Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
File: YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft (raw, json)
Hash identifier: AsMePswXf3DwhqARzuUlAjGeBizqkHT2gJ/s+pqvj20=
Subject key identifier: EE:CE:39:AD:E5:5D:CD:E4:13:7A:CA:94:D7:AE:17:6B:DC:89:64:34
Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
Manifest number: 02D5
Signing time: Fri 31 Jan 2025 01:29:16 +0000
Manifest this update: Fri 31 Jan 2025 01:29:15 +0000
Manifest next update: Fri 07 Feb 2025 01:29:15 +0000
Files and hashes: 1: YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl (hash: ksw3VuWfYAUZjhdcme7ibqE8Kg2zlkYx8VfdQFUhB3w=)
2: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (hash: PuEOajLEUChOIrthB/05mvECIB7cIWFQzgLmdVBLTBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D
Validity
Not Before: Jan 31 01:29:15 2025 GMT
Not After : Feb 7 01:29:15 2025 GMT
Subject: CN=679c276b-1530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:50:83:52:54:20:e0:42:19:a1:a7:22:4a:
88:46:d2:dd:68:bd:0e:31:d0:f2:e4:87:5f:4e:bd:
4d:dc:ff:a8:3d:8f:d9:82:04:10:dd:23:ca:b5:1f:
dc:34:d8:ad:59:3b:34:4b:92:36:d2:a8:ff:41:d9:
22:5f:28:d1:4c:88:ca:1d:b6:93:75:6f:34:88:98:
4b:57:ef:48:1b:63:ca:ff:3f:1e:60:0d:a3:12:05:
1f:2d:22:4c:22:28:be:5c:23:48:2a:63:6a:05:b6:
62:9a:1e:09:a3:e5:2d:b3:4e:e4:51:15:fc:b6:69:
9f:7a:cd:5a:b7:cf:f8:a1:a9:cf:26:8a:82:df:d7:
65:8c:f4:cb:ee:1f:8a:0c:ed:62:7a:2b:c3:4c:59:
73:af:4b:0d:26:e1:ef:14:a7:c5:d0:c8:30:a2:31:
90:13:79:83:c1:37:eb:88:ee:0b:7a:b1:9f:d9:fc:
45:41:f1:87:2c:e3:51:90:23:a4:bf:05:8b:e0:c5:
d3:4c:fe:2d:70:b1:28:3d:d0:82:19:22:88:99:83:
90:07:11:57:a5:1c:3b:a0:d5:8e:22:b1:6e:ce:99:
36:20:61:3d:38:4e:fe:db:91:54:74:da:ff:e5:c6:
27:93:22:25:98:bb:cc:41:1e:d1:0c:5c:8d:26:69:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:39:AD:E5:5D:CD:E4:13:7A:CA:94:D7:AE:17:6B:DC:89:64:34
X509v3 Authority Key Identifier:
keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3f:e3:69:9c:21:6d:3a:74:4a:20:a6:80:83:a8:39:9d:c2:
80:a3:22:f4:de:97:7c:85:dd:9f:65:9b:e1:c6:6c:c4:bd:8f:
85:1c:01:71:4f:b5:f7:d0:f7:32:cb:9c:b2:d4:a6:94:5c:a9:
fa:6d:51:1b:cd:cc:3b:02:5b:ab:bd:1e:1f:c0:68:47:3d:a7:
88:54:99:0b:c0:6f:3f:49:82:76:79:53:dc:bd:bd:8d:dc:3c:
50:2a:19:6c:85:98:c5:4e:71:3c:30:dc:9a:4a:20:69:84:0d:
7d:d7:8e:a2:9f:d8:e7:92:d9:7a:58:f0:6a:d4:12:6e:4c:00:
69:1a:f0:33:72:6d:a8:59:fd:eb:5f:4c:11:25:77:92:83:11:
04:74:92:c9:8d:5a:ca:47:dc:76:47:c0:27:c6:b0:35:2e:40:
96:6c:10:8e:bc:35:36:97:b2:e3:76:45:61:51:46:13:f8:01:
2c:bb:74:cc:dd:53:7f:f8:20:d5:40:40:fa:22:d0:e2:b4:26:
19:89:82:23:e7:4c:10:b4:d8:de:81:08:6f:ee:53:4f:3f:a8:
25:df:ee:21:d4:a9:21:5b:ab:50:99:e2:63:85:ae:31:53:48:
b3:47:ab:22:03:72:bf:73:5c:60:34:d7:f6:73:ce:2c:02:fa:
7d:d0:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:06 2025 by rpki-client