Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json)
Hash identifier: bhz0nxjGB1l3rt223q4siFl9VGBFpW5CYoEORvTcl00=
Subject key identifier: BD:03:B8:14:72:1C:4D:1D:A8:11:8A:85:B6:32:41:2C:12:C1:0B:19
Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Certificate serial: 05B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
Manifest number: 05AD
Signing time: Fri 28 Mar 2025 23:25:05 +0000
Manifest this update: Fri 28 Mar 2025 23:25:05 +0000
Manifest next update: Fri 04 Apr 2025 23:25:05 +0000
Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: xcClez+0GttyS/Jwz9FUAM/ycxtmHyLgg52qFEG9jME=)
2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: aJNEKMighzJgRijL/uKI8yCdGKsKV/KJafHUF4cH4Rw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127656
Validity
Not Before: Mar 28 23:25:05 2025 GMT
Not After : Apr 4 23:25:05 2025 GMT
Subject: CN=67e72fd1-897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:a1:86:63:b3:5b:7c:36:0e:05:64:bf:72:
98:83:2d:f9:54:0d:2f:e8:86:13:ac:f0:13:60:7d:
40:3b:a2:ff:ab:8d:f2:bd:89:7e:84:42:8f:da:00:
68:c9:86:65:37:65:dd:ea:04:ea:44:e2:5d:13:2c:
2a:2e:1d:e8:ba:98:d0:9d:51:bd:c3:55:94:fb:0d:
fb:b8:e2:d7:3d:bb:22:e7:e7:c4:b5:94:1d:f1:bf:
bb:e3:98:85:02:ec:27:21:12:4b:22:ba:ea:88:1a:
b9:58:9b:f6:a6:4a:94:97:03:a6:2e:39:2a:26:ca:
89:b1:00:55:a2:2a:8d:12:2c:55:68:e1:a1:78:fa:
bb:c2:c0:e0:1c:67:14:c9:da:75:5e:3d:34:8e:4b:
04:2b:40:74:02:29:c1:9f:27:64:0d:c1:fe:54:56:
74:5a:a4:dd:e8:52:c8:3e:8e:f5:3f:ef:5b:52:40:
6e:6d:ed:86:7f:c0:6b:35:b1:36:7b:ee:ca:38:ee:
ee:b0:08:8f:1d:10:02:0d:50:0d:90:be:86:48:46:
e2:d2:dd:1c:41:2d:c3:9a:d3:ee:77:b8:a1:4a:1a:
96:10:80:5a:be:cb:66:b9:10:59:c0:39:b0:1b:06:
8a:e1:61:1a:10:72:cb:f2:3d:99:25:d4:fc:05:c9:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:03:B8:14:72:1C:4D:1D:A8:11:8A:85:B6:32:41:2C:12:C1:0B:19
X509v3 Authority Key Identifier:
keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:60:f2:e9:88:65:9d:d5:45:78:57:d0:da:ce:93:5d:25:
13:06:46:9f:ef:65:c2:c0:1a:ec:04:b9:67:46:58:a8:48:78:
18:d4:bf:63:1d:4c:e8:55:75:eb:4d:11:0f:2a:17:6e:ad:10:
7d:26:52:b6:bb:3f:ec:b3:d9:e9:73:78:50:64:7d:f6:08:0a:
51:4b:88:66:48:d0:a2:4e:51:e0:2e:20:ff:87:b3:e1:40:dc:
99:81:91:76:9a:3f:ba:20:4a:7b:87:79:bb:4a:da:e5:e9:12:
88:f8:cd:b9:6a:75:f0:a7:48:dd:d2:b2:f5:46:fc:bd:8c:b7:
a7:4a:c2:e3:e2:68:1d:e4:e6:48:0b:fc:27:c3:36:87:31:f6:
2e:37:ba:db:dd:26:55:be:52:95:61:5b:24:7c:bc:cb:dd:94:
66:b0:01:4f:27:51:f7:44:f4:a5:fb:3f:78:8f:37:f0:95:30:
08:2d:21:61:6e:71:a2:7c:86:35:6a:48:41:d0:61:ff:5f:15:
1e:57:eb:60:27:62:71:8f:33:90:49:23:06:18:50:fe:80:67:
4f:d4:88:58:45:a0:b6:75:0c:7f:c1:a4:39:fc:fb:d1:e5:df:
a7:08:22:62:c0:24:97:9d:38:ef:c6:e6:dc:8b:aa:51:9e:0e:
9a:19:d3:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2
RDU3M0JENzEwHhcNMjUwMzI4MjMyNTA1WhcNMjUwNDA0MjMyNTA1WjAYMRYwFAYD
VQQDEw02N2U3MmZkMS04OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncChhmOzW3w2DgVkv3KYgy35VA0v6IYTrPATYH1AO6L/q43yvYl+hEKP2gBo
yYZlN2Xd6gTqROJdEywqLh3oupjQnVG9w1WU+w37uOLXPbsi5+fEtZQd8b+745iF
AuwnIRJLIrrqiBq5WJv2pkqUlwOmLjkqJsqJsQBVoiqNEixVaOGhePq7wsDgHGcU
ydp1Xj00jksEK0B0AinBnydkDcH+VFZ0WqTd6FLIPo71P+9bUkBube2Gf8BrNbE2
e+7KOO7usAiPHRACDVANkL6GSEbi0t0cQS3DmtPud7ihShqWEIBavstmuRBZwDmw
GwaK4WEaEHLL8j2ZJdT8BckADwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0DuBRy
HE0dqBGKhbYyQSwSwQsZMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF
MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO
cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4kWDy6YhlndVFeFfQ2s6TXSUTBkaf72XCwBrsBLlnRlioSHgY1L9j
HUzoVXXrTREPKhdurRB9JlK2uz/ss9npc3hQZH32CApRS4hmSNCiTlHgLiD/h7Ph
QNyZgZF2mj+6IEp7h3m7Strl6RKI+M25anXwp0jd0rL1Rvy9jLenSsLj4mgd5OZI
C/wnwzaHMfYuN7rb3SZVvlKVYVskfLzL3ZRmsAFPJ1H3RPSl+z94jzfwlTAILSFh
bnGifIY1akhB0GH/XxUeV+tgJ2JxjzOQSSMGGFD+gGdP1IhYRaC2dQx/waQ5/PvR
5d+nCCJiwCSXnTjvxubci6pRng6aGdMw
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:36:12 2025 by rpki-client