Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json)
Hash identifier: BEEkP1Ar/Wwsj9uT3oM6UGn+wrgQYhrUT4EsDDQdF8w=
Subject key identifier: C2:A2:87:F8:A1:DE:A7:E9:44:79:08:C7:B2:38:DD:B0:84:C9:CC:9E
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
Manifest number: 2A
Signing time: Sat 29 Mar 2025 07:02:50 +0000
Manifest this update: Sat 29 Mar 2025 07:02:49 +0000
Manifest next update: Sat 05 Apr 2025 07:02:49 +0000
Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: se+wUGmxHUU6+N9mxD2/tsxVuZ1zxP/PO5M9WiterUs=)
2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E
Validity
Not Before: Mar 29 07:02:49 2025 GMT
Not After : Apr 5 07:02:49 2025 GMT
Subject: CN=67e79b19-7301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:c3:6e:e2:09:10:5f:2d:f5:d5:3d:4b:38:
50:e9:94:a0:3d:23:27:79:8d:a0:2f:75:22:48:13:
d5:84:79:7f:1f:6c:66:df:ba:6a:e3:fa:c4:55:8b:
67:d0:93:8f:85:49:5e:6e:eb:fc:86:08:2e:dd:19:
66:bb:79:d8:e0:fd:23:0a:28:20:4f:c4:a9:2f:ba:
5c:b8:6a:b2:24:35:29:db:e9:5f:62:93:f8:87:82:
6a:9a:54:4a:8d:5b:69:28:fe:5c:6b:aa:35:47:ca:
16:10:b6:4b:28:48:8a:80:99:24:e9:7a:1b:f6:0d:
3a:47:ec:58:1a:6d:f1:1d:0a:70:b6:61:61:d1:77:
23:80:1e:ef:af:96:22:bf:f6:30:2f:2b:95:88:5e:
e6:af:63:3e:8f:d2:3f:fd:7e:77:c1:41:75:9f:29:
6a:6d:83:e5:2f:51:8d:2f:c2:4e:55:af:cd:6d:6e:
b7:67:29:85:da:d8:16:3e:88:ed:0b:d3:17:54:6a:
52:69:50:73:c3:ce:6a:e0:c4:0b:18:ec:89:5d:22:
6b:ab:f0:c3:98:1a:84:3a:7d:6f:89:47:fe:cb:58:
e3:cb:5d:b3:13:fb:12:93:92:0d:1e:ae:0f:bf:d1:
15:00:6f:58:4f:47:40:a0:18:6e:b7:a6:44:c5:4b:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:87:F8:A1:DE:A7:E9:44:79:08:C7:B2:38:DD:B0:84:C9:CC:9E
X509v3 Authority Key Identifier:
keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:4f:88:15:c4:89:8d:14:af:05:88:c8:57:06:c5:57:68:
bd:b2:02:98:5b:3d:25:27:1d:ac:58:89:ae:ca:aa:96:ac:19:
6e:5f:fc:d5:18:fe:c8:a0:77:d9:5f:0d:12:77:dc:28:8e:6f:
d0:26:89:9c:eb:65:24:91:1c:44:8b:2c:19:16:20:68:41:3c:
ee:22:20:4e:ff:8a:4b:7a:fe:28:a7:8c:39:a9:ca:42:d4:4f:
89:52:6c:ea:2a:c8:d9:40:aa:7b:03:ee:25:e8:17:cb:7a:33:
f8:9f:d0:aa:7f:e0:15:cd:22:ef:d1:6e:a4:ad:5e:c1:47:b4:
44:30:fe:97:5f:58:0b:8d:30:1c:91:00:56:8d:63:24:f6:e4:
b1:e2:cc:c5:b8:f2:33:39:66:fa:8d:cd:b1:77:39:a1:c2:a3:
fe:05:03:98:73:14:6b:53:14:cb:5c:13:f8:2c:3b:3f:87:c3:
49:1e:1b:0c:37:33:2f:4a:0f:4d:4e:76:2e:2f:0d:20:06:53:
fd:7f:a7:52:4c:7c:52:f3:11:40:7f:21:b9:a6:e7:43:c1:20:
16:5d:60:d8:5d:43:ac:7c:c7:6c:be:7e:a2:e6:63:53:0f:66:
cc:d5:49:e1:a9:da:df:03:97:ef:c7:6c:93:a7:6c:0b:36:7f:
10:0f:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:09 2025 by rpki-client