Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
File: YU0eyLaT57tfMs-lJ7UCgyad_is.mft (raw, json)
Hash identifier: j/tamhww/NLyLti8KUHFci1wvtieSmwnKHizJKAle60=
Subject key identifier: C9:7C:4F:FE:37:61:5E:BF:FC:19:0F:45:56:0E:00:A1:12:F5:E1:EA
Authority key identifier: 61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
Certificate issuer: /CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
Manifest number: 07
Signing time: Fri 31 Jan 2025 07:15:26 +0000
Manifest this update: Fri 31 Jan 2025 07:15:25 +0000
Manifest next update: Fri 07 Feb 2025 07:15:25 +0000
Files and hashes: 1: YU0eyLaT57tfMs-lJ7UCgyad_is.crl (hash: imhg+nNSieK6M5BlP3HSemKcftpoCEqAZY950kBpSlo=)
2: EE380826D87211EFBAE0FC19C4F9AE02.roa (hash: 8l/PjgYxr+ZXAJadh6qG9Ww6HDPSsDKK/vON5gDczs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD7B/serialNumber=614D1EC8B693E7BB5F32CFA527B50283269DFE2B
Validity
Not Before: Jan 31 07:15:25 2025 GMT
Not After : Feb 7 07:15:25 2025 GMT
Subject: CN=679c788e-7ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:9a:78:e5:b8:ea:e9:62:57:d4:55:3d:eb:
ea:f4:b7:bd:75:86:60:49:6b:fd:dd:eb:98:ca:73:
90:9f:50:26:c3:b9:ca:6a:5d:cb:01:d4:3c:f5:7f:
ee:3a:f1:f5:8c:32:e1:f3:4a:3f:81:fa:36:54:0c:
1c:36:40:6b:a9:81:3b:7a:81:c4:67:1b:2f:bd:fa:
1c:73:bf:a0:b1:59:a1:79:30:bc:45:a6:ae:c9:fe:
32:d8:38:6a:7b:ad:5f:a5:21:b7:db:51:4a:f5:d5:
0e:37:55:59:1a:94:12:9b:e9:60:32:52:3c:d0:7a:
34:22:52:5a:b2:e4:ba:ae:a3:be:66:6a:4d:14:15:
18:b8:6d:05:8d:99:fe:d8:ec:85:20:52:ad:11:1c:
d3:4f:ef:f2:7f:0d:41:ae:d9:57:01:9e:e4:d4:73:
59:92:1b:52:b5:8f:50:11:dc:78:63:7e:50:92:c8:
71:44:28:05:9a:17:89:1c:80:53:c5:84:c2:bd:0b:
9e:ab:20:94:77:ce:26:36:9a:83:f7:2d:e8:b6:81:
67:09:e1:dd:2f:7e:8b:cd:2b:28:be:f8:a6:e1:1b:
a0:15:74:57:5a:9b:b3:77:6c:4f:c7:1e:75:56:f7:
6d:5e:5a:2a:97:ee:7a:13:d8:d6:e4:3f:4a:fd:15:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:4F:FE:37:61:5E:BF:FC:19:0F:45:56:0E:00:A1:12:F5:E1:EA
X509v3 Authority Key Identifier:
keyid:61:4D:1E:C8:B6:93:E7:BB:5F:32:CF:A5:27:B5:02:83:26:9D:FE:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU0eyLaT57tfMs-lJ7UCgyad_is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD7B/A74F5EDCD87211EFA31F8419C4F9AE02/YU0eyLaT57tfMs-lJ7UCgyad_is.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e9:3d:1d:67:18:d2:4b:4e:fe:58:e9:b1:8b:0f:65:3d:44:
