Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
File: y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json)
Hash identifier: lmAmBr5D9dagwPOLiKQVQDSHVUyq1nw/obdclrQOGIY=
Subject key identifier: 36:34:9B:C0:1C:E6:9D:60:AC:44:36:21:E6:64:05:DD:FD:2F:A1:60
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial: 0802
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
Manifest number: 07F5
Signing time: Fri 28 Mar 2025 21:10:57 +0000
Manifest this update: Fri 28 Mar 2025 21:10:56 +0000
Manifest next update: Fri 04 Apr 2025 21:10:56 +0000
Files and hashes: 1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: 29mLiaw9qp4P2y/R1hd796bRfD3jtSscLz41kzC+V8k=)
2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: hwrYZn+i2OUNCmUoK3ena1siLJOV1HVO2m5EjPVb3kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FE7
Validity
Not Before: Mar 28 21:10:56 2025 GMT
Not After : Apr 4 21:10:56 2025 GMT
Subject: CN=67e71061-7581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:2a:1e:86:d0:72:78:3a:c2:29:e7:1a:9a:
38:46:ea:35:eb:e8:90:9a:d2:fe:f8:30:a6:56:a6:
ae:9a:bc:7e:da:e9:a2:7d:75:ee:eb:71:bf:87:83:
5c:19:36:a1:8c:07:b5:72:2c:15:7b:66:a3:80:e1:
47:e2:db:3f:c5:b5:17:90:48:1b:57:84:c9:5e:d6:
93:55:27:f1:79:83:67:f9:cf:4e:b1:cb:55:f9:42:
ad:0b:07:77:7a:7c:b8:3d:b2:ff:f9:7e:4f:91:fa:
97:cb:eb:3a:41:0f:2d:08:bb:72:24:e6:35:8f:92:
2f:45:9b:a5:19:c3:15:1a:87:7a:28:c7:96:b4:a4:
c1:21:5b:52:b7:cf:c8:53:88:9f:25:c0:d8:70:6b:
57:f5:d3:85:eb:d4:e0:09:11:91:1d:11:d2:30:c2:
22:35:d9:de:f5:55:b9:5c:31:df:a8:98:83:ef:91:
d3:ba:1a:23:b4:d2:97:89:b8:2f:2c:b0:2c:94:47:
80:4e:23:bc:a9:cf:55:c9:48:aa:3b:9e:61:33:16:
57:59:8a:24:ff:87:4a:84:6c:02:87:79:51:58:94:
5b:e8:0d:20:e1:48:a8:81:04:dc:40:ed:16:ff:bb:
ac:95:9c:30:fc:07:a3:5b:af:c9:ea:3e:a3:69:af:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:34:9B:C0:1C:E6:9D:60:AC:44:36:21:E6:64:05:DD:FD:2F:A1:60
X509v3 Authority Key Identifier:
keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:4c:23:d5:9a:ff:d7:5f:10:e4:c4:89:83:ca:c0:4d:d0:30:
6f:58:ca:c0:1c:fe:17:53:54:bc:9a:16:29:b1:87:14:8c:0e:
d9:53:45:a0:88:d8:21:46:f2:78:c0:94:e8:f6:21:6c:43:84:
cd:3e:fd:9f:1d:a5:f8:3f:0d:dd:85:6b:18:4e:c5:98:24:0e:
a0:af:19:d1:88:c8:06:25:1c:cf:25:42:bf:51:37:e7:9b:00:
17:27:ed:fc:35:42:29:5d:50:af:a2:ac:fb:f0:03:31:40:9d:
f8:f9:3a:76:b6:ba:58:ce:1b:98:d8:c3:1b:fa:e5:58:83:df:
b1:c3:d8:c1:26:0f:cb:e6:91:74:cd:52:c0:3e:7b:f9:14:94:
5f:83:62:25:65:fd:bc:21:cf:fd:42:2e:16:7c:ee:63:f9:ad:
4e:79:66:79:eb:b2:dd:0f:56:d1:06:b8:c9:84:da:55:a8:d1:
29:f9:f1:c8:43:71:be:4c:f3:87:c8:f3:cb:cd:d3:69:1c:93:
a9:48:24:c1:e6:d4:89:90:f1:89:a0:f4:19:59:b6:d5:48:1f:
c3:e3:08:cc:e7:df:c1:c5:5d:32:4c:19:9d:e5:a6:75:1c:ae:
48:ec:01:db:8b:53:f5:1e:96:79:bd:1e:f8:4a:13:85:77:83:
07:e1:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:24:49 2025 by rpki-client