Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft
File: X2BRhzuBUG4leKxYsyaPAd_ybsw.mft (raw, json)
Hash identifier: JaYfMZ+WINNyC94q/WlW7UseVvyJW4S0ai9+SFxs3X4=
Subject key identifier: 53:52:77:5A:BF:31:BA:6C:D9:AC:59:12:D9:3C:D8:19:31:A0:70:F8
Authority key identifier: 5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
Certificate issuer: /CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC
Certificate serial: 06A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft
Manifest number: 069F
Signing time: Thu 06 Feb 2025 21:41:12 +0000
Manifest this update: Thu 06 Feb 2025 21:41:11 +0000
Manifest next update: Thu 13 Feb 2025 21:41:11 +0000
Files and hashes: 1: X2BRhzuBUG4leKxYsyaPAd_ybsw.crl (hash: zJ4szeOe+DXqJ4sLtjL7R/4HdnCBFrlCsfJRmBcdO50=)
2: 0F28A28037CA11EDB8E79257C4F9AE02.roa (hash: pF3/SCpjqWZzJ0zKbIk7nxneope2I0jviiYqOPZYauI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91693D7
Validity
Not Before: Feb 6 21:41:11 2025 GMT
Not After : Feb 13 21:41:11 2025 GMT
Subject: CN=67a52c77-e257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:37:1f:c3:b9:1c:79:d2:06:8f:7d:19:fc:
dc:5a:42:73:d6:26:71:a3:36:7c:dc:d9:e8:c5:7a:
93:eb:c1:50:66:ac:6f:e2:78:ce:ad:fc:72:81:88:
24:72:5f:e2:bf:fd:83:fc:f6:1b:d0:c5:cb:21:29:
90:73:da:9d:6f:e6:b0:3d:f0:66:06:75:cc:6b:aa:
5b:e8:a7:9c:ee:80:a1:f0:fb:5c:9f:02:d1:1c:39:
de:1d:ee:f8:23:0d:3d:cc:50:68:33:75:72:a1:68:
80:ad:a6:e2:3a:0b:a7:da:07:80:19:96:ed:82:90:
ba:b1:be:30:14:bd:26:a3:fa:60:ca:b4:71:79:6d:
47:07:b2:fc:61:dc:f1:c3:df:18:22:46:fb:30:90:
37:5c:26:ec:6a:e0:30:84:c1:51:0e:69:e0:6b:10:
d0:0e:d4:17:e1:32:93:ce:a8:80:5f:66:64:5b:6b:
26:00:8b:48:02:96:50:5e:62:f7:07:c7:20:2d:7a:
a9:35:88:5b:35:b4:4d:fe:cc:83:63:3f:56:7a:b3:
36:14:7a:5d:ca:c0:8e:da:5d:9e:47:d3:9f:8a:df:
91:b2:7e:c5:ba:67:34:b5:7b:da:3e:d1:5e:c5:45:
ae:0f:14:44:0f:da:81:e3:42:0f:e7:a5:91:b1:06:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:77:5A:BF:31:BA:6C:D9:AC:59:12:D9:3C:D8:19:31:A0:70:F8
X509v3 Authority Key Identifier:
keyid:5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:c4:42:ad:8a:0f:70:6d:17:35:4c:ca:bc:1c:3d:84:1a:
00:da:75:74:7c:7c:60:73:8b:06:3d:55:16:32:3c:2d:2f:cc:
a7:b3:52:3c:37:58:39:fa:01:c6:f5:f0:89:03:ce:c6:8d:cb:
b5:e5:9f:55:c7:10:ab:65:e4:66:08:c3:2c:5f:6d:3b:a5:e9:
2f:ee:f2:6b:ae:13:33:0a:d2:10:0e:cb:58:be:52:c9:11:ec:
22:6a:b0:7b:f6:c7:13:dd:93:cc:38:b8:0c:bd:aa:9f:2d:2e:
a1:0b:4e:0d:36:c4:f1:e4:12:b4:86:e5:30:ba:7a:9e:31:c4:
32:d3:c0:b7:2a:94:e5:4b:b3:c3:4c:41:d1:c1:79:00:32:da:
11:1a:dc:b4:b2:aa:fd:10:a8:c4:6a:d6:1f:33:04:de:28:df:
20:c8:f4:81:c4:9c:8c:31:5a:7c:99:47:85:bf:48:d2:78:76:
86:f5:9f:fe:70:f2:9d:36:78:61:23:0e:31:67:a6:65:25:db:
58:6f:71:3f:cc:be:62:08:dc:9c:6d:66:7d:2b:2c:0b:d6:da:
41:03:80:ad:72:c0:2f:2f:73:ec:80:21:55:e2:9a:44:f7:c1:
f3:29:fd:70:8c:e4:cc:44:84:eb:a2:d3:2b:5f:3a:4c:98:d1:
ad:63:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:40:58 2025 by rpki-client