Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
File: ySTN5BVFl0tvV4MubGA7zIlm2eA.mft (raw, json)
Hash identifier: IW6nDANEHV45dV0DQE82UWzAGHWCuQdzQUZ+qobVbQg=
Subject key identifier: 92:6C:38:61:AC:88:42:42:26:3A:A4:AC:E4:0A:9A:A6:20:72:36:97
Authority key identifier: C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
Certificate issuer: /CN=A91F2DDD/serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Certificate serial: 02D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
Manifest number: 10E3
Signing time: Fri 31 Jan 2025 17:56:13 +0000
Manifest this update: Fri 31 Jan 2025 17:56:12 +0000
Manifest next update: Fri 07 Feb 2025 17:56:12 +0000
Files and hashes: 1: ySTN5BVFl0tvV4MubGA7zIlm2eA.crl (hash: 0WXJnhhluKvwK02ydnko7DBkKD0lxXbB/9Skcc5I0zo=)
2: 2FBEB0B0D5B011EC90A8A031C4F9AE02.roa (hash: dTotqn1MA4iFciet41gKXuxTQQQVUzcSiuTmgAsBCPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD/serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Validity
Not Before: Jan 31 17:56:12 2025 GMT
Not After : Feb 7 17:56:12 2025 GMT
Subject: CN=679d0ebd-311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:9c:3f:da:b6:9d:0b:f3:91:76:00:50:cb:
b5:03:c9:6b:f4:46:37:d1:90:3a:f6:24:1a:40:12:
4e:86:1f:11:86:e4:49:10:32:5b:34:69:a8:8f:2d:
dc:46:8f:51:35:c6:d5:1e:32:f8:13:79:20:97:e0:
43:1e:86:7d:73:66:58:5c:35:99:ec:5b:c3:ee:bc:
1b:ab:94:85:54:b7:19:22:9e:90:c1:4c:ca:e8:2e:
87:c8:62:b1:05:cb:23:9d:8f:0f:35:19:cc:e1:b3:
1c:c9:c6:03:c5:56:fe:50:fb:2d:d7:b8:20:5f:14:
ae:9b:fe:58:8b:3a:17:38:4e:d8:13:1f:bf:43:47:
5b:4d:90:ba:7d:dc:54:a8:3c:99:74:cb:66:a1:dc:
c3:dc:60:c4:b1:93:50:74:81:bb:dd:da:f8:7f:ba:
6a:f8:22:c7:43:2b:73:e6:ae:14:36:f7:b7:ea:29:
21:fc:67:8b:59:02:41:1c:c2:f2:6f:e0:ca:14:d1:
c4:e1:b0:d8:0c:09:f5:e2:07:5a:37:a8:b3:db:5a:
e5:a1:11:d8:b8:b7:3d:16:9e:52:3f:78:db:5c:ef:
b5:73:8e:79:4e:67:3b:fe:bc:1a:cd:cc:23:76:70:
ea:a5:9a:4f:09:e3:08:a6:ce:ff:e1:5a:3a:4d:ce:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:38:61:AC:88:42:42:26:3A:A4:AC:E4:0A:9A:A6:20:72:36:97
X509v3 Authority Key Identifier:
keyid:C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f3:e0:71:4e:98:d3:24:ec:58:7a:bb:01:31:26:84:d0:d2:
1d:9e:99:9d:0c:df:79:a3:8d:19:f6:95:0d:c4:41:c2:f0:82:
1a:14:46:46:31:cf:61:5e:d8:34:48:87:dd:19:81:92:fe:fa:
82:77:ac:92:12:80:49:c8:cc:a6:12:77:89:77:2a:ae:d7:c5:
9b:c9:29:ec:77:52:61:21:b7:c4:0d:2e:ff:53:2c:e6:db:2a:
b5:97:91:6f:b8:eb:43:f6:69:f4:9d:2d:9f:fd:db:2f:a2:31:
60:31:55:78:d9:fd:6d:75:ee:ad:e1:40:3e:90:bb:04:28:6b:
ec:a7:85:59:5b:f7:2e:8f:cb:d9:6b:74:79:13:3c:b7:f3:55:
f3:f8:bd:69:20:c0:fd:34:5e:5b:3f:c2:1d:fb:37:2c:3c:12:
e1:5b:a0:11:25:a2:44:ce:5d:8d:69:44:b8:a8:4b:5e:ee:60:
42:dc:01:12:80:6f:7f:57:a7:2e:f4:5c:81:d4:8d:94:3b:c1:
d7:a4:05:1a:50:58:ef:43:dc:8c:43:aa:26:2d:f8:45:0d:6c:
dc:16:c0:54:3a:65:91:c2:09:14:cb:e8:48:d4:5e:13:ac:f1:
c9:58:fd:c8:e9:19:b0:30:b9:0e:f6:35:91:33:60:d9:fc:cf:
4f:f4:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:31 2025 by rpki-client