Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
File: YtERnxiOP3wTVfZTngZDbaJo_50.mft (raw, json)
Hash identifier: bEFgtYj5RcfO3h5g0cWf92FZfPWU6ZUMKNb6A5khTKY=
Subject key identifier: 37:81:7F:53:44:A1:5F:6F:AC:29:A6:F1:AC:9B:11:25:2C:BB:41:B9
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial: 037D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
Manifest number: 0368
Signing time: Fri 31 Jan 2025 01:06:02 +0000
Manifest this update: Fri 31 Jan 2025 01:06:01 +0000
Manifest next update: Fri 07 Feb 2025 01:06:01 +0000
Files and hashes: 1: YtERnxiOP3wTVfZTngZDbaJo_50.crl (hash: jlmwvGB9gkurX0y91zW5VnptoEz2oV2anv6vPagZ2UY=)
2: 09BF3678E79211EEAB391A25C4F9AE02.roa (hash: G4n21VRpqKoP+0eqit+Yo0v81ZJD3oHJqQ/Ky/zl68o=)
3: 280B8550FD3611EEB7932778C4F9AE02.roa (hash: k6THokNNgkgErJRrYrousZIlobYn3ymk37svdAyXZD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893 (0x37d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Validity
Not Before: Jan 31 01:06:01 2025 GMT
Not After : Feb 7 01:06:01 2025 GMT
Subject: CN=679c21f9-d198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:e7:b2:7b:fc:8b:d7:ce:74:59:f0:fd:8c:
5b:3e:6a:3b:0e:59:f9:a6:83:84:ca:f5:5a:c6:ff:
d3:22:fb:ac:e4:70:7c:4d:a5:54:82:3a:95:ce:23:
77:09:d4:b4:20:3b:05:d3:38:dc:20:ab:ac:cd:86:
d9:e4:20:8f:02:f6:aa:43:9f:7a:46:7f:5e:c4:d7:
82:33:17:a9:f6:9b:5b:10:9c:4a:c3:2b:d4:83:34:
51:19:1f:9a:1c:96:d8:6c:39:04:b3:57:10:68:e3:
ba:eb:f2:51:d4:13:31:f9:b1:89:e6:fe:5b:ee:cf:
96:e6:1f:3c:26:0d:ae:6b:87:5c:ef:92:08:33:2e:
90:1b:8b:4a:ce:cd:d0:d3:b8:1a:8b:2c:1d:66:6d:
29:54:69:a5:cb:60:48:b0:78:f9:84:87:ce:64:d2:
0b:99:a5:6a:32:f8:02:65:c1:99:7a:0b:06:20:28:
84:f7:e6:1f:f9:c1:50:7b:bc:60:f2:e8:7d:c4:78:
a1:0d:a2:77:3a:94:42:64:6f:1b:10:77:ee:6e:59:
38:bc:fd:fb:49:f9:4b:ed:53:89:29:81:3a:27:ed:
bf:32:f2:a8:97:d1:6b:7d:b2:24:ea:92:81:a0:d0:
c6:15:10:77:8d:56:f8:f7:bd:d9:24:dc:07:ab:84:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:7F:53:44:A1:5F:6F:AC:29:A6:F1:AC:9B:11:25:2C:BB:41:B9
X509v3 Authority Key Identifier:
keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b5:7b:19:2e:65:34:b9:54:a6:5d:9c:a4:4a:b0:1f:38:49:
b9:d6:e3:74:0b:fc:9e:6f:9b:d0:83:17:8d:51:b9:d1:40:c0:
75:85:35:96:82:53:7c:86:d3:72:50:64:0b:92:ad:93:9d:e7:
6f:dd:eb:df:75:36:68:d8:3c:c0:d1:06:28:cc:6b:79:02:6d:
5d:7d:74:a6:9b:9f:66:08:70:84:a3:80:17:a3:7a:81:bf:37:
d2:4d:df:6f:70:25:ea:02:42:6e:56:f1:b1:e8:69:f8:33:2e:
0f:f6:b6:84:af:99:3f:be:ea:0e:8f:e7:a1:ab:1d:ab:e7:10:
30:09:d1:72:a6:1e:8e:d6:3d:e9:f0:04:be:e3:3e:c3:c9:e2:
83:5e:29:3e:85:c3:36:a8:92:d2:b3:af:f1:59:86:2f:85:22:
01:10:17:3b:3d:bd:78:c0:02:d5:b4:19:d8:f5:47:0e:3d:56:
fc:97:2a:6c:36:af:29:5f:69:aa:1c:6e:27:f0:10:60:07:d8:
dc:62:89:b0:3c:94:2e:13:07:2b:34:1e:41:a9:89:e1:23:84:
79:a2:56:c9:66:8f:08:07:19:02:42:96:3a:61:a7:d6:24:30:
9d:a5:82:63:97:fd:d4:5a:98:c1:58:a6:5d:98:1f:44:34:64:
6d:3c:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:43 2025 by rpki-client