Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier: aMDJmkL7GNI2wFR/B95ET+Avt4ZNjUhrGTuC+qWBUvY=
Subject key identifier: 07:32:B3:C8:E0:F8:08:7A:24:B7:6D:2E:52:D4:AE:87:50:38:33:92
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number: 0151
Signing time: Fri 31 Jan 2025 03:25:36 +0000
Manifest this update: Fri 31 Jan 2025 03:25:35 +0000
Manifest next update: Fri 07 Feb 2025 03:25:35 +0000
Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: Vfnt557lsP+Blc023duaS/48ldVqnC1Q43a5o1QOL/g=)
2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: BX3eFxEq9yeeBZjSPRYwxqXIGZjkAuVHkNY/0eO84s0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Validity
Not Before: Jan 31 03:25:35 2025 GMT
Not After : Feb 7 03:25:35 2025 GMT
Subject: CN=679c42af-048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:27:be:1f:02:1c:77:e3:4d:5d:4b:27:5b:
34:04:50:21:b2:c8:bc:fd:18:c8:66:7d:cc:23:28:
9b:bb:11:0b:dd:79:44:ea:aa:e1:99:be:0f:9c:86:
a0:58:0a:d8:21:5f:52:73:1f:62:68:10:0a:b6:5d:
07:e4:41:92:be:26:e1:27:94:32:23:ca:1a:08:f5:
9d:04:86:e2:f1:ee:3e:db:02:47:75:2d:1e:69:c7:
70:93:b5:61:37:93:cc:df:94:d8:96:20:8c:b4:4e:
82:3a:2d:e1:c0:17:00:0f:fc:13:8b:5d:93:43:df:
93:91:0d:17:e8:ae:87:ea:87:f1:4e:74:a9:e5:b8:
7b:a9:f1:ff:91:65:2a:3a:2c:d8:73:ec:8f:0c:97:
23:71:60:fb:aa:73:1e:01:8d:71:d1:3e:88:9d:b3:
23:ca:2d:6c:54:86:af:9b:dc:4a:5a:20:51:e7:17:
ef:05:62:5d:c8:6d:e8:39:bf:87:98:c0:77:dc:12:
5d:72:2d:ae:49:0e:bd:df:ad:38:55:f3:05:ad:7e:
3b:90:6b:91:47:12:80:79:0d:39:1b:b6:99:33:64:
64:95:71:15:56:83:a8:e8:e0:2e:d1:ea:bc:8c:7b:
50:46:48:31:38:ff:62:5f:ab:45:fe:e1:9e:c4:77:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:B3:C8:E0:F8:08:7A:24:B7:6D:2E:52:D4:AE:87:50:38:33:92
X509v3 Authority Key Identifier:
keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:f5:b7:73:42:08:44:7e:13:5b:05:1b:d7:94:6f:4f:be:
36:18:3e:21:ce:84:64:77:3e:a8:5c:84:85:8e:a0:0f:46:4a:
4f:6c:13:8c:53:7e:99:e8:ec:01:7c:d7:22:6e:50:8d:f7:23:
f5:cb:a3:74:0f:d7:e4:99:4f:ef:9c:5f:a2:db:b7:37:4a:d8:
26:f1:0c:e4:26:25:3b:11:a3:02:81:43:ad:ea:d5:e5:6b:27:
c5:a0:a7:c2:fd:ee:cc:d3:3b:e0:b7:e2:17:90:eb:e9:84:12:
45:f9:35:0c:1b:a6:c9:b2:74:46:94:1d:d0:1c:d1:f3:d3:66:
13:da:62:2b:ae:32:e0:2a:98:a1:60:be:b3:2e:46:dd:46:55:
51:25:53:87:99:eb:da:bc:84:57:57:84:1c:19:54:a4:b7:f8:
1c:40:f2:7a:d8:9a:0c:a3:40:3f:1d:d5:6f:a1:49:08:a6:0c:
61:34:25:78:78:45:ce:ad:4e:64:7f:5f:72:be:39:71:11:ed:
65:e7:8a:f6:18:82:c6:d8:6c:e4:6d:55:79:78:40:c8:59:0d:
b2:b8:ec:3e:99:46:be:f3:56:82:df:d3:01:8b:ba:26:aa:c7:
82:57:f0:15:60:8d:ae:35:36:66:89:48:2d:65:03:4a:e8:9e:
6b:7f:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:33 2025 by rpki-client