Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier: 6kvJfvZjiHeLZ9t9KafHK82FMvSEY+Sx0Swcii4jrpQ=
Subject key identifier: DB:94:DA:1B:B4:78:74:F1:EC:16:7E:37:23:08:83:27:71:62:C6:F4
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 07:17:03 +0000
Manifest this update: Fri 31 Jan 2025 07:17:02 +0000
Manifest next update: Fri 07 Feb 2025 07:17:02 +0000
Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: kwNUlapLC7r9bYJL2YI2BMpt/r2nabUGtFQJgZwpz9k=)
2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: yUyqtxnGZsZ19lT1qHOzq8aeh4Lj7RNgVagLKAtbMTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Validity
Not Before: Jan 31 07:17:02 2025 GMT
Not After : Feb 7 07:17:02 2025 GMT
Subject: CN=679c78ee-0c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:87:a0:3b:46:98:bd:5a:57:88:af:f4:8d:
d6:9a:49:2b:b9:9a:54:ad:82:bf:ff:f6:c1:9a:f8:
bf:df:e0:29:fc:e4:b0:8a:54:f0:7a:5f:13:68:fc:
e8:59:c6:65:27:02:57:f1:4a:eb:4d:00:cd:0f:02:
b6:73:3c:09:44:14:87:4e:d5:38:3d:11:7d:94:06:
59:41:71:91:14:59:05:9c:16:7e:93:dc:21:64:1a:
47:a5:64:5d:74:43:b4:c7:81:61:14:47:84:b6:e1:
c8:7f:70:c5:a0:80:78:a8:48:53:b6:cd:87:22:cf:
90:93:17:93:e6:39:f6:76:4d:f6:6f:01:a6:ea:fd:
00:d2:5c:bf:b5:e7:6e:e0:06:c2:ca:d8:7f:5d:33:
d6:39:72:6d:60:97:a8:65:05:cc:00:ca:d3:f9:7c:
ff:33:26:51:b4:17:7e:82:c2:54:2f:0a:d2:4d:06:
60:77:a1:fe:91:3e:aa:a7:78:98:df:fa:5c:01:65:
9f:d2:43:32:dd:7e:9c:4a:2b:95:14:aa:dc:0b:07:
5d:f6:60:da:c5:0e:13:a8:42:23:d0:37:71:3a:7e:
90:9c:e1:b7:37:c6:c0:dc:ce:a6:47:de:c2:dc:24:
75:de:3a:4b:b7:80:6e:cf:d8:1e:76:19:7b:42:43:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:DA:1B:B4:78:74:F1:EC:16:7E:37:23:08:83:27:71:62:C6:F4
X509v3 Authority Key Identifier:
keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:da:bc:81:9a:58:3b:16:ec:87:39:65:52:a0:92:57:7f:
84:0a:6c:f4:4a:f8:5a:3f:d2:78:1c:a0:9c:04:2c:60:f5:41:
fb:6a:7c:74:85:6d:37:d1:4b:d5:ff:09:a8:24:b9:3e:1e:b9:
d0:0c:9b:d5:ca:bc:dd:4b:1c:bb:af:69:d5:96:1c:56:b7:63:
0e:9e:1e:77:f4:99:3b:e6:93:e6:af:cb:00:11:69:91:14:6b:
52:fc:d6:5f:04:ff:82:e0:ac:ec:27:db:e6:c5:bd:aa:46:47:
1a:2c:a4:b2:27:e0:3d:7e:f7:f7:6c:44:22:f2:fa:3c:11:6f:
dd:94:8b:da:24:03:1c:d3:09:a1:de:cc:d7:73:dd:c6:9a:cf:
2c:4d:c8:dd:49:d2:81:22:df:a3:3b:04:38:a9:8b:1a:0e:e5:
68:9e:de:ee:63:58:e9:04:cf:2b:9c:93:eb:cb:bb:ce:31:d4:
50:0b:ba:c6:11:7f:f6:2f:f5:87:96:2b:c7:65:f0:c2:5a:12:
94:f2:93:b0:e9:0a:67:67:dc:64:22:c5:06:b7:7f:69:c1:8d:
c9:5c:3c:f0:05:c2:02:2d:e2:f9:62:20:7e:54:ab:a7:da:6c:
40:cc:60:49:65:29:e7:39:7d:4f:a4:a2:ce:c9:5f:5b:6e:01:
f6:34:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:29 2025 by rpki-client