Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: wWsL+LdJz6MXgctRh5qWfyI5Drw0S8/L/TuvyHByGqw=
Subject key identifier: 2B:43:FA:55:7A:39:E7:B6:C9:3A:34:34:B0:0D:8F:16:58:7C:25:09
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0DC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0DB9
Signing time: Fri 31 Jan 2025 17:53:00 +0000
Manifest this update: Fri 31 Jan 2025 17:52:59 +0000
Manifest next update: Fri 07 Feb 2025 17:52:59 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: I783i5A2fmHCVHq3GvQdy3RvbKBAXj65Ep4AXxXKPY8=)
2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: X/Sdq5hIJBEWvLlKJlrKk+UmqaZwGN/XOEju9L4WvGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Jan 31 17:52:59 2025 GMT
Not After : Feb 7 17:52:59 2025 GMT
Subject: CN=679d0dfc-dffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:d1:42:7e:a8:29:ad:35:b3:f9:49:0c:d0:
cc:06:ef:39:32:6f:41:2f:87:1a:24:42:e0:47:30:
12:c3:73:e6:10:6d:14:14:86:58:3c:4c:e0:7e:b3:
bf:e2:f9:9b:39:c2:1a:de:3b:e9:5e:b5:ba:55:b2:
31:1a:47:4d:dd:c1:6c:ff:44:c0:65:15:37:27:86:
07:32:2b:6a:d4:72:33:4c:71:ab:49:d0:0b:10:56:
56:5a:53:d7:56:87:e5:b2:c7:e9:6f:b0:06:1f:99:
78:5a:e6:cb:db:d6:92:80:54:80:a3:f2:08:07:3d:
5e:7d:a7:51:5c:a1:83:ec:db:a5:82:e8:39:3a:c9:
98:cd:b3:32:ba:08:4f:da:85:7e:4b:ba:fd:7c:d3:
01:82:a1:57:38:d4:c0:e1:24:e9:86:6d:3c:3f:77:
50:3c:89:04:94:68:ec:9e:1a:89:ed:63:f4:2a:78:
a2:0d:1a:27:3b:d7:b0:93:ff:de:c3:8b:9d:46:b6:
0e:6e:ff:ca:80:45:cc:af:8e:49:72:c4:e9:75:f8:
2d:ab:56:46:5c:a0:a0:86:1f:39:1e:a8:a7:e1:c3:
22:31:c8:1c:d1:29:1e:83:6a:8c:5f:1b:39:61:0e:
f1:17:59:14:bc:7d:9e:bc:cd:af:2b:5c:63:74:ea:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:FA:55:7A:39:E7:B6:C9:3A:34:34:B0:0D:8F:16:58:7C:25:09
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b7:1a:b5:b8:f4:1e:7e:e0:f7:a9:fc:ed:d9:da:53:0c:b8:
94:a7:68:96:61:58:7f:35:65:05:4f:a5:94:ea:55:b6:f0:48:
3f:b6:f5:ff:72:64:de:c2:fc:c4:1b:e8:43:1d:f1:da:39:50:
19:51:2e:72:30:5c:ca:b8:10:0d:c6:cf:7d:0b:b3:78:c9:7d:
fe:85:70:06:cc:3a:6c:ef:2e:72:7c:35:89:57:38:eb:ca:1b:
fb:23:2d:2c:e9:3d:92:44:1f:48:29:58:6f:b1:0b:cf:77:9d:
63:58:dc:40:8f:b3:a2:9b:dd:db:85:37:37:78:bb:f4:1f:55:
b0:55:1d:16:d1:b0:fa:6d:f1:4e:f4:a7:30:38:de:8a:78:29:
d6:d3:90:af:05:60:1a:ff:54:0d:e3:82:a0:2a:b9:29:79:44:
3c:15:fa:e0:d8:37:41:08:83:0d:e3:fc:59:7c:71:15:a9:d8:
2b:ef:b0:14:65:61:c2:7b:a1:b6:f7:33:f3:f1:0b:8a:73:30:
78:ce:98:41:03:fd:c0:ce:5c:58:a9:30:f1:17:0b:50:ba:9f:
e8:c7:77:f0:cb:d7:1e:66:01:8f:5d:10:4a:15:25:b2:e9:a4:
a7:cf:78:74:45:90:c0:41:35:99:7a:7d:66:4a:fd:4f:bc:ea:
2c:1f:7c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:11 2025 by rpki-client