Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
File: yhZXNMEc1wu3iaHSw6DpTtuULUo.mft (raw, json)
Hash identifier: 8S4NfpnskcTfZrd94ytmrwV7PNWRJI9uy3FIBqIpppA=
Subject key identifier: 3F:4E:EE:85:4D:E1:E1:5F:35:3D:98:D4:9C:95:78:4B:7A:15:E0:9C
Authority key identifier: CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A
Certificate issuer: /CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A
Certificate serial: 08ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
Manifest number: 08E8
Signing time: Thu 30 Jan 2025 20:27:42 +0000
Manifest this update: Thu 30 Jan 2025 20:27:42 +0000
Manifest next update: Thu 06 Feb 2025 20:27:42 +0000
Files and hashes: 1: yhZXNMEc1wu3iaHSw6DpTtuULUo.crl (hash: roDxYumLAhBakUgFMwU2DlCuB56EoVwY5lGwb2cnzuI=)
2: 805149989FDE11EAB02CF366C4F9AE02.roa (hash: zD+1Isr7Zoe06zM4n2le8cJbIdHC0c+SsYSND0yrM8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE179/serialNumber=CA165734C11CD70BB789A1D2C3A0E94EDB942D4A
Validity
Not Before: Jan 30 20:27:42 2025 GMT
Not After : Feb 6 20:27:42 2025 GMT
Subject: CN=679be0be-7d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:cc:b1:89:54:ad:bc:5c:15:68:89:ba:9a:
b0:56:ca:d4:64:c0:b2:4d:e6:04:c5:4b:16:63:ab:
ec:bd:73:93:c8:16:41:0a:c6:05:bc:55:06:02:7f:
7f:62:df:94:53:bf:05:59:8e:0c:da:4c:e3:b1:d4:
24:6c:0c:09:64:34:61:12:9d:ee:83:51:6e:17:92:
0a:77:53:26:a7:4e:9c:00:24:e5:56:8e:cf:cb:6a:
51:60:1a:e4:4b:a7:fd:a2:79:69:68:26:71:0c:27:
3f:9f:1d:41:21:2a:71:70:b5:bf:31:c3:39:3f:c5:
db:a6:74:60:35:0c:1f:b3:6b:ed:4b:3d:42:90:c5:
8e:5b:83:74:b7:88:39:bf:74:ad:b6:3c:b1:a5:a5:
06:44:a2:68:0f:a1:f1:74:38:c4:6c:72:67:b8:d3:
2f:06:dc:d0:4b:80:23:25:82:9c:62:ae:2c:e0:80:
ef:80:ec:04:c3:ed:7b:53:34:e2:2b:4a:f1:ae:61:
e1:6f:b7:a1:81:b4:0a:e7:79:16:cd:3b:cc:d4:2f:
7e:73:ed:3f:5a:c8:39:a3:44:c8:e9:0f:16:10:a6:
07:86:ba:a3:d9:1e:88:73:fb:30:89:72:28:b2:36:
3b:6b:5d:13:c4:81:f7:b8:b6:07:0c:0a:ef:5d:4a:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:EE:85:4D:E1:E1:5F:35:3D:98:D4:9C:95:78:4B:7A:15:E0:9C
X509v3 Authority Key Identifier:
keyid:CA:16:57:34:C1:1C:D7:0B:B7:89:A1:D2:C3:A0:E9:4E:DB:94:2D:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhZXNMEc1wu3iaHSw6DpTtuULUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/yhZXNMEc1wu3iaHSw6DpTtuULUo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a5:02:df:3c:6c:11:2c:5d:10:e7:cb:d4:0d:93:b9:6e:27:
