Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json)
Hash identifier: eB9kcu/JECgWEjlXQLnWUO9CW6Z7cDd5yRhObfpVFyc=
Subject key identifier: 45:E3:1E:23:1E:92:DB:45:EB:0B:6C:E8:4B:32:84:41:3B:F9:5E:DC
Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Certificate serial: 114A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
Manifest number: 1141
Signing time: Fri 31 Jan 2025 17:14:52 +0000
Manifest this update: Fri 31 Jan 2025 17:14:52 +0000
Manifest next update: Fri 07 Feb 2025 17:14:52 +0000
Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: IhvFzyTx7JuiC0FyzeNtu1947wchz13Ciwn8tncLTDM=)
2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: SB9Ipu4AFekvf7xWy+dJxrZfjpqZ4b1Xx/G1XVRpODY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Validity
Not Before: Jan 31 17:14:52 2025 GMT
Not After : Feb 7 17:14:52 2025 GMT
Subject: CN=679d050c-99f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:73:6a:eb:f8:2c:ff:6a:d7:29:87:bf:3a:
71:11:0b:15:e4:20:12:fc:ba:9e:aa:0b:f1:51:40:
c9:61:af:13:1a:68:66:42:83:22:ed:8e:7b:15:7f:
d6:eb:0f:5f:e3:8c:fa:31:e9:87:f4:c4:d1:4a:e0:
21:78:65:4c:57:36:be:2e:7f:c3:8d:b6:b4:0d:0c:
11:18:08:11:cc:76:9c:30:e4:ca:04:d7:c7:72:e5:
3a:a6:c6:89:1a:05:5d:70:18:da:1e:b5:4c:a5:97:
11:ac:bf:1a:b7:13:91:d1:52:64:aa:50:f0:94:21:
ec:6d:fe:d0:42:14:ac:22:e6:d3:76:2c:90:f9:f0:
40:cc:5f:de:d0:4a:fc:f4:b3:c0:3f:b4:e3:8c:07:
01:1e:53:29:06:be:4f:b0:67:01:aa:b2:fd:7e:52:
2f:e8:91:ad:21:e5:22:73:ae:66:b8:51:1a:3e:92:
38:cb:5a:38:cf:f7:ca:26:35:87:24:fe:be:d5:0f:
4e:02:34:dc:1c:7f:9e:73:45:f6:c3:46:9b:88:e8:
ee:95:ee:23:09:22:aa:1d:79:cc:75:68:85:04:6b:
03:ac:ce:c1:b1:99:4b:33:46:ba:c0:17:f9:de:02:
78:c5:43:2c:16:f5:01:b8:a4:29:e7:b1:34:bf:2d:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:1E:23:1E:92:DB:45:EB:0B:6C:E8:4B:32:84:41:3B:F9:5E:DC
X509v3 Authority Key Identifier:
keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:12:36:dc:d5:ee:b9:f9:0c:b0:dd:b9:e8:34:c4:07:b4:dc:
aa:7a:cb:2c:96:5f:40:7d:2f:23:0b:94:c6:84:8e:d7:d8:bf:
d8:af:a4:bd:6b:04:ee:81:86:b8:00:a5:27:27:a4:7f:d6:34:
b0:5f:5a:f0:1d:bc:a4:e6:6a:cb:74:15:e6:ce:86:08:d1:ef:
24:79:b6:b7:24:da:03:38:cc:af:59:89:34:64:f7:d8:54:25:
5c:ab:b0:45:1c:b8:a3:bf:de:e5:58:86:f3:8d:44:fc:2d:fb:
0c:b6:cc:5f:27:12:ea:66:90:03:0f:0c:39:f2:9e:42:9f:e0:
23:37:ee:cd:ea:49:57:a6:81:a2:d4:21:ae:2b:95:d2:16:7b:
f3:38:6f:9b:d2:a1:76:f5:91:4e:4f:00:c2:8d:1b:b4:5e:53:
a9:83:6a:f1:f1:96:2f:0e:65:5d:25:0b:6b:d7:05:de:4f:b8:
cd:f1:bf:01:f8:cf:85:c4:d5:7e:8a:2e:b4:3d:3b:aa:dc:de:
55:eb:1e:d7:f0:68:91:d6:d0:31:b6:99:e2:e6:47:9b:43:5d:
df:8d:dd:9c:a6:75:cc:5e:a4:12:df:f9:af:96:ea:76:e8:2e:
ed:ac:4a:60:01:c5:32:06:0c:e1:8d:14:c1:55:94:8a:de:f9:
61:c2:03:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy
NDlFMDBDQTIwHhcNMjUwMTMxMTcxNDUyWhcNMjUwMjA3MTcxNDUyWjAYMRYwFAYD
VQQDEw02NzlkMDUwYy05OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4wVzauv4LP9q1ymHvzpxEQsV5CAS/LqeqgvxUUDJYa8TGmhmQoMi7Y57FX/W
6w9f44z6MemH9MTRSuAheGVMVza+Ln/Djba0DQwRGAgRzHacMOTKBNfHcuU6psaJ
GgVdcBjaHrVMpZcRrL8atxOR0VJkqlDwlCHsbf7QQhSsIubTdiyQ+fBAzF/e0Er8
9LPAP7TjjAcBHlMpBr5PsGcBqrL9flIv6JGtIeUic65muFEaPpI4y1o4z/fKJjWH
JP6+1Q9OAjTcHH+ec0X2w0abiOjule4jCSKqHXnMdWiFBGsDrM7BsZlLM0a6wBf5
3gJ4xUMsFvUBuKQp57E0vy2F4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXjHiMe
kttF6wts6EsyhEE7+V7cMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE
QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q
cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpEjbc1e65+Qyw3bnoNMQHtNyqesssll9AfS8jC5TGhI7X2L/Yr6S9
awTugYa4AKUnJ6R/1jSwX1rwHbyk5mrLdBXmzoYI0e8keba3JNoDOMyvWYk0ZPfY
VCVcq7BFHLijv97lWIbzjUT8LfsMtsxfJxLqZpADDww58p5Cn+AjN+7N6klXpoGi
1CGuK5XSFnvzOG+b0qF29ZFOTwDCjRu0XlOpg2rx8ZYvDmVdJQtr1wXeT7jN8b8B
+M+FxNV+ii60PTuq3N5V6x7X8GiR1tAxtpni5kebQ13fjd2cpnXMXqQS3/mvlup2
6C7trEpgAcUyBgzhjRTBVZSK3vlhwgM7
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:39 2025 by rpki-client