Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
File: yCFQSaXsETZftnQLghcGdiaArRc.mft (raw, json)
Hash identifier: mKWGjfS2mEUhZw+94D3kKLxKfDxbNmp2MMzYIWxMBMg=
Subject key identifier: C1:1C:18:20:6E:B2:3D:6D:B5:4C:DD:7A:1B:F9:DA:0E:18:DB:F7:5E
Authority key identifier: C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17
Certificate issuer: /CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
Manifest number: 97
Signing time: Fri 31 Jan 2025 05:27:43 +0000
Manifest this update: Fri 31 Jan 2025 05:27:42 +0000
Manifest next update: Fri 07 Feb 2025 05:27:42 +0000
Files and hashes: 1: yCFQSaXsETZftnQLghcGdiaArRc.crl (hash: /bc4p3U4byOL9Rcl8cbGVHimdiJnv7hTN8TtbV1X9p0=)
2: 264C45FAFA3F11EE8A884F09C4F9AE02.roa (hash: 1mGAGUdcHgzIXHfMP/sj7r20tyRJ1V+9II4lN7eXdqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC459/serialNumber=C8215049A5EC11365FB6740B821706762680AD17
Validity
Not Before: Jan 31 05:27:42 2025 GMT
Not After : Feb 7 05:27:42 2025 GMT
Subject: CN=679c5f4e-5558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:5a:a9:7e:ef:ef:0e:ef:f4:87:0a:99:9f:
22:52:e9:25:8c:fa:4d:fb:e9:d2:3e:00:4d:ed:57:
4b:54:04:d2:7d:6b:4a:68:1c:3b:a7:1d:53:de:58:
e8:81:1c:bd:48:c7:cc:95:a1:eb:b7:7f:14:69:33:
78:a5:b5:64:7c:9e:6c:4d:be:c1:af:3c:0c:ab:d3:
0c:48:68:c8:f7:bd:0c:7d:4b:a9:3f:c9:a0:10:ad:
d7:47:5b:fb:a4:b0:9e:29:cc:89:c7:00:b4:34:b4:
3f:bc:c3:67:28:d2:7b:15:43:10:33:b6:d8:35:8f:
f2:14:a2:15:70:f9:80:b6:83:f8:d1:83:21:2b:a5:
58:ff:77:6d:b9:2d:9d:83:e2:ed:2b:18:8e:df:57:
a2:06:2e:3c:ed:1d:5f:c0:0a:df:7f:89:08:92:3c:
8a:d5:06:b5:60:ae:f4:83:0c:74:bf:64:48:d2:aa:
19:7d:8b:46:a1:c3:2f:e8:58:77:08:96:69:c0:52:
d2:5d:55:49:b1:ce:73:eb:df:e9:66:c9:17:71:93:
14:c9:ec:5f:56:57:73:f2:68:88:e3:13:f2:4e:21:
62:ae:13:fc:6a:87:08:66:87:d0:63:27:53:17:2a:
33:e7:59:b9:28:e5:ea:18:97:37:64:f6:74:18:5e:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:18:20:6E:B2:3D:6D:B5:4C:DD:7A:1B:F9:DA:0E:18:DB:F7:5E
X509v3 Authority Key Identifier:
keyid:C8:21:50:49:A5:EC:11:36:5F:B6:74:0B:82:17:06:76:26:80:AD:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCFQSaXsETZftnQLghcGdiaArRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC459/A93507BCF6D511EEB8783C1EC4F9AE02/yCFQSaXsETZftnQLghcGdiaArRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:c7:b6:20:82:4f:df:15:9a:3d:0a:52:4e:68:0d:3f:35:
e8:4c:f1:b7:2e:ce:d4:99:01:de:46:fe:cf:c1:89:e6:31:93:
4c:40:2c:a1:6c:13:9b:e1:a1:64:74:f0:b0:5b:b4:6d:10:95:
b4:6c:47:af:4b:76:14:53:e1:76:1c:be:16:56:1c:37:49:e9:
5d:7c:5b:4b:35:8b:2b:72:7a:c8:49:2a:a1:e4:e4:34:a5:85:
f5:e5:5c:79:31:e2:54:b9:52:0c:6c:6a:6f:43:6b:3e:55:8a:
c4:7d:d0:bd:24:4b:6f:b1:a7:72:27:bb:11:ae:00:ba:56:fe:
9c:31:e3:4b:31:49:87:ce:aa:01:a0:c0:38:60:e1:ce:f1:d8:
10:a3:32:55:0d:83:29:53:ac:4a:f2:71:aa:37:30:da:0a:08:
7f:04:86:a5:17:0a:0d:e2:83:c0:06:52:f7:38:48:0b:3b:52:
b0:e8:bb:92:8e:03:d0:9e:36:31:5a:d1:fd:e1:66:a1:03:0b:
fa:d1:a8:c3:1d:24:3e:2e:c6:5d:bc:94:94:0e:5d:48:82:75:
ae:e8:63:fe:fc:08:d6:72:35:d8:6d:7a:a7:cf:31:26:4b:96:
44:14:db:6b:d1:d5:bf:4b:8a:de:ff:88:74:5f:df:38:06:0c:
2e:2c:9c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:11 2025 by rpki-client