Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft
File: YH-sTcO8pMwR43L3ZrJYqdrstwc.mft (raw, json)
Hash identifier: UnlGcDi9D0KPf//EhN+9qGFj9QF6R0VPjpTjXNV0nM0=
Subject key identifier: 81:B9:B7:82:4F:F5:CE:7F:88:FB:05:12:8E:AB:A3:E3:B2:F1:5D:B7
Authority key identifier: 60:7F:AC:4D:C3:BC:A4:CC:11:E3:72:F7:66:B2:58:A9:DA:EC:B7:07
Certificate issuer: /CN=A914BAB0/serialNumber=607FAC4DC3BCA4CC11E372F766B258A9DAECB707
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YH-sTcO8pMwR43L3ZrJYqdrstwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft
Manifest number: 0225
Signing time: Thu 23 Jan 2025 01:54:52 +0000
Manifest this update: Thu 23 Jan 2025 01:54:51 +0000
Manifest next update: Thu 30 Jan 2025 01:54:51 +0000
Files and hashes: 1: YH-sTcO8pMwR43L3ZrJYqdrstwc.crl (hash: Nobuuo0KnTNCiUWRPEC9CeFviqYdPxoXmB0BfEsI1dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAB0, serialNumber=607FAC4DC3BCA4CC11E372F766B258A9DAECB707
Validity
Not Before: Jan 23 01:54:51 2025 GMT
Not After : Jan 30 01:54:51 2025 GMT
Subject: CN=6791a16c-8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:47:07:20:af:e1:cb:3a:27:0d:3e:92:3d:
22:d2:8e:2e:1d:42:45:97:05:50:d7:13:13:4b:b8:
20:0f:4d:58:6c:a9:b7:7d:ce:ad:c9:7a:7f:b4:16:
29:16:4c:f9:5c:a3:38:f4:49:c7:d1:ac:0a:b0:75:
6b:11:5d:74:e2:93:06:7f:3f:e2:a8:52:82:c4:2f:
b5:a0:4f:94:5d:34:c6:44:51:cb:b6:e9:0e:05:26:
61:38:cf:85:4f:03:cc:01:ce:11:9d:51:47:5f:d6:
38:80:eb:6d:a3:e0:54:8b:6d:33:09:8f:3c:fc:e2:
db:ca:4b:e6:1e:c3:09:e0:ee:74:01:45:3e:6a:96:
f8:3c:56:a4:f5:87:79:77:bf:83:49:6d:c8:98:b7:
5a:5e:09:c6:17:e4:86:b7:76:16:3b:16:60:1a:47:
9b:e4:c1:53:df:93:53:64:c8:3c:d6:41:29:67:e8:
64:39:99:26:d9:5d:b6:37:b6:64:8b:3c:3b:b2:0f:
9e:ea:0a:49:09:b6:15:a9:cd:72:59:ac:45:44:59:
bb:a7:6f:b9:d2:00:3f:cd:58:53:e3:0f:84:dc:e9:
49:bd:40:7f:48:ab:78:ca:1d:4c:b1:99:0f:b0:9e:
08:88:e6:a4:64:d9:c1:5e:4e:2c:53:eb:d5:c3:6d:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:B7:82:4F:F5:CE:7F:88:FB:05:12:8E:AB:A3:E3:B2:F1:5D:B7
X509v3 Authority Key Identifier:
keyid:60:7F:AC:4D:C3:BC:A4:CC:11:E3:72:F7:66:B2:58:A9:DA:EC:B7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YH-sTcO8pMwR43L3ZrJYqdrstwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAB0/6361C982163F11EDB7D8AA85C4F9AE02/YH-sTcO8pMwR43L3ZrJYqdrstwc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:e2:9b:f7:c5:4e:4b:7a:8b:e0:13:a1:20:c9:dc:bf:c5:
01:2a:9c:82:ae:c5:05:f3:e9:42:be:b2:90:e6:03:05:bb:f7:
52:f6:6e:d1:ed:2b:72:a9:19:22:07:a2:fe:a3:34:08:28:26:
95:bd:5c:d3:ce:1d:b5:1b:41:d7:00:9d:24:35:8b:43:a4:2d:
41:61:06:7e:80:b3:85:2d:65:4a:9d:fe:36:f0:98:06:b1:2f:
42:85:41:b5:f5:f6:2c:dc:72:7b:34:86:37:78:c9:90:c1:ba:
52:d5:ea:30:83:20:34:2d:40:a3:fb:82:87:fc:33:c3:ba:c4:
df:eb:eb:48:9c:02:3c:8e:d8:30:54:4a:8b:2b:ea:98:41:53:
85:b4:a0:73:e3:11:63:c9:e2:67:3a:f2:14:af:fe:42:7a:8f:
4a:3d:f3:8e:ab:a5:6f:f0:13:b8:6a:06:b7:9b:c8:a8:bb:cc:
47:75:3b:bb:2e:35:4b:96:74:f0:31:b3:60:fe:f0:3b:21:d0:
2d:c1:c9:95:fc:e3:eb:09:ba:1c:57:c6:af:6d:04:6e:db:4c:
c8:bf:15:3d:9c:4c:38:96:cc:cb:2c:71:cb:cd:2c:38:2d:b8:
3c:91:61:3f:ed:a1:bb:87:5f:85:c6:f9:21:80:e8:f0:17:96:
52:77:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:33:11 2025 by rpki-client