Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier: DT5CXm6SMXDBk24JzacPGsNhsHLd5JdDtyVgVlNAxzg=
Subject key identifier: 43:92:33:69:EC:9D:F3:B4:03:40:07:3B:BE:DD:32:F5:DC:C6:F0:67
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 04E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number: 04E2
Signing time: Thu 30 Jan 2025 23:48:00 +0000
Manifest this update: Thu 30 Jan 2025 23:48:00 +0000
Manifest next update: Thu 06 Feb 2025 23:48:00 +0000
Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: hShzCzaw0bHVIaJQ45izAYwDtoRchak6yO+YcYiG7sQ=)
2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: 2CyIyNp44NxNr2SQi/2YfeBSUBR+fj5EogTGvnYWavo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1255 (0x4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Jan 30 23:48:00 2025 GMT
Not After : Feb 6 23:48:00 2025 GMT
Subject: CN=679c0fb0-c79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:91:53:db:b2:ba:8b:fa:b9:2a:13:18:1c:
d8:40:fa:3f:ec:c6:8b:4a:10:f8:60:cf:27:c0:77:
5a:c9:ab:b4:70:9d:c1:42:57:11:83:fd:9e:08:5a:
90:0f:42:b6:1b:94:c0:22:2e:83:a4:e9:07:4e:b1:
d8:ce:74:d9:98:0e:1b:1c:60:05:fe:42:db:4c:77:
f8:7d:56:5c:43:98:cb:94:ef:1e:3b:a3:8d:ab:95:
e4:5c:d6:a7:8a:70:3a:60:1a:f7:58:ee:0c:9f:9c:
b6:f5:ec:b2:d5:7f:1a:3e:59:3e:d4:0d:2e:4f:15:
07:c3:b2:93:31:01:8d:6c:ea:8f:55:04:e2:a6:ba:
fe:ca:f2:4d:04:23:a3:0c:b0:30:9c:1f:38:c8:e8:
03:52:15:4d:bf:41:4d:92:55:e9:a6:72:10:9e:e2:
c7:af:e6:dc:c7:39:02:6d:26:c7:d5:6b:89:31:e9:
6b:10:33:9d:6d:4b:93:7d:bc:bb:06:8e:3c:91:61:
b5:49:12:af:91:a8:7c:f6:d1:74:4f:2c:ad:d1:09:
61:35:c6:03:e2:29:43:dc:fc:45:47:50:f5:be:af:
67:20:2c:44:8d:89:b7:d3:34:a8:06:be:24:22:01:
0b:a1:91:bb:da:15:4c:0f:86:32:9f:d5:9b:1d:b4:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:33:69:EC:9D:F3:B4:03:40:07:3B:BE:DD:32:F5:DC:C6:F0:67
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:1a:1e:ea:83:b6:cc:bc:6d:cf:1c:69:d4:ec:e9:1e:b4:
a1:9d:f6:59:1a:6f:1e:46:95:c8:c7:19:90:f7:4e:47:49:a4:
bb:36:55:a1:cc:9f:1e:b6:53:e5:40:f9:0c:75:c8:b3:89:70:
79:ab:59:98:f5:f8:69:f2:65:06:d3:c3:ff:72:dd:4c:a4:99:
bf:09:07:c1:d7:bf:0d:70:31:73:a8:0e:68:48:ce:ca:9e:c6:
cc:18:75:f7:21:d8:b8:64:7b:e0:0b:04:be:df:fe:2d:03:64:
dd:ae:72:20:64:35:83:f3:87:55:5a:08:e3:d8:8a:15:fd:11:
cc:3e:75:9d:13:fa:15:b4:33:bc:9a:0e:dc:da:0c:68:b1:c3:
7d:b4:f0:b1:a4:4b:70:a3:65:f1:88:64:1e:68:74:95:a6:52:
c9:f9:ab:3b:40:51:92:74:fc:83:58:1d:d3:9c:6b:10:ab:83:
53:22:70:6e:8f:e2:c7:e5:ac:63:52:3b:10:e5:c4:a7:b6:4c:
0a:31:88:b5:7f:26:3e:dc:5e:4b:b8:15:99:7d:97:0c:c0:5c:
c8:d1:d4:5b:1c:47:99:b4:40:45:8f:6b:0c:7e:51:c0:7c:bd:
cb:5f:35:83:6e:5d:05:6c:9d:91:d5:03:60:9c:ea:d2:23:39:
7f:e8:d5:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD
MzlEQUIzMUQwHhcNMjUwMTMwMjM0ODAwWhcNMjUwMjA2MjM0ODAwWjAYMRYwFAYD
VQQDEw02NzljMGZiMC1jNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveiRU9uyuov6uSoTGBzYQPo/7MaLShD4YM8nwHdayau0cJ3BQlcRg/2eCFqQ
D0K2G5TAIi6DpOkHTrHYznTZmA4bHGAF/kLbTHf4fVZcQ5jLlO8eO6ONq5XkXNan
inA6YBr3WO4Mn5y29eyy1X8aPlk+1A0uTxUHw7KTMQGNbOqPVQTiprr+yvJNBCOj
DLAwnB84yOgDUhVNv0FNklXppnIQnuLHr+bcxzkCbSbH1WuJMelrEDOdbUuTfby7
Bo48kWG1SRKvkah89tF0Tyyt0QlhNcYD4ilD3PxFR1D1vq9nICxEjYm30zSoBr4k
IgELoZG72hVMD4Yyn9WbHbQrAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOSM2ns
nfO0A0AHO77dMvXcxvBnMB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx
MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTM1Mi9DOEUyMkU4QTAxMTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2
dGwwNDhWc3FyazNEbmFzeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOoRoe6oO2zLxtzxxp1OzpHrShnfZZGm8eRpXIxxmQ905HSaS7NlWh
zJ8etlPlQPkMdciziXB5q1mY9fhp8mUG08P/ct1MpJm/CQfB178NcDFzqA5oSM7K
nsbMGHX3Idi4ZHvgCwS+3/4tA2TdrnIgZDWD84dVWgjj2IoV/RHMPnWdE/oVtDO8
mg7c2gxoscN9tPCxpEtwo2XxiGQeaHSVplLJ+as7QFGSdPyDWB3TnGsQq4NTInBu
j+LH5axjUjsQ5cSntkwKMYi1fyY+3F5LuBWZfZcMwFzI0dRbHEeZtEBFj2sMflHA
fL3LXzWDbl0FbJ2R1QNgnOrSIzl/6NXO
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:03 2025 by rpki-client