Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json)
Hash identifier: p+B5s7zM5rkWCyDi8REKd7lG5XbUHuZCPiXID6p+kT8=
Subject key identifier: 2D:B3:69:91:91:BD:B8:21:80:51:C7:C7:A8:74:9F:41:81:3D:5D:AF
Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
Manifest number: 48
Signing time: Sat 29 Mar 2025 06:40:08 +0000
Manifest this update: Sat 29 Mar 2025 06:40:08 +0000
Manifest next update: Sat 05 Apr 2025 06:40:08 +0000
Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: +Un8lfmnqlt478U4TEuw+CakyTmCVL32gubzvVIYhF4=)
2: 181772049FD811EF8680B438C4F9AE02.roa (hash: kL8m2A2/eVPCA0J/9/iLQOKzk2RiAB33QgbmFjlKwTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170D3E
Validity
Not Before: Mar 29 06:40:08 2025 GMT
Not After : Apr 5 06:40:08 2025 GMT
Subject: CN=67e795c8-145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:c0:f1:65:5f:fe:96:7c:e1:b4:ed:66:19:
fb:2e:6a:e4:70:55:25:dd:25:ce:d6:f6:9b:40:4a:
9c:32:5f:3c:d2:6e:28:73:bd:4d:8f:04:d0:cf:9d:
15:0c:17:ea:26:08:36:1d:a4:ae:c1:b1:6a:11:2a:
3a:e5:b0:65:d3:fd:b0:3b:15:ab:84:6c:9d:85:10:
46:e2:71:7c:51:ca:29:e4:2f:4f:55:84:7f:46:ca:
c8:d6:6e:75:d4:d9:94:4c:84:80:8e:8d:fe:b4:50:
5f:36:fd:45:4a:1c:e5:19:9d:09:43:cf:2c:a6:4e:
04:f0:69:23:98:b6:64:a4:55:94:e1:e7:fc:7b:41:
0e:e6:13:77:d8:8f:8a:99:98:d6:f7:99:02:4b:4e:
32:0e:ba:28:66:a4:40:19:cc:97:01:00:d3:db:f1:
76:9a:7f:c2:23:0b:70:92:77:a2:04:34:58:b8:d4:
38:90:e5:eb:e3:2f:e8:4a:ea:7d:14:0a:ab:ca:cc:
77:3e:ee:b7:ac:46:59:ac:79:dd:fe:e0:10:58:b4:
e9:77:1e:c3:d2:2f:f1:96:a1:59:54:f3:7c:27:fc:
21:3a:7e:91:f9:87:3e:7f:db:62:38:41:f4:8d:cf:
7c:bf:f4:32:95:16:42:65:5f:0b:27:2b:7f:e5:8c:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:69:91:91:BD:B8:21:80:51:C7:C7:A8:74:9F:41:81:3D:5D:AF
X509v3 Authority Key Identifier:
keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:db:ef:c4:a2:5d:61:cd:6b:4e:08:10:25:5f:c5:a0:2d:c9:
4f:7b:1e:62:21:ef:a7:8d:0d:0c:d1:de:94:c5:8c:b4:20:cf:
9b:d2:2c:c1:c0:35:51:c3:6e:45:cc:fb:e1:f5:6b:b5:fa:5c:
60:df:a1:76:7d:9f:d4:c0:26:fd:fd:6b:93:0b:13:4c:3d:b3:
3b:5b:1d:de:2d:7d:dc:d5:a9:c6:9b:49:fb:a3:96:41:44:fa:
13:a2:bf:78:df:c5:12:09:e3:d0:8a:44:83:00:db:f4:f5:ef:
30:80:08:da:cb:03:d6:7a:fc:37:7c:81:3a:50:93:aa:47:dd:
ee:d6:41:72:a2:47:8b:d0:52:8e:ea:77:f7:58:5f:09:86:45:
2f:d9:10:1b:15:e5:ee:5e:f6:98:f0:b4:3a:67:6d:c3:8e:1a:
65:82:b3:b0:e0:da:50:aa:ed:ee:b3:10:b4:6c:61:97:75:d3:
63:12:2e:67:c2:a0:9d:ce:0b:ae:1a:a9:c5:d9:19:f1:8d:47:
0e:44:70:8a:01:90:2c:cf:4c:20:75:a1:46:a4:c1:9b:87:f5:
3f:60:23:1b:df:a1:a7:e8:4f:7d:4a:32:e8:57:b6:f2:70:51:
42:31:5a:0a:e3:87:60:f0:96:36:b6:96:c8:c1:d1:20:7a:d2:
1f:c4:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:56:07 2025 by rpki-client