Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft
File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json)
Hash identifier: paoefGEOGY8Qeyi6EIu2SAau/1/4ShaE1oAXFDqMiys=
Subject key identifier: DB:0A:6C:0A:39:77:F2:28:82:90:29:B8:03:1D:9E:70:E9:11:33:8E
Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94
Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794
Certificate serial: 0B01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft
Manifest number: 0AEA
Signing time: Fri 28 Mar 2025 19:35:41 +0000
Manifest this update: Fri 28 Mar 2025 19:35:41 +0000
Manifest next update: Fri 04 Apr 2025 19:35:41 +0000
Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: 42LZeMkIS5Nn4hIJZVYWw5wP2T0rZD/dJAsnnUz4/58=)
2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: zTAfwveIPTRwXSl7hQHDO93OE6PzSAULcilI97W7uGU=)
3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: w5Xib41tLpZBqTFHg11KbjSl/uzEpQNvFqS2fLAocwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2817 (0xb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C24
Validity
Not Before: Mar 28 19:35:41 2025 GMT
Not After : Apr 4 19:35:41 2025 GMT
Subject: CN=67e6fa0d-8b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:1f:8e:4d:04:84:7b:d8:e2:7b:7b:89:34:
8e:a8:ed:24:33:08:73:d7:5a:ed:e2:cb:14:13:b9:
07:d1:6f:b4:2a:f2:ea:f1:a4:7a:12:5e:66:11:8a:
cf:e4:4c:41:09:8e:60:50:76:95:0f:ee:70:c6:d0:
fb:fb:66:8c:21:e4:f1:7a:17:b4:85:cf:20:4b:0d:
9f:2b:d7:c7:61:9f:ea:74:c7:03:bd:6c:6d:84:11:
d0:bf:b7:f0:2a:fa:c4:3c:de:6a:63:0e:95:35:a0:
41:17:ee:8d:44:cd:7f:85:ca:f8:2e:d8:11:0f:43:
5f:1e:26:76:b0:e6:2a:2e:5d:7d:ed:12:fe:5c:88:
b1:cf:b8:ab:7f:30:7f:9b:f7:ca:51:64:a6:ab:9e:
aa:7e:7f:cb:e5:15:eb:36:c8:4e:33:80:f7:7f:6d:
d7:de:40:c0:6b:92:c7:3f:1e:10:96:88:68:16:ae:
2c:8b:96:47:cb:d3:30:b8:4d:d1:59:69:94:79:16:
14:d7:9a:85:a7:8b:b5:dc:7f:6d:d3:34:17:c9:d5:
78:13:bb:1c:de:4b:9f:a4:54:b7:6e:51:81:44:db:
b3:81:87:7e:c7:78:51:85:3c:a6:21:dc:82:0b:d4:
11:ab:af:dd:68:3b:bc:ff:58:38:4a:29:77:85:f5:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:6C:0A:39:77:F2:28:82:90:29:B8:03:1D:9E:70:E9:11:33:8E
X509v3 Authority Key Identifier:
keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:9a:6d:39:3d:8d:f3:4b:35:47:e8:a2:79:5b:58:cd:ef:
9b:47:ff:3f:5b:81:d0:ed:39:71:62:6a:af:e3:a4:96:00:65:
0a:b4:96:46:99:91:e8:f3:dc:16:47:f3:6a:9b:47:f4:24:ce:
aa:28:06:7c:a8:86:a0:07:92:b8:32:44:7e:12:3a:33:fb:06:
67:da:ec:50:19:6e:83:38:31:89:55:79:6f:17:20:16:ba:df:
1b:03:43:0e:f4:c7:6e:6a:a9:88:91:d6:f0:9a:4b:ec:8f:3b:
ed:93:c8:28:f4:e9:1f:3c:a2:76:6d:81:1f:68:c3:47:a8:6d:
2e:b8:df:fe:27:64:2e:ea:ad:45:2a:bf:b9:8e:c7:50:8f:3a:
1a:ed:52:1b:63:08:ee:3f:0b:f7:be:0c:a8:e7:10:07:42:86:
e4:51:ec:fc:5a:5f:01:72:1d:87:39:2b:f9:5a:92:ea:34:40:
18:66:86:56:bc:e7:ef:3f:9b:b6:59:70:ce:e6:4d:92:13:56:
c9:45:01:3d:86:ac:85:5b:53:e7:3c:69:6a:b5:56:2d:61:a7:
3f:97:82:62:6b:68:61:74:19:41:b9:59:ac:d1:94:d5:61:34:
e4:7e:db:25:72:36:83:d1:2d:3d:b1:39:0a:0f:12:dd:21:0a:
f3:ba:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:07:14 2025 by rpki-client