be:c8:c8:13:cd:f5:38:b3:11:dd:68:6c:34:6c:17:1a:7b:30:
d0:be:5c:c9:55:d1:e6:74:60:98:a3:21:9d:df:a4:f7:56:76:
9d:4d:f8:4f:f8:9a:c4:52:f7:ca:08:01:17:da:51:80:d8:ac:
20:f8:be:3a:26:2b:79:6b:d2:e1:ce:1d:70:9e:64:9a:ed:1d:
94:f8:97:b3:da:7b:71:f1:08:dc:a4:29:b4:24:a3:cc:8f:81:
4b:e0:48:8a:f9:9a:5a:e8:59:4c:a1:bc:76:74:e3:a5:35:56:
f2:e7:5e:fc:fb:33:b7:43:0d:32:84:2b:fc:c3:cb:26:e2:57:
86:db:a6:20:94:43:01:16:7f:04:e7:88:36:59:e1:5e:f2:87:
e8:cd:6a:d4:8c:53:24:ef:08:97:89:bb:dc:85:f6:26:12:e8:
a4:84:92:0d:67:9e:95:b1:9d:44:2c:ac:34:b7:2e:c1:6f:42:
cb:92:7a:5f:2a:85:f1:38:ec:e2:61:1c:57:5d:32:0a:98:7a:
0a:58:60:99:9f:68:e1:64:d6:2e:de:8e:0f:3f:9e:96:c2:17:
12:bb:ea:5e:2b:86:38:cb:0b:51:b2:3c:f9:02:81:1e:b7:57:
57:1b:f3:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUxNzkxMTAvBgNVBAUTKENBMTY1NzM0QzExQ0Q3MEJCNzg5QTFEMkMzQTBFOTRF
REI5NDJENEEwHhcNMjUwMTMwMjAyNzQyWhcNMjUwMjA2MjAyNzQyWjAYMRYwFAYD
VQQDEw02NzliZTBiZS03ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKHMsYlUrbxcFWiJupqwVsrUZMCyTeYExUsWY6vsvXOTyBZBCsYFvFUGAn9/
Yt+UU78FWY4M2kzjsdQkbAwJZDRhEp3ug1FuF5IKd1Mmp06cACTlVo7Py2pRYBrk
S6f9onlpaCZxDCc/nx1BISpxcLW/McM5P8XbpnRgNQwfs2vtSz1CkMWOW4N0t4g5
v3SttjyxpaUGRKJoD6HxdDjEbHJnuNMvBtzQS4AjJYKcYq4s4IDvgOwEw+17UzTi
K0rxrmHhb7ehgbQK53kWzTvM1C9+c+0/Wsg5o0TI6Q8WEKYHhrqj2R6Ic/swiXIo
sjY7a10TxIH3uLYHDArvXUpcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9O7oVN
4eFfNT2Y1JyVeEt6FeCcMB8GA1UdIwQYMBaAFMoWVzTBHNcLt4mh0sOg6U7blC1K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTE3OS81QzIwMDRFMDlG
REIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3dTNpYUhTdzZEcFR0dVVM
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3loWlhOTUVjMXd1M2lhSFN3NkRwVHR1VUxVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi95aFpYTk1FYzF3
dTNpYUhTdzZEcFR0dVVMVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRpQLfPGwRLF0Q58vUDZO5bie+yMgTzfU4sxHdaGw0bBcaezDQvlzJ
VdHmdGCYoyGd36T3VnadTfhP+JrEUvfKCAEX2lGA2Kwg+L46Jit5a9Lhzh1wnmSa
7R2U+Jez2ntx8QjcpCm0JKPMj4FL4EiK+Zpa6FlMobx2dOOlNVby5178+zO3Qw0y
hCv8w8sm4leG26YglEMBFn8E54g2WeFe8ofozWrUjFMk7wiXibvchfYmEuikhJIN
Z56VsZ1ELKw0ty7Bb0LLknpfKoXxOOziYRxXXTIKmHoKWGCZn2jhZNYu3o4PP56W
whcSu+peK4Y4ywtRsjz5AoEet1dXG/ML
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:38 2025 by rpki-client