Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier: Vwc0SHK/bNzWoRob+JLuzT8V3yqkcfg9N1hjXYNKUYk=
Subject key identifier: A1:E5:95:FD:B3:4C:B7:30:11:B2:3D:4F:3E:1B:F5:D3:DE:9B:34:8A
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number: 084C
Signing time: Thu 30 Jan 2025 20:45:49 +0000
Manifest this update: Thu 30 Jan 2025 20:45:48 +0000
Manifest next update: Thu 06 Feb 2025 20:45:48 +0000
Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: LV2vc3QcMKtdC7ykl8a6PAluNVS+NpavGpjZLVjNpzU=)
2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: DuiwpTOQ+46YBE83w0bBmQr9D587PUkTi9Qcefln7w8=)
3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: MNcUqPXfQ3T7UPwRoUK7X0hW547D3dFI8SMQm2Rhlgo=)
4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: wFdzUcR7oncBOhkt6Qq97Sk0B7MxmE0B0n56PLJLLfc=)
5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: qcQxgCc6f6DKvBXXPV7Z6QbMISYQ+I0+B+jlVDj3umU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Jan 30 20:45:48 2025 GMT
Not After : Feb 6 20:45:48 2025 GMT
Subject: CN=679be4fd-158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:41:f1:9d:fa:25:3f:cc:b2:6c:fd:ab:ec:
15:7e:ee:e0:03:da:59:7a:e4:9d:32:c7:79:a2:f8:
30:88:81:6d:21:6e:b3:84:67:73:6d:ef:b7:46:40:
2e:4b:49:75:9c:bd:e9:24:bc:44:86:1c:47:bf:ae:
c3:dc:48:5c:a4:94:7d:ab:12:b3:96:8e:dc:c7:2e:
78:c9:ef:5c:2a:5e:d3:81:71:82:46:8e:4d:9d:06:
16:7c:87:da:74:d7:53:6d:94:10:d7:7f:42:0c:fb:
ce:d2:5f:57:eb:2e:6c:4e:e7:21:24:31:1f:a9:32:
07:d9:bb:9f:df:9e:8f:e7:8a:4d:73:3a:df:aa:ef:
22:37:36:c9:19:b7:be:4c:85:cc:e8:3c:d3:d3:26:
4b:f0:05:9f:39:a6:db:d9:c5:ef:f3:5e:cb:ce:93:
6c:d8:57:5c:94:ea:5e:f9:99:1a:ca:75:b5:4f:37:
b2:05:ec:a0:8f:49:e2:d9:da:f4:b7:0d:93:42:82:
74:08:0c:16:d8:15:f5:51:4e:e8:dc:e8:64:c2:fa:
e5:20:b1:ea:60:5a:b1:bb:b8:9a:a2:3e:12:0d:83:
6f:09:66:7b:c1:79:f5:19:8c:72:07:36:89:bb:92:
18:4d:cb:28:eb:bb:8e:d6:20:e6:2c:fa:de:8e:6f:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:95:FD:B3:4C:B7:30:11:B2:3D:4F:3E:1B:F5:D3:DE:9B:34:8A
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:65:36:2f:dd:29:cf:9e:f6:bd:0e:f8:d3:a6:e2:63:09:ab:
4b:6b:2a:02:58:a3:dd:d9:07:9c:4d:06:06:e0:11:c8:1a:fa:
0c:db:44:8b:bd:52:35:9c:d9:73:bc:6b:c7:a1:85:e4:ee:9e:
24:a0:df:61:62:7a:d2:25:57:1d:87:60:20:ed:ec:f1:8f:d4:
86:b3:35:92:1d:1c:31:8c:fc:74:e7:fd:99:0e:db:2d:78:6f:
9a:51:e6:eb:f3:6d:90:c1:2c:23:83:6d:8f:d8:1d:5b:74:da:
3a:af:58:7e:06:bc:e6:07:58:a3:07:92:12:2f:85:1d:cd:e5:
02:bd:44:d8:a2:75:a3:49:79:f2:fa:74:7e:e4:f5:c4:e6:04:
41:bf:61:50:cd:ff:6b:be:75:68:c0:13:50:0a:76:ae:00:52:
a8:63:e1:37:1e:45:4b:9e:91:c7:bd:53:45:95:bf:64:fc:12:
cc:dc:cd:5b:b0:63:20:fb:09:eb:48:b4:7a:08:37:ba:01:af:
9c:1b:c2:a5:8c:be:09:23:b9:7e:fa:cd:80:e9:5f:2f:ed:e9:
42:df:82:de:b0:5e:b9:e7:d4:3a:7a:92:ea:c5:52:79:ee:b8:
ed:93:49:88:01:e3:08:40:58:f1:d0:e3:8d:1e:23:1a:6e:c8:
81:f9:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:54 2025 by rpki-client