Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json)
Hash identifier: 4MxqKaKLKhVq4VSw+XoTZ3WDyhrPHuXAhOwxWRdvtkc=
Subject key identifier: DD:94:5B:FE:57:0B:11:35:8C:02:D2:09:66:57:D7:4E:A9:80:14:90
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial: 0702
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
Manifest number: 06FA
Signing time: Thu 30 Jan 2025 21:54:07 +0000
Manifest this update: Thu 30 Jan 2025 21:54:06 +0000
Manifest next update: Thu 06 Feb 2025 21:54:06 +0000
Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: Pw4Lfe/iw5WBAGQGnuadsTFfDjymXNi+Rm11pdVUUuk=)
2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: zhnmsmc/g0LWn+TJAjTjuEzqoDewcjKeARZv6m3Jwn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Validity
Not Before: Jan 30 21:54:06 2025 GMT
Not After : Feb 6 21:54:06 2025 GMT
Subject: CN=679bf4fe-daa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:2c:63:14:a0:d5:aa:45:f8:86:e0:2d:cc:
08:3b:2f:6b:6b:df:b9:83:a9:01:ec:d2:96:e8:61:
30:55:dc:50:bb:e9:e6:d7:fc:02:6d:77:1b:16:a9:
c6:ac:6b:b9:9c:cd:aa:03:ae:ac:e3:60:b2:b1:13:
85:fc:cb:ed:66:12:7f:d3:fa:fb:ed:9e:35:8a:2f:
71:e8:20:98:05:e6:40:c7:bc:4d:1b:f6:bb:fd:be:
4b:29:10:be:e0:9b:a9:f0:62:aa:17:ea:a9:6f:d3:
00:99:ac:9d:9b:e9:5d:7d:3c:2d:3e:08:3e:48:f3:
b2:8e:87:d6:c8:73:28:01:f3:b7:4b:de:cf:21:e2:
c2:65:13:07:28:96:b2:5f:70:50:86:14:5b:d7:6e:
7d:cd:be:f4:f7:49:eb:17:83:69:a9:29:41:97:fb:
02:c4:30:41:46:18:67:49:a1:bc:18:c2:8e:6c:83:
c1:74:67:59:e0:cc:67:46:70:bb:e5:00:5f:f1:1d:
cd:b2:b1:4b:6b:8a:21:06:2f:5f:6d:68:75:2f:98:
18:f1:90:20:5f:24:23:93:3a:d4:83:9a:4b:80:05:
2e:39:cd:96:fc:33:2b:6f:b3:fd:1b:33:19:36:0a:
03:98:87:a1:92:d1:3a:97:0f:19:de:6c:41:6c:9a:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:5B:FE:57:0B:11:35:8C:02:D2:09:66:57:D7:4E:A9:80:14:90
X509v3 Authority Key Identifier:
keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:92:77:32:e0:0b:a8:50:31:98:84:97:b9:9e:9a:be:44:7a:
a9:9f:da:b3:70:a1:cc:8b:3c:ff:cb:da:17:73:3e:25:dc:89:
7f:b3:3f:58:99:1c:2b:be:50:ec:05:2a:51:ca:3a:4d:de:16:
9f:a2:d8:b5:12:7d:b0:2c:5f:44:65:36:32:66:1a:dd:13:e3:
e9:25:31:46:58:f6:7d:e9:73:2b:3b:e2:de:24:de:7e:71:e0:
ea:97:36:01:ed:91:bc:99:0e:83:87:cd:92:e8:9d:f0:e1:33:
75:7b:46:8c:c8:fd:a9:97:e2:46:a1:76:a9:06:37:23:b8:9f:
61:aa:28:a1:6d:9f:0a:eb:b1:51:29:bb:be:99:64:a9:95:4c:
1a:a0:ef:7b:79:b1:aa:8e:b5:e5:ef:64:80:8f:10:8e:07:fc:
cd:6a:f6:7a:ff:cc:d2:31:39:cb:98:ae:57:f3:a3:5e:28:47:
64:c9:2b:3e:2b:54:20:2d:69:5c:5a:dc:07:fb:6c:f6:89:cd:
fa:ec:1d:19:88:8a:33:44:3b:e5:5e:b4:6f:51:13:bc:db:a5:
28:4d:3d:d7:d9:be:a4:0f:55:58:97:97:05:0c:c3:c2:83:4f:
9d:7d:63:b8:dc:dc:77:b6:0c:01:6d:b5:f6:fb:a1:71:34:d9:
9f:88:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:38 2025 by rpki-client