
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier: etZyqaiSJMQhQsVWoo3EVQnof6QyYkWCjglqktniZd8=
Subject key identifier: D4:2A:67:FD:AF:81:21:A0:20:AC:DD:FA:8B:DC:02:73:C6:B5:C5:BB
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number: 06
Signing time: Fri 31 Jan 2025 07:16:35 +0000
Manifest this update: Fri 31 Jan 2025 07:16:35 +0000
Manifest next update: Fri 07 Feb 2025 07:16:35 +0000
Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: XhulCLwr0xJNkepo67PBqEgwDXGQfnf6WfIdrGMZfeU=)
2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Validity
Not Before: Jan 31 07:16:35 2025 GMT
Not After : Feb 7 07:16:35 2025 GMT
Subject: CN=679c78d3-cb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:9d:e7:49:8c:f4:18:0b:86:3b:9e:48:70:
f4:95:8a:01:a6:00:71:4e:71:5c:26:fb:f4:a6:1c:
59:67:a4:5a:4d:b3:42:cd:a4:49:c7:b6:41:f9:85:
2d:73:ec:f1:20:65:40:3c:6b:48:df:da:ac:ce:60:
ca:b7:a8:f8:54:5a:5a:53:4c:2b:ba:42:20:bc:41:
32:f5:1d:f2:98:93:af:72:e2:b8:96:52:03:3e:4d:
74:60:2c:e3:07:fe:6b:f2:c3:b9:39:bf:88:7e:6c:
15:7f:f4:10:ed:29:f5:83:a4:7f:f2:39:f9:29:b6:
3a:bc:a9:46:6f:de:64:49:02:ff:21:3e:68:34:b9:
97:00:65:ef:8e:c2:3c:dc:10:c4:b4:d3:49:85:d1:
ad:e3:8b:47:4f:5c:ca:dd:81:fc:f5:e5:82:7f:3e:
72:34:73:35:88:08:bc:fa:ad:79:bf:6c:b6:e9:62:
fc:30:21:6b:74:bf:4d:f1:ea:22:7b:0b:09:83:18:
cf:52:69:11:d5:00:fa:b8:f2:65:c4:b9:1c:3b:f5:
88:10:58:79:6c:b7:d4:62:3b:fb:b3:b9:35:a7:4f:
12:01:4b:8b:dd:d5:fe:15:84:ba:6d:91:ad:33:d3:
5e:e6:04:7e:2e:f7:a5:f0:84:a8:fd:73:cc:c6:de:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:67:FD:AF:81:21:A0:20:AC:DD:FA:8B:DC:02:73:C6:B5:C5:BB
X509v3 Authority Key Identifier:
keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2b:dc:d5:2e:7b:1a:dd:40:0b:0e:f9:9a:7f:3e:23:e6:07:
9c:65:c6:ae:98:93:2e:b4:9c:ea:0f:16:ef:e0:ba:15:58:b0:
36:3c:88:c7:c8:d0:59:4e:45:e2:16:ba:1c:54:30:6f:70:d8:
7d:d7:47:76:64:89:20:46:e4:12:30:04:b0:b8:ac:96:c4:5b:
6b:3f:92:bf:51:d5:70:df:51:ba:c6:c2:53:df:e5:ab:fe:da:
53:4d:08:7a:d3:26:26:ce:fb:6f:86:4c:99:2d:cc:c7:3e:eb:
1a:04:55:ad:80:c9:8c:d9:14:eb:db:f2:ff:6b:65:1a:cc:28:
fe:f0:81:76:01:a3:46:55:2e:52:39:9a:18:8c:1f:c7:03:9d:
45:22:a7:35:ad:18:48:25:b8:e1:af:f4:06:76:ce:e4:cc:bb:
4d:c9:7e:a0:51:45:78:f9:b5:5e:57:70:75:82:8b:34:b8:14:
8e:06:16:be:11:a0:a9:fa:86:61:6a:33:9c:37:9e:bb:43:aa:
be:e2:da:cc:6d:eb:80:bf:ed:94:b1:b7:16:bd:69:31:f4:77:
05:c1:a1:4d:b2:a5:39:ae:e2:f9:e6:55:1c:1c:af:cc:71:7d:
6c:96:8a:a3:eb:c6:e6:05:48:b8:42:e4:69:75:09:77:45:f0:
86:0d:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:19 2025 by rpki-client