Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File: y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier: hhCfMBQFhWkpGqdIfwpVAq/TLx26W7pMoGB8RUuBIos=
Subject key identifier: 1B:BE:88:03:C5:EA:C9:5E:6A:A9:92:1A:CF:E0:A6:DE:63:1E:07:F6
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial: 0BB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number: 0BB1
Signing time: Thu 30 Jan 2025 18:54:25 +0000
Manifest this update: Thu 30 Jan 2025 18:54:24 +0000
Manifest next update: Thu 06 Feb 2025 18:54:24 +0000
Files and hashes: 1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: pnMGcOrMQ/IJ7oXE04bC5kHSbN3HJd9cTVi47A+kMEA=)
2: 65866C4815D111EABE986319C4F9AE02.roa (hash: ky275MRbaVtyIuJOfhdH9mQsA448nNjhkiKWj0SgjYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Validity
Not Before: Jan 30 18:54:24 2025 GMT
Not After : Feb 6 18:54:24 2025 GMT
Subject: CN=679bcae0-6ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:e7:82:20:2f:51:60:ae:51:cd:f7:42:82:
12:23:b6:c0:57:04:a3:c5:81:46:d1:80:e9:ce:fc:
13:67:68:4d:78:a9:82:8d:58:39:b4:9c:a2:f3:e6:
fd:85:8b:1f:ef:9d:1b:cb:8e:20:5a:d4:0e:3a:ba:
22:db:8f:cb:57:22:e7:54:06:66:de:30:0c:e1:82:
ed:04:68:d1:43:79:9e:3c:74:0c:a3:d9:7e:b1:87:
c5:d6:d5:ae:eb:e2:7c:d0:13:eb:b9:8d:a3:4e:2a:
1f:d0:2e:7b:4e:49:a9:40:8c:57:de:51:51:c2:8d:
01:57:0e:47:5b:32:21:1d:fe:08:74:47:88:ac:d3:
13:ef:70:cc:cf:7a:c7:35:92:fd:d5:57:19:b9:6f:
66:07:1a:b1:35:b5:34:cd:5f:53:b1:c4:05:1e:91:
58:e4:c6:85:f3:44:b0:4d:08:f9:87:a4:eb:45:85:
89:79:3a:ee:5f:33:bc:27:12:48:0e:28:88:1b:ab:
6f:03:6f:ef:29:36:a8:8e:bc:ac:f0:8b:87:17:d8:
eb:c4:01:65:e1:38:2b:79:b8:45:6c:5c:75:06:66:
3f:de:be:bf:11:21:6b:6f:46:66:b9:c5:7b:ff:6f:
5e:66:2d:d5:71:a3:c7:93:72:a4:fd:73:28:74:3d:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:88:03:C5:EA:C9:5E:6A:A9:92:1A:CF:E0:A6:DE:63:1E:07:F6
X509v3 Authority Key Identifier:
keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e8:26:12:10:69:ff:7b:75:af:82:5a:28:7b:94:ad:75:75:
ad:dc:ee:2b:36:54:90:03:5c:1e:b8:10:e9:d2:2a:57:05:6c:
86:a3:87:db:a2:19:a0:ad:0a:97:14:1e:1c:af:6f:be:f5:7a:
fd:56:51:f0:4b:d0:2a:52:66:56:aa:34:2a:56:29:99:fa:af:
99:8b:8b:bc:6a:e0:62:07:2e:e3:bb:25:2f:8c:d1:68:0f:06:
a1:68:bc:17:e7:12:e8:24:29:8f:a9:6c:bc:45:0a:cb:c7:a3:
7b:af:e3:c5:74:62:32:82:6d:8b:da:e8:10:b2:cd:7a:a8:32:
09:02:d3:c5:4a:f0:42:30:be:7d:3d:99:1e:05:8e:f6:c6:f8:
1d:d2:13:5b:ce:a9:2d:42:92:18:71:fc:8f:79:73:29:cb:59:
ca:a9:d5:69:18:89:98:dc:ba:3b:c9:07:07:c9:c4:bc:51:c5:
3f:7e:b6:4a:37:5b:1c:06:c7:c2:3a:f2:4a:27:1b:75:b0:d1:
66:2d:77:1b:58:87:b2:14:c7:16:10:66:e3:f0:88:25:d3:68:
19:f4:b9:e9:7e:24:5e:d0:09:e2:4f:2e:26:fb:a9:88:8a:90:
44:83:35:9f:9a:b1:65:22:7f:09:f4:49:08:ff:1d:d9:74:0e:
2c:c6:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:32 2025 by rpki-client