Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
File: ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft (raw, json)
Hash identifier: tDkHDhnItRNIkqRTIaYa6aXgkOMudGu3vpP8cJF2wVs=
Subject key identifier: 5C:2E:3D:A7:4C:10:85:F2:FE:62:35:B3:DD:68:21:DA:7A:39:C9:E0
Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
Manifest number: 0128
Signing time: Fri 31 Jan 2025 03:46:44 +0000
Manifest this update: Fri 31 Jan 2025 03:46:43 +0000
Manifest next update: Fri 07 Feb 2025 03:46:43 +0000
Files and hashes: 1: ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl (hash: gC9iJ2/PooKCPyHwKfG7DR21vunX1qOO7VG3sfvsv5E=)
2: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (hash: ZCVYghnlBBULLQqokv1P6cracGy0h9WOzePiXeVHY4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3
Validity
Not Before: Jan 31 03:46:43 2025 GMT
Not After : Feb 7 03:46:43 2025 GMT
Subject: CN=679c47a4-613f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:d6:d8:fc:4d:33:4f:20:e8:d2:de:72:93:
b3:50:e5:eb:2e:55:cd:57:e5:8a:fb:f3:94:ca:64:
a9:50:d1:d9:df:d4:b5:ef:31:ae:71:bb:1e:61:ef:
85:02:14:8f:20:ef:8a:49:8a:ef:1f:93:1f:10:35:
e6:eb:e4:f6:b9:ee:0a:2c:b0:c5:f9:d7:62:d8:8e:
9c:4d:b5:c0:7d:e9:23:1d:ff:37:29:77:26:65:99:
07:a9:b9:8b:c6:3d:0a:26:42:32:51:df:0f:12:be:
29:4d:f3:47:6b:52:f4:8e:eb:ed:e7:89:04:5b:58:
ac:f3:75:6f:48:90:7f:8b:7a:9c:1f:05:94:27:07:
e2:6a:17:d3:20:e2:f0:85:69:05:41:81:52:04:a8:
83:4e:71:30:c4:ba:b8:9a:92:17:e7:1c:f3:af:95:
b1:49:64:1c:21:92:9f:0c:4b:d2:95:6c:33:3d:b0:
ea:e5:d5:ab:17:9e:ac:e9:f7:b2:4e:67:ed:8f:96:
98:ce:54:34:b3:4f:d8:04:e8:38:bc:a1:7c:3e:ba:
c2:7b:15:b0:a2:96:ce:9a:5c:b5:52:4b:83:68:44:
6f:97:91:f9:2b:80:15:b0:e1:d2:14:17:85:a2:b2:
f4:72:82:2b:1b:bd:79:38:ff:c2:54:30:59:fa:30:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:3D:A7:4C:10:85:F2:FE:62:35:B3:DD:68:21:DA:7A:39:C9:E0
X509v3 Authority Key Identifier:
keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:52:0f:23:61:9e:5f:07:80:b6:4b:0b:c4:a3:b7:7a:88:47:
f2:0f:4f:17:0f:03:b1:0b:69:b7:af:38:dc:55:07:c9:fa:9a:
a8:a7:44:77:4c:6b:6f:53:32:fe:31:35:39:d0:62:0b:ff:cd:
9f:87:71:72:21:94:fc:c3:6c:8d:63:1a:23:27:52:1b:30:cd:
3a:a6:46:80:c5:09:55:a2:cf:91:d0:af:c8:5e:f6:55:75:5b:
91:ef:24:6d:c4:3c:03:c5:72:a7:81:0e:91:25:da:c6:de:88:
71:e1:72:1f:34:ec:7c:97:d7:fd:81:d6:43:91:dc:2a:93:cb:
0e:90:3e:c4:0e:6a:87:d2:a9:a9:cb:71:eb:65:b1:dd:c0:d8:
58:da:87:72:d3:b2:f7:6d:a8:b0:7a:9f:75:21:cf:9d:e3:dc:
00:18:70:b4:78:36:c9:21:86:bb:c1:99:b3:76:37:f5:90:27:
2c:ee:2f:b2:32:79:2a:13:95:45:c6:83:40:50:d2:e9:47:a2:
48:2e:2a:4c:ef:29:d0:21:a6:6b:39:99:86:37:5d:b5:c0:8f:
a8:01:18:e8:ef:41:26:07:f1:4d:d6:10:dd:db:34:67:82:7f:
a8:34:e4:d1:9e:88:69:16:21:b5:75:b6:fe:16:7f:cb:99:84:
c3:94:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:51 2025 by rpki-client