Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
File: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json)
Hash identifier: nj7flhLt5qCHmICo/D/U/lkRjYNk8dwuVt9yYy809cg=
Subject key identifier: E8:AE:3C:5B:29:58:AB:1E:D9:5C:37:58:3C:D1:24:BD:2E:A6:56:9C
Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46
Certificate issuer: /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
Certificate serial: 0374
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
Manifest number: 0370
Signing time: Sat 29 Mar 2025 01:10:36 +0000
Manifest this update: Sat 29 Mar 2025 01:10:36 +0000
Manifest next update: Sat 05 Apr 2025 01:10:36 +0000
Files and hashes: 1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: 1VXC7Xr8pZe7TD8ycGQHh0SW3eAQBItkVg0WEW61boQ=)
2: 6664BEB29F8611ECBE806D30C4F9AE02.roa (hash: 3Zz0SoScV6fPNZfJ9ERkFkDBxGo2mzRnK0TlcOdgOTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170533
Validity
Not Before: Mar 29 01:10:36 2025 GMT
Not After : Apr 5 01:10:36 2025 GMT
Subject: CN=67e7488c-7ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:a9:f7:8e:fc:cb:71:de:b8:85:9c:76:35:
95:42:f2:4e:53:a8:a1:5b:3a:44:4b:e4:a9:5b:f2:
a0:14:f1:93:87:b8:4d:83:64:fd:f2:11:cf:50:86:
80:44:6d:5e:25:8f:4b:ba:21:50:b4:18:79:d9:6c:
4b:7f:aa:f3:d7:f8:a7:75:6e:e1:ba:6d:bd:e9:72:
eb:0e:28:9f:f1:20:67:bd:d9:7e:84:c2:55:cf:4b:
aa:c2:c8:da:1c:17:59:6d:0f:33:c2:0b:12:45:02:
e8:62:16:9d:0b:9b:15:4a:fd:d0:cf:40:c7:43:91:
32:59:b1:ec:b1:42:2b:2f:e7:2a:b1:00:7c:d9:bb:
f7:7b:b0:7f:f5:07:9f:64:14:26:4e:55:a9:06:78:
88:76:58:0e:1c:b6:ba:18:70:95:23:29:f5:57:cf:
ff:55:d9:5d:b7:10:aa:db:98:22:c1:17:92:1a:bd:
2f:6b:06:6d:00:5c:81:68:71:b7:26:35:5b:eb:b7:
d5:c1:c0:a4:14:de:e7:e7:06:60:c1:e8:6a:df:39:
bc:cc:67:23:d3:34:75:42:3d:7e:ff:ba:0d:e9:e5:
c4:8a:58:88:c7:61:b8:8a:8c:67:5a:3b:74:33:b5:
67:77:2e:3e:35:ad:63:47:3e:fa:79:c6:47:17:9b:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:3C:5B:29:58:AB:1E:D9:5C:37:58:3C:D1:24:BD:2E:A6:56:9C
X509v3 Authority Key Identifier:
keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:5c:36:bf:0c:ef:76:4e:1e:48:26:68:e0:31:1d:dd:90:
7c:19:f0:7d:be:a7:94:d8:eb:00:18:22:0a:09:43:3d:5c:e7:
7b:4f:35:ef:89:2e:f1:50:52:90:ec:30:48:50:fc:bd:e0:cd:
14:ed:c8:bf:77:de:87:5a:c3:c9:13:c5:0e:be:11:e4:99:94:
c2:8b:fc:77:ee:d6:98:e6:71:8a:ca:e0:8c:4c:6e:f6:66:05:
63:5c:e1:db:2c:a8:ad:52:3d:4e:9b:55:d2:0e:4a:ba:54:5b:
d3:aa:18:79:27:e4:47:bc:03:28:5c:92:65:c4:29:6d:fd:b8:
98:0b:43:51:06:5c:5d:87:64:b9:1f:15:06:cc:bb:f9:6f:41:
d3:7e:f7:f6:cc:e9:ef:89:5d:8f:7d:dd:d9:da:b1:e6:d3:62:
bf:22:6f:a5:58:51:9b:8b:bb:5f:10:2e:ef:ea:b0:ef:dd:1a:
00:81:71:c0:d0:8c:ac:18:4b:8e:92:dd:26:42:c4:1c:7e:04:
f3:8b:c8:8a:b5:f4:34:c7:e0:02:6d:15:78:2e:a6:e7:5f:f6:
fb:71:0a:50:e1:83:54:4f:99:c9:e1:13:5e:b5:a9:71:1e:45:
ac:d6:2a:43:78:4f:b8:91:69:3a:f1:46:f0:23:62:9a:b2:da:
e6:f7:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:04:34 2025 by rpki-client