Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
File: YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft (raw, json)
Hash identifier: yssnzLBBkcYC87fG7uWjagcy9SUsORf9p0hDTIKmt30=
Subject key identifier: D4:F5:B3:12:DE:A7:C7:CF:18:A1:3C:C8:25:A5:90:FE:D2:5A:57:7F
Authority key identifier: 62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
Certificate issuer: /CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
Manifest number: 62
Signing time: Fri 31 Jan 2025 06:04:57 +0000
Manifest this update: Fri 31 Jan 2025 06:04:56 +0000
Manifest next update: Fri 07 Feb 2025 06:04:56 +0000
Files and hashes: 1: YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl (hash: gVkpPa39g4AgTv1qJfZ/hoS6pPl7vNpowOFQlTE6pp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1F9/serialNumber=62CA9C126E14FFBBBC3D6407105EBE151B99605B
Validity
Not Before: Jan 31 06:04:56 2025 GMT
Not After : Feb 7 06:04:56 2025 GMT
Subject: CN=679c6809-f4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:f0:db:dc:0e:37:80:b7:e2:b5:93:42:a2:
d0:4c:ee:da:cc:d9:c9:ee:51:9c:02:58:47:fc:aa:
9d:52:53:15:16:e8:86:cc:90:e8:51:e8:07:82:90:
d8:66:87:44:04:ad:b5:69:d5:cc:b6:3e:8c:6d:69:
a7:16:f2:0e:42:53:3a:a7:8f:6f:44:36:e8:06:4d:
91:02:bc:eb:83:16:d1:82:b9:b2:e2:df:5e:b9:28:
f9:cf:c4:80:3f:31:b9:fb:63:4c:3a:3a:31:00:f7:
84:0b:b2:2b:4d:ca:ce:0e:b2:78:8a:af:9e:aa:76:
f8:5c:5a:18:54:9a:d9:9a:6b:5c:01:b8:c4:8a:10:
2d:37:82:60:cb:f4:d9:48:c7:42:7b:3f:af:41:66:
21:33:55:dd:0a:b1:00:db:11:bc:40:51:59:c8:c7:
59:48:4d:b8:9a:ca:f4:59:32:35:09:1e:9c:33:20:
08:11:21:eb:ec:90:07:32:fc:8f:b4:27:11:e3:39:
c1:60:a3:e8:e2:42:5c:a2:97:b6:14:f7:1e:4c:eb:
bc:d4:84:1b:f9:3c:c3:4b:8a:08:94:d3:53:cb:87:
ef:20:d4:9c:3d:72:9c:1b:99:f0:13:dc:0e:c9:65:
3f:57:6a:13:86:08:3b:58:29:65:ca:a9:6b:0b:57:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:B3:12:DE:A7:C7:CF:18:A1:3C:C8:25:A5:90:FE:D2:5A:57:7F
X509v3 Authority Key Identifier:
keyid:62:CA:9C:12:6E:14:FF:BB:BC:3D:64:07:10:5E:BE:15:1B:99:60:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsqcEm4U_7u8PWQHEF6-FRuZYFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/484F26E64ACF11EFB8218E15C4F9AE02/YsqcEm4U_7u8PWQHEF6-FRuZYFs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:4a:1d:b2:96:6b:a9:c1:33:78:24:d9:b3:d1:17:e2:9f:16:
16:35:23:1c:a7:c4:b1:a1:e5:df:a1:62:ab:3b:c8:39:2c:af:
51:1d:9b:77:eb:eb:7a:7a:a1:0e:8e:d6:b4:36:d6:4a:ed:d9:
a9:43:08:6a:82:14:00:91:5f:98:b1:9c:50:a9:20:55:6b:8f:
24:27:31:dd:34:3a:cd:33:41:04:08:e7:b9:9a:03:ad:32:c8:
ce:d9:df:23:a3:35:c9:40:73:40:e0:87:e7:b1:e8:53:54:0c:
0c:a9:64:92:7d:2f:5f:cd:bf:62:49:5d:99:ca:57:0e:da:4b:
7c:83:8a:d0:fe:50:6f:b9:a1:cc:6b:79:cf:6a:b9:3c:e8:60:
81:cb:d2:2b:84:3a:4b:0a:6f:83:78:25:33:a3:80:e7:46:61:
29:b9:a1:c9:96:1f:0f:ba:6f:67:2e:c8:a5:b3:4e:73:cc:e7:
c5:71:65:cb:2d:d5:eb:f1:dd:79:0b:22:fc:9c:dd:f2:12:f4:
55:f5:79:5d:ac:d7:fd:5a:93:84:89:8e:78:9c:a4:7b:2a:47:
90:f4:b6:67:2e:0a:d8:9b:93:78:ab:d1:38:65:78:1e:70:ee:
4f:73:fe:df:54:af:93:07:56:67:e3:ef:c1:b0:75:c0:ec:0f:
5c:67:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:54:41 2025 by rpki-client