5:fd:0a:59:7c:a2:b8:36:b9:68:9c:c9:d0:a0:
61:b0:ca:54:12:89:a5:fc:cc:21:d0:45:75:bf:75:
65:29:ae:b7:c0:6c:82:e8:77:90:97:79:88:11:96:
d8:81:29:5d:09:52:89:67:7d:56:f8:d2:f7:50:28:
48:c5:0c:d6:f1:e1:3d:52:78:c7:d5:fe:f0:69:96:
f5:52:76:3f:54:ca:91:0a:34:e4:3d:36:fa:90:99:
97:be:3f:46:17:0a:8f:64:43:68:26:b9:69:c6:9e:
09:e1:3e:93:ca:7c:f3:fc:87:ef:40:2f:2d:17:a5:
ea:46:36:06:ea:2c:96:a1:de:d2:7d:74:d1:a6:0b:
cb:4e:fb:08:11:2f:34:8f:bc:7a:e8:15:1f:ea:bb:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:03:30:CF:7F:27:58:81:CD:74:03:B1:FB:F4:FB:62:22:45:64:BA
X509v3 Authority Key Identifier:
keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:b7:3a:16:54:f4:88:7a:6a:a1:9b:d6:1e:df:b3:6b:a3:33:
f9:1c:82:4e:3d:7d:71:76:3e:6c:72:a9:0b:12:f2:34:9a:1f:
95:02:da:84:0b:81:a9:18:e9:31:17:90:2e:b6:07:13:50:f9:
31:79:f1:37:fc:87:33:e0:92:9f:c7:41:8d:71:0e:b1:e6:e0:
7b:b0:92:6d:9c:97:69:7f:f4:5d:00:23:7c:8c:e7:af:4f:4a:
59:ed:9e:90:1b:93:6f:92:63:4b:a5:b4:f7:1c:a3:93:0c:68:
dd:a1:96:3e:e7:cd:ff:be:02:a8:fc:69:90:74:f4:86:12:49:
bc:da:1d:9a:5f:2d:5d:08:db:5a:33:c7:76:3a:71:47:a3:ca:
88:d4:3d:b4:d7:08:dc:75:e3:1b:60:b3:35:2e:e6:d0:4d:a4:
e2:ea:59:77:6c:2c:fa:30:1a:fc:27:bf:8d:c8:3a:42:b5:88:
28:a5:90:12:43:c7:96:4c:54:42:16:c5:74:33:a6:55:09:71:
0d:46:dd:eb:73:c3:e7:a2:1d:a1:66:bc:d2:69:90:40:f5:95:
15:a1:f5:39:6d:ac:c8:7d:3a:50:6e:36:67:53:54:0a:55:17:
33:28:63:36:a9:22:23:ad:1a:f9:5e:51:42:4f:86:8d:79:47:
0a:d1:00:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx
RjY0QzdCQUYwHhcNMjUwMTMwMjE0NjIwWhcNMjUwMjA2MjE0NjIwWjAYMRYwFAYD
VQQDEw02NzliZjMyZC1lZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQBte8bRHJTW/YgNYlDgzfBYLM1MluKJN0SGXn0ziooGaT0hUodWDqehIzJi
Qxpi5JeSNP1erEsoeE/gQMAe02owmTyX5mnHnKsOK6HJz9oe0q+C1PIiFI5mfcN/
SU9CKUCIUX7iuoAw9f0KWXyiuDa5aJzJ0KBhsMpUEoml/Mwh0EV1v3VlKa63wGyC
6HeQl3mIEZbYgSldCVKJZ31W+NL3UChIxQzW8eE9UnjH1f7waZb1UnY/VMqRCjTk
PTb6kJmXvj9GFwqPZENoJrlpxp4J4T6Tynzz/IfvQC8tF6XqRjYG6iyWod7SfXTR
pgvLTvsIES80j7x66BUf6rurvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcDMM9/
J1iBzXQDsfv0+2IiRWS6MB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI
OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARtzoWVPSIemqhm9Ye37NrozP5HIJOPX1xdj5scqkLEvI0mh+VAtqE
C4GpGOkxF5AutgcTUPkxefE3/Icz4JKfx0GNcQ6x5uB7sJJtnJdpf/RdACN8jOev
T0pZ7Z6QG5NvkmNLpbT3HKOTDGjdoZY+583/vgKo/GmQdPSGEkm82h2aXy1dCNta
M8d2OnFHo8qI1D201wjcdeMbYLM1LubQTaTi6ll3bCz6MBr8J7+NyDpCtYgopZAS
Q8eWTFRCFsV0M6ZVCXENRt3rc8Pnoh2hZrzSaZBA9ZUVofU5bazIfTpQbjZnU1QK
VRczKGM2qSIjrRr5XlFCT4aNeUcK0QBW
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:50 2025 by rpki-client