Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json)
Hash identifier: YFvnP9ePiTj8mqWfxpmNW9aGlk/UCe3vPczTvxF51ns=
Subject key identifier: 29:CE:97:18:AD:D7:A5:49:98:FE:B6:2D:32:F2:52:9A:2E:68:D9:77
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
Manifest number: 0111
Signing time: Sat 29 Mar 2025 04:20:25 +0000
Manifest this update: Sat 29 Mar 2025 04:20:25 +0000
Manifest next update: Sat 05 Apr 2025 04:20:25 +0000
Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: MO4agj0GM06JS/OVcpFsRUqC3ueI30C+SogsWvybi6c=)
2: 045A4C2A6E4A11EEBADBDC4AC4F9AE02.roa (hash: FlD/q0JbSZGoP+GmyJYdclxWBTvflYZJ2XaDZhQ/500=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159FAF
Validity
Not Before: Mar 29 04:20:25 2025 GMT
Not After : Apr 5 04:20:25 2025 GMT
Subject: CN=67e77509-b2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:51:4d:de:6c:2b:30:2e:8b:30:80:f5:62:
59:ae:78:d3:d7:7b:5f:33:c1:db:fc:fe:88:12:73:
4c:4a:84:41:05:1d:e6:21:e1:1f:99:b2:61:f7:4f:
45:ef:82:ec:c6:3d:b2:25:dc:fd:39:e1:f3:44:e6:
a8:d7:a5:a5:27:ae:62:82:f3:9c:35:f3:82:5c:17:
39:0a:b6:df:c6:00:70:1d:99:b7:3c:cc:2c:c4:37:
a6:1e:0f:54:cb:48:0d:cb:d1:01:7c:57:e2:50:cc:
d5:07:68:b3:ff:ee:7d:ff:b1:29:38:45:26:56:5a:
41:07:92:b8:e2:99:5c:51:9b:31:dc:36:9f:f3:02:
65:60:f9:ec:73:72:05:3d:3f:aa:50:39:c2:57:92:
f6:d2:5c:d0:99:54:ff:d2:47:63:c8:07:2c:b2:be:
ae:3b:73:32:be:62:67:29:15:e1:3b:32:c8:89:83:
9b:17:f5:bb:7e:fa:0c:48:d5:1f:f8:a4:4c:c2:11:
23:91:43:d8:50:d4:1c:25:f9:96:50:41:ec:27:c1:
d2:96:05:a0:cb:d7:b9:fb:ed:c8:05:4c:9f:19:e1:
5a:b5:6e:a3:8a:a9:22:2f:4d:e1:35:c2:36:17:39:
d2:f5:0b:f8:83:41:aa:36:d6:a4:ca:56:11:f0:9f:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:97:18:AD:D7:A5:49:98:FE:B6:2D:32:F2:52:9A:2E:68:D9:77
X509v3 Authority Key Identifier:
keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e7:e2:07:2c:64:2a:3f:77:28:c9:13:be:3a:95:2f:0e:97:
d4:1f:39:c0:4b:e8:84:34:4b:0b:f5:69:8c:a9:c9:05:d0:c6:
ad:5a:e2:f2:fb:f2:9f:a6:75:75:e5:43:4c:ca:0f:3e:d0:5b:
ef:d8:8a:44:9b:f5:17:a3:e5:e9:ed:92:31:a4:51:c1:0f:ba:
0d:67:b4:a9:0d:6f:25:95:c2:6c:a2:af:4e:3a:d1:1c:28:ed:
aa:09:97:dc:28:2c:0f:45:6b:57:a6:b2:a0:03:0a:b7:f9:f2:
b3:bf:0e:3c:76:34:61:8e:ed:45:6b:e6:b5:4d:20:1d:ea:89:
08:e1:e8:c1:44:45:44:17:2c:7b:13:99:e6:4e:d9:83:54:52:
ba:08:11:cb:cc:be:a5:29:44:ae:f5:09:b8:74:60:12:14:56:
58:fb:22:f0:c0:e6:7d:ec:23:41:7e:14:fa:ed:6c:96:65:d0:
64:05:bc:60:68:be:96:b9:77:56:9d:88:72:31:e3:4d:d8:66:
31:77:ca:c1:05:c7:b0:9a:fd:cb:f3:ee:40:b8:5c:47:81:27:
c1:fc:c0:b7:a2:d5:0b:71:1f:f5:28:9d:dd:9b:df:57:db:3b:
dc:a5:b5:3b:a9:12:19:65:e4:56:54:5e:21:d0:47:90:29:d2:
52:48:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:18:00 2025 by rpki-client