Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier: HTyS/nZO9M5cgkQBUEhk69L2lz2b9fTpfFmPytUSaOM=
Subject key identifier: 9C:8D:EA:51:CC:DA:26:61:5D:66:84:21:40:5D:ED:99:60:D5:16:58
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 02:07:58 +0000
Manifest this update: Fri 31 Jan 2025 02:07:58 +0000
Manifest next update: Fri 07 Feb 2025 02:07:58 +0000
Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: SHAV62YePEBaXDlMW2F8jFg/GrZllL534NDcuCGyXn4=)
2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: c791advS7FJxJQliNVREZFMZhHtkZDtdWCzXey8hKmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Validity
Not Before: Jan 31 02:07:58 2025 GMT
Not After : Feb 7 02:07:58 2025 GMT
Subject: CN=679c307e-d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:d0:50:82:94:6a:8b:bc:d1:93:7b:09:d5:
d6:45:ff:de:68:ef:b2:4e:0c:86:59:13:4a:92:e5:
6a:fe:a1:ce:c3:cf:0b:c1:8f:a6:55:03:e5:d9:90:
1c:bc:7a:ee:77:1b:18:19:29:39:f7:bc:2c:19:40:
0c:51:54:92:40:1e:b4:c8:78:b7:d0:56:bb:64:90:
19:65:91:47:d0:43:0b:d3:4f:f0:93:25:37:eb:72:
f9:bb:f8:16:8e:32:24:83:ed:4d:26:08:13:0e:00:
f9:a6:5c:17:11:71:08:c2:ab:13:97:69:b8:c3:38:
4a:fc:25:9b:68:2e:2c:22:4f:24:ce:50:3f:3d:65:
72:bf:5f:79:71:af:a5:4d:6e:37:bd:a6:b2:59:1f:
25:cf:c0:56:f2:60:6c:8b:82:46:08:88:1e:25:aa:
64:4d:63:b3:ad:64:44:f9:bc:a0:d6:c9:59:6b:2d:
02:a0:24:71:54:94:ab:fd:8f:87:fa:37:71:46:9a:
ed:76:ed:c7:36:60:2c:f8:be:ba:7d:9e:36:6e:c3:
53:dc:ce:35:26:ad:f5:89:75:e1:a0:9e:04:26:b2:
9d:a8:98:ef:e5:e9:5d:ee:34:0e:a8:87:2f:81:6e:
1e:b1:75:d8:b9:67:a6:3b:fc:84:7b:65:2b:04:f3:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:EA:51:CC:DA:26:61:5D:66:84:21:40:5D:ED:99:60:D5:16:58
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:65:f1:80:c8:63:05:8c:6d:f8:b9:18:61:13:bb:4c:c5:3a:
4f:7b:79:5f:14:2d:76:cc:91:15:40:91:21:c3:22:75:55:ce:
c6:11:a5:09:57:c4:20:1c:bc:31:dc:68:1a:f6:26:19:01:7b:
00:ea:d0:72:b6:c9:81:7a:88:07:4f:2b:23:98:59:bc:ff:31:
3e:98:08:04:d8:82:f8:82:8a:af:e7:ea:bd:dd:f3:b4:e2:4a:
dd:c4:4a:20:03:4f:50:bc:5e:83:c3:de:b6:b0:57:e0:a7:67:
49:47:72:08:78:4c:8b:a2:3c:69:a6:d6:cb:92:ba:83:9e:ec:
61:5b:ef:5c:ff:4f:3e:f2:97:03:0a:ef:e4:77:2f:65:38:ba:
71:c7:8d:3f:4f:f6:3c:5f:9f:9e:a5:19:56:09:ef:71:44:9c:
fa:7d:22:1a:d1:a1:40:7a:5b:03:95:28:60:37:17:21:dd:8a:
27:0e:4d:ca:0b:4a:1f:b4:3a:9a:38:b3:e6:09:11:ce:c4:33:
bb:26:d5:0d:a6:cf:40:42:a0:ff:33:e6:83:ef:52:cc:ef:51:
91:4e:5b:98:d9:42:92:84:2a:13:f6:17:bb:b9:3b:4b:0a:86:
e8:ea:fe:70:b6:c0:10:61:aa:d5:bc:d7:cd:ef:07:8f:84:06:
c1:c3:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:56 2025 by rpki-client