Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
File: YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json)
Hash identifier: 96EFsrz4/7682iXistOVHBryMSe150SZNIqt0h7PcY4=
Subject key identifier: 1B:57:A4:3A:78:F1:51:98:EE:8D:2D:53:2E:59:CF:15:A2:D6:AA:83
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Certificate issuer: /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
Manifest number: 0166
Signing time: Fri 31 Jan 2025 03:15:11 +0000
Manifest this update: Fri 31 Jan 2025 03:15:11 +0000
Manifest next update: Fri 07 Feb 2025 03:15:11 +0000
Files and hashes: 1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: SZKll1BW3wv1CqSSgqhvnnrxBvE3zZ+e/KrZgAEYmZ4=)
2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 307Gxd4M7BNZ22HOhN4gQVH037OEfJpHMiGF7rrVYmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Validity
Not Before: Jan 31 03:15:11 2025 GMT
Not After : Feb 7 03:15:11 2025 GMT
Subject: CN=679c403f-9bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:a6:5c:33:bf:fd:a7:16:2d:44:21:ac:f3:
7f:f8:7e:31:b0:09:31:b4:fc:e5:58:3f:9b:83:72:
63:5f:c1:33:16:a2:00:bb:27:0d:91:a0:28:08:06:
e8:a9:5b:88:25:93:7a:10:6d:6e:40:23:50:8a:2f:
f5:8e:27:38:5f:9d:37:c5:97:9b:e5:3c:a9:4e:32:
1c:63:b3:1f:92:cb:a6:46:b5:68:42:f4:e5:f9:f1:
33:df:02:09:77:37:50:16:30:6c:13:cd:5e:1a:48:
d3:b0:12:63:1d:7c:22:1e:9f:1f:07:1c:48:fc:cf:
ae:fd:22:66:88:d2:65:1f:4b:c5:23:f2:19:98:bb:
7a:03:d6:ef:79:37:a6:71:cc:be:1a:88:eb:79:d3:
02:a6:6d:4a:ee:ce:b0:c5:82:73:80:33:ba:bf:a8:
3a:c3:77:6d:fa:4d:3e:bc:c2:42:87:c1:bf:79:1a:
a0:58:34:a3:86:57:86:e6:6d:25:50:4d:ab:ca:c5:
4f:0a:56:3d:b8:f3:0d:0e:4e:76:da:c3:90:78:7d:
7e:a7:20:09:38:b9:0c:48:a9:80:09:2b:97:db:09:
e6:19:2f:4c:c7:6e:0c:04:da:3f:8b:39:d7:d5:4f:
d2:15:24:0d:f9:af:73:8e:b1:c5:f6:97:96:9d:11:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:A4:3A:78:F1:51:98:EE:8D:2D:53:2E:59:CF:15:A2:D6:AA:83
X509v3 Authority Key Identifier:
keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:bd:69:fe:f9:ce:2b:b6:4c:a8:71:21:9b:57:aa:42:a0:
73:a2:bf:0d:ca:32:e7:e6:5b:f0:6a:22:c2:ca:7e:ba:7f:23:
dd:5d:96:cb:5d:f5:a1:8e:a2:a4:47:d0:e9:92:43:25:bd:f9:
0f:5f:0a:58:50:34:38:d8:02:87:18:fd:a0:b6:6b:4f:08:ea:
ad:cd:46:e6:2d:14:9c:ba:49:34:57:b7:e3:67:ad:1e:d2:8f:
95:70:48:3c:03:39:94:72:bb:28:2e:44:35:9a:1d:78:52:d3:
d2:28:0d:df:b5:9b:9a:e4:ec:e6:e0:e3:55:b3:72:08:ca:e7:
fb:f4:cb:41:06:f3:92:46:cb:b3:54:a6:0a:0c:cc:ba:70:bd:
42:67:d9:03:4f:28:03:f3:c9:b7:61:11:b6:0a:91:75:68:48:
c7:b0:62:b0:dc:6d:bb:15:cc:f5:fc:45:c6:fe:ed:18:bc:12:
f8:73:a6:5d:fa:0b:66:b2:79:aa:d7:ca:f3:b1:dd:c5:d2:20:
e9:2e:47:43:1f:0f:6f:a6:78:91:4f:e1:c2:d5:8e:9e:8d:6f:
b4:92:16:d6:ff:bf:33:a2:95:d2:0b:07:62:46:3b:9a:88:f1:
d0:70:d1:e0:7a:4a:c0:40:16:af:97:84:f1:c4:2d:22:7b:4b:
3f:b3:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:46 2025 by rpki-client