Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier: MLCftRvMYPQ5GXbphrDfQ2n0fWADGJkU8je0Mz2207E=
Subject key identifier: 25:F8:44:7C:D5:89:27:28:63:37:C7:47:AE:10:68:66:C5:71:E8:27
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number: 010B
Signing time: Sat 29 Mar 2025 04:23:23 +0000
Manifest this update: Sat 29 Mar 2025 04:23:23 +0000
Manifest next update: Sat 05 Apr 2025 04:23:23 +0000
Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: 3Bj5H1CEvk9o/w5fWstT3Fl4n81ef8JDKpVWHRzD3+s=)
2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: Au9LqYxSegxqPey9TLXuRtICRWaNbswTGw/Qw/oD2tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142B70
Validity
Not Before: Mar 29 04:23:23 2025 GMT
Not After : Apr 5 04:23:23 2025 GMT
Subject: CN=67e775bb-f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:cc:25:28:e9:82:8e:e3:a3:4f:bc:a7:03:
d8:2e:a1:49:32:e0:23:06:bc:b7:0e:b0:30:7d:bb:
ae:be:0c:79:90:69:b1:d1:ed:5f:d9:60:d6:c1:c9:
d2:e1:8d:e9:b5:ec:d5:0e:ee:38:4e:ed:e9:5a:30:
d5:42:83:48:14:60:b6:39:cc:af:c1:67:22:98:ea:
71:53:b0:43:72:f1:ab:86:c7:2d:f0:a3:54:20:8b:
df:8a:61:61:c4:93:33:68:e3:73:e7:a6:44:21:e0:
90:d3:05:70:20:4c:9c:dd:bc:77:07:4e:5c:c8:62:
d1:f3:f5:59:87:1e:a9:d4:b5:8a:a1:32:04:df:70:
ee:74:0b:31:bc:25:74:29:2d:24:e2:e5:07:96:b4:
74:10:12:de:96:ff:e2:80:d3:80:6d:e7:aa:f6:67:
4f:64:f6:78:52:94:e2:35:b5:29:75:8f:b5:9b:13:
91:ca:d4:bf:90:db:62:93:01:81:92:28:72:0b:70:
b3:27:5f:c5:1d:a9:e7:82:ff:f2:b8:67:cd:1a:e7:
aa:df:9c:bc:3f:cd:7f:c7:7b:a0:24:92:67:b1:dd:
5d:f3:b1:e3:16:3d:01:95:1b:d3:7b:9c:48:87:4d:
71:7c:8b:f5:a3:2b:38:16:79:b6:71:e3:cd:15:9e:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:44:7C:D5:89:27:28:63:37:C7:47:AE:10:68:66:C5:71:E8:27
X509v3 Authority Key Identifier:
keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a0:49:1a:c6:ff:a4:d5:8e:9e:c8:8f:f4:b6:cf:95:4d:a8:
28:8a:49:8b:24:50:fd:4d:93:45:8b:90:4d:8f:3b:1d:79:0f:
0c:49:71:15:19:27:8f:b2:68:24:11:8a:73:c9:6b:ef:1d:e6:
23:4c:71:4c:aa:bf:8f:91:06:49:a5:c0:64:96:f3:af:34:95:
01:69:d8:7e:fd:bb:50:6e:94:3c:24:42:48:41:e6:29:82:d5:
af:a1:55:19:57:b4:8b:ee:35:5d:fc:d3:a2:d8:39:97:9e:b7:
63:c6:e6:65:5e:26:0f:26:9e:97:00:2d:65:97:35:5f:84:85:
d2:d0:5d:9a:8c:21:8a:d1:1e:bd:31:08:2b:2f:d6:60:65:7f:
3a:c5:45:8c:5c:4a:af:bc:6a:32:3b:b1:3a:a7:7b:09:6c:50:
4e:14:c0:b0:d5:63:86:59:d4:f4:6f:3f:fb:86:61:3a:4d:aa:
4e:75:e7:90:13:df:62:5b:98:2e:62:89:6e:6b:ba:37:bb:6f:
49:45:73:18:24:6d:77:0f:9b:4a:71:2c:9a:36:21:e1:a6:1f:
da:f1:0f:c4:56:e6:58:12:71:dc:3f:00:52:f7:f7:6e:cf:2d:
d1:b5:0e:06:2b:cc:c2:ed:f2:5a:6d:35:cc:af:f7:39:52:e9:
38:45:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:46:42 2025 by rpki-client