Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
File: YEennPxgdi4PMhSxYHc2mnY_65s.mft (raw, json)
Hash identifier: cmSZjPzgKVbxJZaPTc4qcAWcYPvZ2RgTjKyKHn4NyBI=
Subject key identifier: 4C:7C:22:77:4B:00:28:7D:E4:B5:16:0E:C6:06:EC:2E:0B:10:CB:F7
Authority key identifier: 60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B
Certificate issuer: /CN=A91EE162/serialNumber=6047A79CFC60762E0F3214B16077369A763FEB9B
Certificate serial: 0502
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
Manifest number: 04FE
Signing time: Mon 24 Mar 2025 23:32:57 +0000
Manifest this update: Mon 24 Mar 2025 23:32:56 +0000
Manifest next update: Mon 31 Mar 2025 23:32:56 +0000
Files and hashes: 1: YEennPxgdi4PMhSxYHc2mnY_65s.crl (hash: +jTJUq9+LT6rBT40AUVqcsyrza79MefRZfzTcWqF38A=)
2: 93B31E9600BB11ECB60BA225C4F9AE02.roa (hash: c3S0BvaFR7pPeOgvysFCrT5s6wA73iHrClvOLjPbAlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE162
Validity
Not Before: Mar 24 23:32:56 2025 GMT
Not After : Mar 31 23:32:56 2025 GMT
Subject: CN=67e1eba8-98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:b5:1a:2b:42:31:b0:ad:a0:44:35:48:b4:
b3:87:6e:3f:97:7e:16:d6:0d:20:c4:16:86:20:5f:
81:cd:5b:54:82:e0:67:1d:4f:66:0e:a8:72:75:47:
d7:0f:38:0f:27:1b:55:2e:96:d8:00:22:d5:7d:0a:
3f:d8:e6:40:9b:c6:4c:e9:c1:cb:e6:de:a7:61:ce:
ea:d9:de:24:df:75:58:46:11:bd:6f:00:60:a9:e0:
16:0e:98:e1:d0:b1:20:e2:43:5f:a6:9b:0f:28:99:
c9:12:7c:1a:7c:c8:c8:67:7c:d8:8f:3e:69:01:9c:
43:25:26:e2:64:f3:c7:7f:63:27:bc:90:6c:b8:03:
8e:d5:28:2a:75:17:bc:24:7b:8e:a2:8a:f8:1d:d2:
46:ec:8f:69:2a:7c:45:fe:56:79:7e:05:48:8b:cf:
08:3f:bc:a0:63:c4:15:2b:56:a9:ff:ba:64:89:25:
24:99:52:f5:50:41:2d:dd:49:b4:72:69:55:b1:ef:
6a:3c:e4:79:44:9f:e1:8a:57:44:d0:a5:ad:3d:fa:
fe:eb:a5:90:68:bf:d0:41:82:50:11:7a:af:22:77:
19:44:10:ad:09:f9:94:25:8f:62:cc:58:b5:0e:07:
17:a2:c3:01:a5:94:65:7b:f3:9d:aa:e6:a9:77:bb:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:22:77:4B:00:28:7D:E4:B5:16:0E:C6:06:EC:2E:0B:10:CB:F7
X509v3 Authority Key Identifier:
keyid:60:47:A7:9C:FC:60:76:2E:0F:32:14:B1:60:77:36:9A:76:3F:EB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YEennPxgdi4PMhSxYHc2mnY_65s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE162/396D8FE200B711ECBB181E1FC4F9AE02/YEennPxgdi4PMhSxYHc2mnY_65s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:27:ee:04:53:56:7b:8b:28:3a:77:59:63:9e:e4:ee:70:
d5:d0:a2:96:cb:6a:2e:06:27:39:bc:9e:9e:26:20:43:fb:e3:
6c:40:56:82:c5:a4:a3:9b:4a:7e:d6:99:08:fb:5f:9f:c1:c9:
43:dc:f5:bc:82:a8:b6:03:8b:a9:20:4c:d1:f3:ef:09:a7:47:
ea:74:d0:17:86:f4:cb:d1:77:11:88:a1:ce:d9:e3:2e:aa:a7:
2b:3a:01:99:34:03:94:14:c0:67:4c:2f:2b:e1:73:c9:07:00:
fd:a4:41:71:ec:98:bf:64:29:a8:44:ee:e8:e1:ba:0e:8f:30:
e8:cb:91:92:de:24:4f:55:98:1d:68:9a:a1:50:87:d3:c0:da:
b1:74:94:e8:44:10:20:a5:f5:1b:73:e8:17:26:9e:84:f4:d2:
e9:1a:87:7c:5d:2d:98:27:f0:8b:77:08:57:7f:23:bb:cd:9c:
87:20:5a:63:51:9b:2d:cb:4b:c6:12:16:07:e6:96:f8:6f:15:
74:3d:94:ea:6c:af:f3:82:01:37:9b:03:ea:fe:2d:18:93:df:
8c:49:95:f6:de:88:2d:3b:d2:07:30:19:29:db:4d:7b:5c:4c:
e3:c8:5a:47:51:bc:26:80:46:48:4c:e6:ac:0f:e6:31:de:e5:
55:2a:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:32:26 2025 by rpki-client