Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File: yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier: K7AlHueJe/qj9zfd0xw98S1oOkJqYaKwfngRrgYge1w=
Subject key identifier: B0:2A:05:3D:47:38:D6:27:76:2D:F9:3A:1A:3C:9D:3B:77:5E:36:5E
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer: /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial: 0683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number: 15A6
Signing time: Fri 31 Jan 2025 17:34:37 +0000
Manifest this update: Fri 31 Jan 2025 17:34:37 +0000
Manifest next update: Fri 07 Feb 2025 17:34:37 +0000
Files and hashes: 1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: VYPpb8v6InWXrgEjt0F0VNfNynnIKEN4t9k1FnFYIMM=)
2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 1r2d/Ak19T6Kjigl8OFNB0MlpnTTA5brSJxtx4WES4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Validity
Not Before: Jan 31 17:34:37 2025 GMT
Not After : Feb 7 17:34:37 2025 GMT
Subject: CN=679d09ad-bc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:c7:15:da:51:6c:ed:57:1d:49:3f:66:45:
ae:88:c2:aa:28:83:c9:25:73:a3:4f:94:a5:ac:a5:
df:bd:41:91:6c:7d:2e:08:33:05:dd:7a:3e:fd:6d:
77:94:64:62:50:91:b7:7d:22:73:7c:ab:3a:9a:d5:
ff:78:82:3b:74:c3:b9:ea:e1:3a:5c:f6:02:99:e3:
99:9c:80:af:63:33:e1:15:25:07:b6:9f:97:ac:20:
36:99:ab:54:06:7e:72:e8:61:b5:20:1a:13:07:ca:
de:6e:3f:da:e6:10:e6:15:b8:49:63:41:84:db:aa:
e0:36:2c:35:19:6a:59:ff:d1:48:55:45:5b:11:70:
e4:e3:17:b8:10:f6:ec:7d:f3:8f:b3:f1:f8:be:b7:
8f:b8:ae:59:1b:c5:62:17:c7:3a:d8:9e:54:37:e2:
94:0a:fc:f7:c5:bb:d6:3e:db:ea:97:4d:a0:ef:bd:
c0:ff:5d:5d:5b:04:69:80:52:64:96:64:2b:e5:9b:
b8:bc:a9:72:6b:c9:fe:14:ea:59:eb:9b:60:a5:b6:
bb:df:08:98:c9:f1:8e:62:d2:3b:8f:97:32:2a:cf:
2c:7f:40:78:d8:73:52:74:b6:7b:f6:ae:48:9d:d3:
52:b4:c5:4d:48:d0:17:0a:e5:38:c9:9c:fd:eb:98:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:05:3D:47:38:D6:27:76:2D:F9:3A:1A:3C:9D:3B:77:5E:36:5E
X509v3 Authority Key Identifier:
keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c5:e4:ea:82:da:c5:7f:94:37:3d:1e:c3:ab:d5:0d:31:af:
8f:b1:eb:a0:58:23:ac:e9:c4:d5:c0:64:f3:d5:28:d4:e9:02:
03:24:c7:42:d3:64:21:35:52:17:98:05:4a:c5:39:f8:30:12:
7a:eb:7d:be:95:10:3f:62:7c:65:ab:4b:48:49:d7:95:02:03:
e4:cf:f6:6e:d5:a3:b6:51:40:b3:51:2e:58:96:54:b6:5d:eb:
44:2a:bd:0d:f5:17:73:08:ee:27:72:49:bf:d8:55:a7:ac:d1:
e0:7f:6b:a7:ba:88:13:c1:3e:53:49:ae:02:7a:12:a6:63:ec:
a6:ba:88:40:fd:b4:8b:d8:de:06:93:8b:ff:d2:46:05:47:9d:
2c:96:2f:2c:e1:00:0b:67:2e:ac:b3:27:fe:81:b7:26:55:87:
fa:45:77:c2:bf:cd:f5:f5:9b:9a:da:c5:00:07:73:e5:29:c1:
e2:21:1d:cb:c8:dd:2c:9e:2f:6d:01:33:02:d1:53:e6:a9:08:
5e:fa:d5:07:04:64:ab:d5:fe:d1:32:17:ad:77:97:d0:28:b2:
33:57:54:a6:2d:c8:a0:e9:8b:60:b6:79:aa:ee:75:ac:09:39:
9a:1b:c2:7b:58:24:fd:88:e0:2d:76:d4:52:3b:22:98:d9:6e:
b5:f0:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:33 2025 by rpki-client