1b:4c:db:54:8a:c0:25:ec:6e:1c:bf:a4:f9:50:7b:61:fd:8f:
4a:59:9a:b6:8a:8d:2d:6e:c7:39:34:c1:3e:b3:80:b0:a1:e2:
b6:6e:c6:12:bc:b3:65:ed:78:c7:13:75:9f:3f:c9:ab:27:09:
2c:ce:e8:c0:64:f0:59:21:f3:0d:3d:8e:09:b7:0f:37:1f:0f:
8e:89:a5:fc:cd:f4:b2:2e:26:18:e5:ce:a1:d5:af:0a:6a:75:
3e:95:e6:99:3b:23:31:2f:90:fd:be:c8:be:17:35:47:27:67:
a3:36:07:72:18:ac:01:28:43:b4:25:df:43:81:2c:81:b9:db:
d9:99:54:a2:25:fb:bf:dd:ee:70:34:aa:80:73:3a:6a:ee:38:
48:17:eb:95:58:41:12:87:4a:04:33:af:43:12:98:49:bd:7e:
3f:b3:6f:e4:72:3c:c6:07:be:61:1b:3a:24:a7:18:18:d7:c6:
de:b1:96:ae:f6:c8:52:69:d5:27:b2:4a:6c:1c:0e:6b:52:65:
58:e3:de:03:cc:77:1c:3c:5b:4c:93:7c:eb:56:75:f2:a1:d1:
67:31:88:d8:2f:47:bb:cd:bb:ec:b8:f1:86:35:59:49:31:c1:
7b:f2:57:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QkQ3QjExMC8GA1UEBRMoNjE0RDFFQzhCNjkzRTdCQjVGMzJDRkE1MjdCNTAyODMy
NjlERkUyQjAeFw0yNTAxMzEwNzE1MjVaFw0yNTAyMDcwNzE1MjVaMBgxFjAUBgNV
BAMTDTY3OWM3ODhlLTdhZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvDJp45bjq6WJX1FU96+r0t711hmBJa/3d65jKc5CfUCbDucpqXcsB1Dz1f+46
8fWMMuHzSj+B+jZUDBw2QGupgTt6gcRnGy+9+hxzv6CxWaF5MLxFpq7J/jLYOGp7
rV+lIbfbUUr11Q43VVkalBKb6WAyUjzQejQiUlqy5Lquo75mak0UFRi4bQWNmf7Y
7IUgUq0RHNNP7/J/DUGu2VcBnuTUc1mSG1K1j1AR3HhjflCSyHFEKAWaF4kcgFPF
hMK9C56rIJR3ziY2moP3Lei2gWcJ4d0vfovNKyi++KbhG6AVdFdam7N3bE/HHnVW
921eWiqX7noT2NbkP0r9Fe2HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyXxP/jdh
Xr/8GQ9FVg4AoRL14eowHwYDVR0jBBgwFoAUYU0eyLaT57tfMs+lJ7UCgyad/isw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRDdCL0E3NEY1RURDRDg3
MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0Zk1zLWxKN1VDZ3lhZF9p
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWVUwZXlMYVQ1N3RmTXMtbEo3VUNneWFkX2lzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC
RDdCL0E3NEY1RURDRDg3MjExRUZBMzFGODQxOUM0RjlBRTAyL1lVMGV5TGFUNTd0
Zk1zLWxKN1VDZ3lhZF9pcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACXpPR1nGNJLTv5Y6bGLD2U9RBtM21SKwCXsbhy/pPlQe2H9j0pZmraK
jS1uxzk0wT6zgLCh4rZuxhK8s2XteMcTdZ8/yasnCSzO6MBk8Fkh8w09jgm3Dzcf
D46JpfzN9LIuJhjlzqHVrwpqdT6V5pk7IzEvkP2+yL4XNUcnZ6M2B3IYrAEoQ7Ql
30OBLIG529mZVKIl+7/d7nA0qoBzOmruOEgX65VYQRKHSgQzr0MSmEm9fj+zb+Ry
PMYHvmEbOiSnGBjXxt6xlq72yFJp1SeySmwcDmtSZVjj3gPMdxw8W0yTfOtWdfKh
0WcxiNgvR7vNu+y48YY1WUkxwXvyV2I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:24 2025 by rpki-client