Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
File: y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json)
Hash identifier: lkumVoSVInhCWQzJi0/2BjyhBrfDfpb6HSfEVq1AujY=
Subject key identifier: 09:DB:22:1C:47:26:A7:E5:DB:68:18:7B:67:D2:EA:71:A1:CC:FF:19
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Certificate issuer: /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial: 0142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
Manifest number: 0140
Signing time: Sat 29 Mar 2025 03:46:58 +0000
Manifest this update: Sat 29 Mar 2025 03:46:57 +0000
Manifest next update: Sat 05 Apr 2025 03:46:57 +0000
Files and hashes: 1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: gnCDnlrFX2uHFsydEAg8kJq9uHEUhdX9ZoVt8G1FEzE=)
2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: mEyirxNNF/HUjbME+0mygxI2/51XwzfUXk7qYYI6cLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917845B
Validity
Not Before: Mar 29 03:46:57 2025 GMT
Not After : Apr 5 03:46:57 2025 GMT
Subject: CN=67e76d31-4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:24:f1:59:f8:bb:95:f7:23:f0:b1:cf:e1:
ad:6e:de:96:c2:0e:e4:6a:28:d9:80:e7:59:58:31:
3c:40:99:bf:29:6c:f8:18:6d:ca:e6:39:46:b8:83:
de:d4:d1:3b:52:a7:a7:df:ec:34:2f:1a:f9:70:af:
a1:8e:86:b5:0c:b8:58:e2:a2:6b:91:3d:52:5e:87:
d5:23:4c:86:ed:5e:da:50:58:94:39:2a:39:12:fa:
7e:64:c4:47:29:78:9c:5b:3b:d1:ed:23:15:53:b2:
3e:0d:a9:0b:95:46:86:a5:74:28:b0:61:c3:1f:99:
24:f7:2c:4b:74:c9:57:43:94:15:2b:6c:58:d2:de:
ae:c1:be:f0:3d:26:19:d5:73:6f:c2:0b:0e:83:89:
7c:6f:bd:01:28:05:8e:79:89:4b:f7:3e:86:0a:ba:
76:bd:c6:10:b0:61:72:30:2f:98:d5:43:12:21:76:
2c:f9:62:4d:4e:1a:1c:96:13:6f:ac:71:8b:4d:07:
78:34:15:d0:6a:27:cc:10:4f:bb:ff:98:ef:2e:76:
cd:57:7d:77:06:9c:03:a0:c4:44:05:b8:98:ce:6c:
36:0c:56:03:89:0e:63:12:b0:72:5d:53:93:c3:83:
50:06:3d:13:70:77:29:44:53:bc:cf:e4:a6:07:ec:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:22:1C:47:26:A7:E5:DB:68:18:7B:67:D2:EA:71:A1:CC:FF:19
X509v3 Authority Key Identifier:
keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:8a:0b:d4:66:dd:1d:7c:e5:bf:fe:91:6f:02:ce:50:c4:9b:
1a:27:bc:eb:a9:1e:f2:70:11:b3:dc:98:e7:62:c5:eb:86:53:
04:5b:4c:ea:06:13:16:81:4f:a2:17:ad:1d:50:f6:8c:f1:c9:
86:c9:fc:55:29:2b:8c:c5:09:c3:a3:c0:47:05:fa:8a:2c:5a:
98:ce:df:85:a3:53:d7:2f:02:2e:35:a5:32:46:c6:67:2a:89:
ba:9d:79:c1:37:86:2c:8f:34:73:0c:c2:43:a2:c0:1d:2b:16:
49:60:95:c1:dc:5a:30:23:ea:9d:97:6e:20:21:42:28:e2:ab:
b7:d9:09:40:c0:e7:27:f7:d7:ae:be:a9:da:d0:be:ee:1a:fd:
af:fb:42:51:3d:c3:b8:c4:89:b5:35:e7:c5:34:dd:b9:a7:ab:
2f:8c:8c:c7:56:7a:68:4a:35:0e:1e:e5:88:b7:46:58:de:ff:
7e:8e:ea:7c:2a:6d:e1:d6:3c:8d:07:91:0f:cb:74:ce:d2:40:
d9:97:db:ac:0a:51:19:87:3c:92:93:34:4e:1b:c2:fd:bc:08:
b9:fa:66:8c:72:fe:d1:82:57:6d:58:1b:91:d6:49:10:78:39:
c6:e1:39:57:0b:e9:38:ed:64:31:1c:83:77:7e:1d:60:ab:8d:
8e:59:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:22:50 2025 by rpki-client