Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json)
Hash identifier: p6s7R4uU5VVvhhA8bhKfKroTHW7ql8uJYKWTYgbV0sY=
Subject key identifier: ED:47:58:9B:66:97:2C:2F:DF:3A:5C:F5:8F:13:99:47:90:8C:B4:B4
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
Manifest number: 19
Signing time: Sat 29 Mar 2025 07:16:23 +0000
Manifest this update: Sat 29 Mar 2025 07:16:22 +0000
Manifest next update: Sat 05 Apr 2025 07:16:22 +0000
Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: balC1RU1Cy3PZmJj4U1Us1bGHHbQAFSv3Xjc6I0HM8A=)
2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: wZLv0x5Ye2YsFJ9ksDDY7rn+/yu0V//tFuTwHUih6i8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9766
Validity
Not Before: Mar 29 07:16:22 2025 GMT
Not After : Apr 5 07:16:22 2025 GMT
Subject: CN=67e79e46-e52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:e8:02:a7:45:30:de:8b:03:75:1d:fd:a1:
65:96:ed:f1:0d:6a:2a:fc:ec:ce:58:b0:ae:45:8e:
00:c4:03:3f:59:79:47:f2:8b:59:d9:8e:67:f1:3f:
f1:e0:f0:1c:71:09:34:20:e3:e9:4a:cd:4e:59:c4:
6b:3a:03:27:4b:25:79:b5:55:ec:a6:d4:6a:ae:7d:
5c:09:1d:18:44:2f:63:0b:96:58:92:3b:13:fc:c0:
91:42:4b:82:3b:0f:57:21:51:ce:17:a5:bd:a1:2c:
c0:d4:06:8b:36:72:f4:ba:0f:44:30:9a:cd:74:73:
87:12:77:b2:5c:e2:b9:7d:ae:56:27:97:46:90:bc:
d1:7d:9e:2b:30:66:74:81:3a:cb:5d:92:28:c6:d8:
bd:d5:e4:f3:ea:d5:bc:87:4e:63:06:77:86:bf:e0:
58:ff:9c:1a:f8:fa:43:83:7c:92:be:bc:3c:56:b8:
7b:56:aa:6a:f2:19:7d:6e:57:80:08:86:b1:e4:7d:
a7:0f:59:83:98:3e:b9:9a:ae:d1:eb:ab:cf:cc:4c:
e9:ee:e3:87:cd:60:e6:8c:a8:8d:0d:74:17:fe:39:
29:3e:25:fb:9b:53:69:05:83:f8:16:2f:97:2b:dd:
13:b7:d0:64:8a:f3:ce:0c:24:9b:db:44:ae:e2:62:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:58:9B:66:97:2C:2F:DF:3A:5C:F5:8F:13:99:47:90:8C:B4:B4
X509v3 Authority Key Identifier:
keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:ab:b6:ec:eb:f0:b4:e8:5b:84:70:e5:21:68:0a:fd:55:
75:27:6b:a3:42:e8:a7:1e:23:c9:11:07:c9:aa:53:ac:3a:46:
b5:12:67:c4:2e:24:94:61:f7:b7:6b:83:d3:47:b1:a8:3b:d6:
96:11:25:10:98:50:04:ee:c6:4b:39:d2:45:9c:53:8a:48:0f:
87:d0:f6:39:2e:12:92:dd:e9:6a:19:d5:ad:15:8a:1a:91:ef:
5c:57:25:66:4d:70:65:63:10:88:0c:04:a4:f7:18:24:88:91:
83:60:36:d7:cb:a9:4a:d7:94:25:dc:9d:ca:db:83:62:6b:20:
86:25:67:a1:61:0c:bb:fc:1c:02:f9:80:fe:bc:7a:a6:40:51:
a7:16:c8:88:11:d6:11:03:bf:a1:d0:34:3f:69:1c:53:2b:07:
57:90:52:f5:98:bb:15:37:1f:6c:c6:d3:97:3a:39:d1:7b:4a:
8e:7e:e2:19:54:43:bd:8c:5c:02:66:4d:8d:8e:fa:dc:f4:67:
9f:d2:89:c5:2f:9d:59:56:b0:22:b7:e7:00:66:0b:62:d2:4b:
74:fd:c5:b3:f5:29:b9:fb:31:11:1d:56:8d:11:c8:24:60:e5:
ac:2e:80:18:f8:e4:e4:e8:9f:72:a9:fd:a3:a2:89:a3:bd:31:
03:43:2e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:38:13 2025 by rpki-client