Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier: zr32pDNtDMyGS736EgvrV3MnFtsmq+f5lXTWtz7JVaY=
Subject key identifier: EE:85:AF:73:26:61:91:12:9E:2E:05:FF:10:FE:A0:91:E7:98:B1:82
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number: 78
Signing time: Sat 29 Mar 2025 06:02:00 +0000
Manifest this update: Sat 29 Mar 2025 06:01:59 +0000
Manifest next update: Sat 05 Apr 2025 06:01:59 +0000
Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: W+hF03b2lWL5RmkBqITyuAg8PBcU3yrujM8Ex8CaXCg=)
2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: L57EG0Fn/DrFvp2TO2K+O7e/Z9P96vwgKEdxXex5oZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F7F0
Validity
Not Before: Mar 29 06:01:59 2025 GMT
Not After : Apr 5 06:01:59 2025 GMT
Subject: CN=67e78cd8-3cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:69:66:13:1b:aa:92:0b:67:d8:6d:ae:5b:
b2:2a:a8:fd:07:34:ec:bb:dc:31:14:32:fb:6b:25:
35:2c:f4:2f:96:1c:ba:e4:73:a4:4b:70:96:cc:ee:
45:e7:37:7e:cd:1a:14:fb:5a:25:c1:16:fd:52:17:
ed:bf:31:df:f4:12:19:2c:9d:89:ba:14:72:51:9b:
82:94:ad:1a:82:c8:15:07:ae:9d:93:dd:37:9e:a5:
21:04:fe:16:a8:4c:a4:50:89:64:b1:0d:ba:35:31:
c4:76:73:0f:21:eb:44:d0:9e:da:74:28:79:10:64:
dc:da:62:47:a7:63:50:fb:9d:fd:c6:f4:47:08:50:
7c:6b:25:ee:dd:69:5c:ae:52:7b:8c:6a:45:2f:05:
67:1b:3a:8c:4a:24:f7:7b:cb:2f:7e:b5:5c:45:e2:
8c:24:dc:d1:fb:e3:6e:67:11:62:86:1a:9c:20:86:
dc:d2:9d:b6:29:38:87:de:4c:98:6b:f7:0e:5d:27:
8f:f1:2c:aa:a4:0b:95:49:09:93:30:e9:94:09:11:
f6:45:10:7e:98:ac:ec:9f:a6:f1:2f:50:67:8f:7f:
49:c2:77:9d:19:d4:28:9d:68:eb:83:a3:0d:61:42:
29:28:66:45:3e:fe:ce:87:00:eb:45:5c:4c:7f:51:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:AF:73:26:61:91:12:9E:2E:05:FF:10:FE:A0:91:E7:98:B1:82
X509v3 Authority Key Identifier:
keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a8:89:4a:07:cc:1f:72:fd:e4:2f:bf:b8:79:b9:68:5a:2a:
f4:8c:5c:de:d0:44:c7:78:81:e1:84:83:a0:bc:28:5e:36:fb:
5e:f1:fb:58:4a:a9:ca:79:de:c7:ea:b3:44:58:82:7a:8d:df:
3d:23:57:00:1f:1d:f0:b7:40:76:4d:3a:52:21:2b:cf:08:e6:
a4:2e:6a:6c:d4:3a:2c:ec:22:8e:73:8d:da:99:6b:f1:23:61:
40:52:67:c7:59:c9:23:5b:ae:a6:45:bc:18:e3:a3:ec:36:1a:
46:67:d4:cc:77:6d:86:89:95:8a:4b:e0:70:9c:97:da:f7:34:
2a:23:eb:58:6a:56:67:b5:15:12:eb:1e:1d:28:69:cd:ec:49:
20:4a:e9:f6:4e:ac:08:3d:b0:50:27:81:6f:fb:19:06:35:93:
9e:31:a5:1c:fc:65:6f:83:f9:40:d0:8f:52:a3:3e:da:88:86:
e1:32:b2:0b:35:14:7d:a1:ca:45:2d:3a:10:de:c6:40:e1:74:
43:26:8b:f0:53:c0:83:90:c0:82:2b:aa:be:2e:a7:86:5c:4f:
45:4a:84:af:cb:47:f1:a3:65:45:a2:10:2e:e5:84:35:88:9b:
15:21:b7:13:18:41:dc:f7:32:22:5d:54:c1:98:71:76:93:52:
57:f9:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:53 2025 by rpki-client