Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json)
Hash identifier: XvzSMc1BX6DcGyNl9mlO2XI2L/g4fi88ZUld0kdFENw=
Subject key identifier: 83:6E:4C:91:93:0C:17:22:D1:20:81:D1:41:70:A8:4D:43:BF:F4:94
Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E
Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
Manifest number: B8
Signing time: Fri 31 Jan 2025 05:03:38 +0000
Manifest this update: Fri 31 Jan 2025 05:03:37 +0000
Manifest next update: Fri 07 Feb 2025 05:03:37 +0000
Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: 5yWgL6pVIJwn2UvcguMgW7YQffaloHMlT8tImj1NL4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E
Validity
Not Before: Jan 31 05:03:37 2025 GMT
Not After : Feb 7 05:03:37 2025 GMT
Subject: CN=679c59a9-e6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:cc:ba:71:d2:04:15:3c:95:f4:de:c0:a3:
b2:04:7e:e9:62:00:8b:6e:7c:64:d0:ea:26:49:75:
96:0b:af:e9:d7:54:a5:a6:75:06:92:04:cc:75:f5:
f9:d6:2f:8d:cd:e0:e0:b7:f5:f6:57:43:c0:42:c2:
c7:33:72:8b:6f:7f:b6:19:bd:71:e9:bc:ca:7e:51:
90:02:96:5b:0d:09:b8:45:a8:f0:28:c5:15:ef:ff:
6c:af:f0:8a:15:bf:42:e6:54:c4:50:06:e5:2e:e9:
63:9a:0a:be:1d:38:f9:4d:b7:d2:c2:86:8a:40:62:
07:9a:aa:57:f8:33:7b:4a:98:e2:94:02:47:95:f8:
68:6a:a8:4e:08:80:65:56:47:6f:aa:1c:5b:9e:fe:
6f:aa:33:69:25:de:f9:78:c1:77:1b:bc:d8:33:04:
7d:4b:34:b9:fc:13:97:56:1a:d1:26:19:cf:56:46:
84:e4:1d:d0:a0:07:cd:4f:a8:a6:09:ab:ee:d3:40:
fd:b1:bc:9e:f1:75:6f:57:07:03:a3:e2:9a:53:43:
b6:7a:7d:6b:3d:5e:7c:ac:c2:e4:c8:ea:7e:9a:13:
a9:7a:a1:7a:08:99:76:d3:b0:5b:b2:cb:de:fb:f0:
a2:e5:37:56:90:c6:af:4c:15:3f:b4:90:06:7b:3b:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:4C:91:93:0C:17:22:D1:20:81:D1:41:70:A8:4D:43:BF:F4:94
X509v3 Authority Key Identifier:
keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:8a:52:e9:20:fd:4e:6c:14:46:71:c2:e3:40:8c:20:0f:29:
43:04:4a:a9:a6:ad:3a:cd:d7:d4:b5:83:a5:8d:61:25:bc:b1:
75:42:9a:7a:14:6c:8f:6b:f2:22:14:8b:bf:f8:bc:76:95:15:
d5:26:50:b2:5f:0d:8a:fb:0f:6a:c0:98:0a:c1:e5:74:ef:e6:
5b:34:d0:f7:72:5c:76:74:70:fc:76:65:af:97:96:70:3b:a0:
a6:02:8c:6a:74:05:ff:59:69:1e:4a:ec:2c:6d:5b:95:e6:38:
d2:ca:54:34:44:d2:48:68:7d:31:49:52:1c:54:a0:18:86:c3:
be:57:83:61:db:73:f4:81:63:68:28:8e:ca:99:c5:51:c0:74:
41:43:4b:56:27:c9:54:fd:f7:ce:06:c7:22:0d:0d:26:1b:eb:
55:e8:e2:0f:20:00:15:d3:08:c7:e5:b9:45:b8:fa:b6:77:b4:
50:eb:50:fa:69:e2:b6:c7:0f:a4:71:86:03:ad:22:9c:e8:65:
64:bd:b9:92:01:52:87:dc:14:7a:41:c6:96:09:23:e3:f6:71:
76:85:39:5a:d2:2a:d1:c5:d1:0e:ca:7d:51:46:2a:75:3a:da:
8d:0b:1a:31:84:55:07:57:c6:10:7e:dd:e1:94:c7:f5:4f:b9:
12:c0:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:05 2025 by rpki-client