Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier: G4mXs8DA9tGVIvV3lD4QeJXQKgCfuGZwsuZGZFoBs7Q=
Subject key identifier: AC:C9:AA:87:25:33:5D:E6:AB:4E:2A:C2:79:54:2B:88:69:FB:90:12
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number: 0C
Signing time: Fri 31 Jan 2025 07:10:42 +0000
Manifest this update: Fri 31 Jan 2025 07:10:41 +0000
Manifest next update: Fri 07 Feb 2025 07:10:41 +0000
Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: TpRDpD0l5T+cHOpPjIdLjQkjEdk/cnDn2+xESKG7aTM=)
2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: RZ0QTKiTTNx8zLcCMyWL6kS10XE+JurXOmLszG1L2Po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Validity
Not Before: Jan 31 07:10:41 2025 GMT
Not After : Feb 7 07:10:41 2025 GMT
Subject: CN=679c7771-c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:2b:2b:31:ac:d1:f5:d6:36:2f:07:8f:27:
38:4d:0b:e0:05:0f:27:9c:30:94:c0:b4:84:46:9e:
0f:68:08:73:0f:41:52:c8:fb:36:55:46:05:c7:16:
9b:cb:b7:d4:02:8a:7a:37:fa:a3:6f:78:39:06:77:
60:f9:3d:50:1c:31:ca:09:1f:f6:87:23:f3:3e:e3:
36:40:b8:97:c2:3c:db:8b:4a:8e:54:17:0e:f9:fb:
bf:eb:27:ae:f5:bb:34:60:46:49:ac:9a:87:44:b5:
3f:ef:21:74:46:f8:17:2a:27:72:ff:81:2e:ae:39:
98:47:d2:22:31:68:f1:ab:b8:d7:43:19:67:48:74:
58:6f:be:07:73:a7:25:35:f6:15:ff:ad:bb:c5:07:
8a:5a:10:65:1d:83:7d:3a:91:fb:83:c6:97:f4:83:
e2:e1:eb:5b:e4:f0:21:ce:15:a7:01:50:49:5b:5f:
4f:ce:35:ee:2d:92:ed:b7:62:9d:c8:54:98:39:c5:
81:d0:1e:dd:46:19:b6:e4:6a:ce:2c:b7:d1:08:83:
f2:ea:58:d3:4a:96:6e:3c:42:3a:42:5d:4c:d4:fc:
87:d5:a8:dd:af:2d:ae:a2:2f:b0:cb:5e:f2:0a:c1:
3b:0e:61:ba:be:96:b6:f4:23:79:d3:8a:78:09:0a:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C9:AA:87:25:33:5D:E6:AB:4E:2A:C2:79:54:2B:88:69:FB:90:12
X509v3 Authority Key Identifier:
keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:af:4b:2a:81:9e:ba:e3:8f:44:05:72:6f:23:2d:56:df:62:
60:e8:1a:08:55:07:07:0d:06:a4:9e:3a:49:d9:bf:dc:9c:6f:
aa:f9:9b:03:ab:88:68:4d:17:3b:0c:30:dc:81:5f:df:00:2b:
61:89:80:99:50:37:39:4e:a2:3f:3f:12:cf:96:fa:f8:41:a8:
16:2b:12:95:61:0f:a6:77:6b:6a:f2:76:c6:f3:80:cb:f0:48:
6f:1e:26:db:2e:b8:6b:f9:52:8b:67:03:e8:9d:49:77:70:c5:
60:7f:21:35:71:91:02:73:a3:99:75:d3:3a:27:a5:94:ea:fb:
29:dc:9e:29:76:77:95:9e:f9:eb:b7:73:ad:65:4d:9c:60:a9:
d4:f6:3d:4f:b7:b0:c8:b5:08:14:e7:c9:ae:3c:e0:78:c4:3a:
00:0b:ab:80:21:80:fd:7a:f9:90:c7:19:e5:25:cc:e1:ce:9b:
55:a6:e9:08:3c:d6:c5:73:13:7b:62:7f:ae:87:15:6d:fa:3f:
56:c1:eb:7c:b1:cd:a3:ad:90:70:53:7f:5f:f9:e9:62:03:96:
f5:a6:57:b6:ca:6f:88:74:6b:2b:cd:c9:ad:30:77:06:9f:82:
84:36:cb:a8:40:3e:c2:77:59:b5:0d:5a:6a:63:e9:5d:5b:cd:
c0:88:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:22:46 2025 by rpki-client