Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier: 6ae+12JE0hEk11M8exGHXp7kp4EKL/cUT3afrsJ9uE4=
Subject key identifier: B3:C4:E2:FB:86:DE:BF:F4:9C:5E:00:0C:26:AB:E3:F1:8F:4A:7F:B7
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial: 05F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number: 05E5
Signing time: Thu 30 Jan 2025 22:58:08 +0000
Manifest this update: Thu 30 Jan 2025 22:58:07 +0000
Manifest next update: Thu 06 Feb 2025 22:58:07 +0000
Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: QDOWxc7/A+9W6HwjNUN5T8xlay4EBJWKEZVkV5LJ/kc=)
2: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: 9XvMrp7slzkQaY4rZCJF42eHjZv8P4QCzn1sLdi6XGc=)
3: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: CosMJfW0j7STaofSkcaa5EBV8a+jVXJeWSFvGAhmxCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1521 (0x5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Validity
Not Before: Jan 30 22:58:07 2025 GMT
Not After : Feb 6 22:58:07 2025 GMT
Subject: CN=679c03ff-f774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:1b:0d:3c:99:3a:33:b4:49:ce:f2:ff:ec:
dc:c8:7e:77:3d:14:f5:8a:fa:ca:19:6a:43:6e:36:
22:49:45:f4:9f:c3:0a:e1:a6:0d:74:b2:32:6b:2d:
79:73:36:cd:96:4d:01:97:35:25:b4:b6:0e:14:8e:
55:e2:5f:d5:5e:b7:fc:43:be:e5:83:00:1e:43:65:
fd:b5:37:5d:db:47:5a:21:90:86:07:20:8b:2d:68:
b9:dd:63:59:05:30:04:d1:24:2e:1b:18:a6:04:91:
86:58:fc:f8:9a:74:b9:79:08:07:7d:3a:09:1b:85:
76:d0:18:ab:b2:20:e7:c0:a4:da:9f:34:eb:33:4f:
44:1d:e7:c3:9f:ae:f1:bd:b8:73:85:d2:c6:1e:dd:
d2:fe:d3:3e:ad:13:36:17:3e:e1:d9:14:7a:ae:bf:
19:d4:be:b0:c4:54:b5:dc:c7:75:c7:19:af:40:0a:
22:d9:47:59:3a:28:3a:c6:d6:40:c4:82:81:24:d4:
fe:a5:2f:b9:d9:2e:6e:a4:d6:99:82:f8:25:d5:fd:
7b:9b:42:2f:16:0d:d5:fa:7e:cb:6b:61:b5:ec:a8:
1b:8b:ed:e6:c9:82:b3:db:a9:f3:08:6a:68:8d:86:
a3:cf:43:17:06:2f:0c:67:87:29:f4:87:37:18:97:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:E2:FB:86:DE:BF:F4:9C:5E:00:0C:26:AB:E3:F1:8F:4A:7F:B7
X509v3 Authority Key Identifier:
keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8d:38:3a:1f:49:ae:3d:c8:de:65:8a:e8:65:b9:e7:0b:05:
98:c2:ad:e2:76:c8:6c:a1:5e:c7:0c:4a:5f:ba:9b:24:55:4d:
38:06:c9:32:42:b1:70:e3:39:5b:46:61:50:15:e5:76:6f:3b:
74:d1:58:57:01:d2:9d:d4:2c:b4:cd:87:af:f5:de:9f:1e:a0:
2f:b8:a3:13:38:66:3e:b0:70:51:e2:ad:b9:33:2a:72:25:8c:
a8:b3:f6:96:4c:18:e6:0f:e2:fa:8c:44:52:43:24:eb:d3:d8:
1b:92:39:c9:7d:6a:2e:53:d3:a7:79:59:bf:96:13:7b:68:b8:
f8:c7:d9:7b:30:78:bc:38:e6:2f:16:a3:1c:09:cc:7e:9e:16:
26:b6:95:46:31:79:ee:05:86:71:82:2a:ec:cd:71:b5:57:5e:
43:f9:b5:c7:c2:b6:a5:b7:c8:9f:fd:78:bc:7a:db:9b:12:e4:
8f:1b:ef:e0:14:e9:83:b0:07:fc:9a:5a:bd:cc:51:f7:62:62:
72:1a:9b:14:bd:86:5c:5d:49:f2:51:54:34:fa:8e:3b:5c:e1:
c7:50:5a:e5:89:34:e3:4b:e1:02:7a:33:8c:e5:be:e6:6b:08:
8f:ca:27:2c:08:fc:f6:34:11:c5:04:2d:0c:ed:93:26:b0:10:
74:fb:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:31 2025 by rpki-client