Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
File: 0ypa3AVCwugXwgK-a3KB6GnReJc.mft (raw, json)
Hash identifier: fxBuRr3+PLw9sAZFkXLGw7e/Mx2qsYXsSzCX3L5rfew=
Subject key identifier: 2F:A1:85:34:F5:19:5A:F4:5A:A8:62:96:63:4E:E9:21:2E:78:39:6D
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
Manifest number: 68
Signing time: Fri 31 Jan 2025 06:00:06 +0000
Manifest this update: Fri 31 Jan 2025 06:00:06 +0000
Manifest next update: Fri 07 Feb 2025 06:00:06 +0000
Files and hashes: 1: 0ypa3AVCwugXwgK-a3KB6GnReJc.crl (hash: bXFLmUcUE4J6irrRc5lzlbmZJQDwvz0vc1mHTdvwYuc=)
2: 1818952C8D5811EFAD3A5D3BC4F9AE02.roa (hash: tKSHJqdsSmpGgJzA0ThHFbJCNwhgg/q9aM0ZWxNfpP8=)
3: 30C3ECA444B811EF8C81962AC4F9AE02.roa (hash: YRkHlOrrGzxXTEGbxmwj8yAFxeMrCPHch9CuERcM2OI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Validity
Not Before: Jan 31 06:00:06 2025 GMT
Not After : Feb 7 06:00:06 2025 GMT
Subject: CN=679c66e6-e21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:a8:7a:68:ae:62:b0:99:36:5c:8e:4f:bc:
f7:48:70:00:16:27:b6:9d:a4:e0:7a:2d:47:61:ae:
22:f8:58:a1:7e:88:22:22:b1:44:51:a0:95:b3:5a:
d7:5b:26:10:cc:7b:6c:06:35:0d:c0:26:cf:33:8c:
f3:75:23:88:0a:2a:5a:1a:fa:c6:9b:09:86:4b:76:
fe:44:3c:95:79:1d:66:b5:5f:aa:8e:7e:cb:cb:48:
cb:08:53:26:f4:e0:11:77:fa:d5:a8:dd:42:69:45:
9d:14:47:23:ad:45:1b:8f:b2:2e:27:e3:3b:e4:d4:
e4:1f:03:a3:c5:76:d4:d6:c8:97:ba:8d:11:ff:65:
8a:b7:4b:5b:b9:51:73:93:bc:bc:ee:8b:e1:ec:1a:
e8:00:5d:5f:17:45:1e:a3:56:34:b5:f3:75:13:78:
cc:08:66:09:97:31:e8:73:76:0a:ac:23:d2:95:eb:
b4:4d:10:e7:b7:98:a8:cf:4b:f3:a1:4d:5d:89:a2:
af:08:eb:a1:2b:91:6e:d9:ea:87:a2:e7:fb:6a:cc:
96:d6:05:83:f8:88:1e:20:17:d6:82:ce:25:b5:dc:
74:ce:9e:d4:a0:f7:96:ee:8f:8d:15:77:02:0b:13:
da:37:03:72:50:d5:99:6b:34:68:cc:16:fc:46:68:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:85:34:F5:19:5A:F4:5A:A8:62:96:63:4E:E9:21:2E:78:39:6D
X509v3 Authority Key Identifier:
keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:68:13:98:25:02:b6:a4:6d:48:ac:64:58:b4:9a:79:48:d1:
a7:44:86:8c:3b:a9:a4:5c:94:b2:8b:92:19:12:f6:7e:bd:3f:
9c:04:8f:e3:df:b7:ea:7f:4e:a5:5d:74:e2:9b:39:b9:4d:ad:
d0:35:64:d1:3e:39:ab:c5:10:76:c6:63:92:3b:f4:af:77:04:
0c:60:d0:61:36:cb:1c:80:e0:91:48:dc:65:c1:0b:a0:5b:a5:
7d:4d:a4:e8:5a:2f:06:50:bc:1b:23:2c:2b:65:87:94:92:94:
27:02:6c:4f:0d:d7:b6:c3:5e:46:c4:42:b5:8f:46:cb:e5:31:
64:93:a2:9e:96:a2:e5:4d:9f:80:22:fb:cf:22:a2:c5:59:98:
cf:d3:80:da:4f:5e:97:54:8f:f6:fd:ef:95:78:47:b4:54:79:
c0:6b:e4:d4:e3:d1:7e:16:bd:80:a9:85:c1:3c:88:d6:29:dc:
31:f1:8d:e4:cc:e5:a4:02:0a:ab:8e:99:f6:c2:16:82:1c:af:
7c:f0:7e:32:cc:26:e7:b1:6c:e5:4f:28:1c:c1:2d:22:c9:13:
97:6e:4c:2f:c8:aa:e2:07:7d:30:a6:cc:5a:7d:6c:b7:32:9a:
68:e2:9b:c2:e5:9a:08:be:06:43:45:78:37:42:b0:dc:63:91:
6e:52:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:26 2025 by rpki-client