Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier: EI8brl2vApO0/tDcYj8fYDvPDWrVLwcgxND6hkbDplk=
Subject key identifier: FA:1E:7D:CB:A2:14:7C:5A:C5:1B:BE:F1:29:53:5A:2F:22:E7:42:30
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial: 0C37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number: 0C29
Signing time: Fri 31 Jan 2025 18:21:10 +0000
Manifest this update: Fri 31 Jan 2025 18:21:10 +0000
Manifest next update: Fri 07 Feb 2025 18:21:10 +0000
Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: c1ELnmBzL0NHGF22E3raiHOnsc7J84OxfudiQXCfQ04=)
2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: VMJPLLhedlHAk4tQ5HhxEAJ5POLeqMTVPXSXcNzn0f0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3127 (0xc37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Validity
Not Before: Jan 31 18:21:10 2025 GMT
Not After : Feb 7 18:21:10 2025 GMT
Subject: CN=679d1496-dc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:d5:a8:64:5c:10:2a:fd:27:c4:d5:0f:9d:
36:70:73:53:87:4d:4a:5d:8f:71:9a:52:5b:84:da:
cf:8d:a9:8f:b8:97:f5:05:63:ff:84:5b:31:3d:64:
73:f5:c3:e1:e3:4f:67:c1:9b:b0:59:ad:6a:d7:a7:
f9:d4:66:0b:fd:d4:12:ea:dd:5b:c6:35:8a:8f:fa:
87:81:e5:a4:c8:33:c4:45:de:f5:bb:51:50:6d:67:
ae:31:87:98:1b:0f:a5:95:9d:a5:fa:61:b5:cb:59:
61:66:4b:5c:32:31:24:b8:b5:81:00:ec:ab:29:d4:
5c:2f:22:4b:3f:a8:f7:a3:b7:d1:43:d7:34:54:c3:
c9:d2:73:2a:23:d3:03:bf:94:43:ab:55:65:a5:ac:
b0:85:10:56:b3:ab:2f:cb:c3:2f:b5:7f:bd:66:f1:
c4:9f:ea:d8:63:2c:b6:aa:79:f2:8d:a2:04:ac:89:
05:86:83:a3:6b:07:07:68:62:7e:79:4f:49:19:e3:
71:21:eb:36:ce:c6:bd:92:04:cd:c5:f0:ac:a4:7c:
11:9c:ce:75:ca:00:f6:50:df:41:f3:9c:32:c3:8e:
5f:3e:2f:e9:f5:0b:d6:d2:09:6d:fa:8f:85:ff:fc:
c2:41:86:f7:ae:48:ef:cb:c7:e6:3c:97:77:eb:d9:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:7D:CB:A2:14:7C:5A:C5:1B:BE:F1:29:53:5A:2F:22:E7:42:30
X509v3 Authority Key Identifier:
keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f5:24:7b:93:90:f8:1d:b9:3f:61:66:5e:d7:be:9d:d8:a3:
d5:bf:51:0a:41:1f:7f:8e:30:74:4a:84:d3:3c:ec:08:1e:94:
a6:24:c5:9f:00:0d:79:15:a0:12:4a:7d:65:45:c9:57:03:4a:
20:74:61:8f:ff:85:c9:e0:e6:7f:57:89:d7:f1:5b:da:47:70:
c9:a2:ed:6e:89:46:0e:03:a5:a0:c1:e3:09:21:b0:88:30:50:
a4:46:b5:c2:52:aa:fe:c8:57:c2:53:c0:00:d7:0d:77:c3:a8:
1d:aa:e4:75:04:b9:6b:29:94:d4:0b:8a:85:ad:80:ae:77:29:
2b:50:a3:d6:de:fd:0e:0b:8e:81:bd:67:53:fb:98:d2:29:2a:
9a:91:17:f3:a9:e5:fd:a8:62:d5:d5:43:6e:76:d8:e9:a1:59:
b0:f4:92:cb:d5:18:17:6f:d5:b8:3b:4d:54:0a:5c:bf:15:65:
3d:8d:0a:95:09:fc:53:65:73:f9:2e:dc:c3:b8:ab:2b:76:15:
b5:37:fd:a0:9e:49:76:02:2a:4d:95:0d:00:6f:e5:cb:3a:c3:
9b:8a:b4:44:d3:03:4e:c1:fe:39:1c:c7:11:e3:c7:d5:32:ad:
ac:a1:b9:32:19:1e:81:2a:aa:8b:61:4b:7e:b7:34:3f:1d:11:
5c:f3:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:31:34 2025 by rpki-client