Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft (raw, json)
Hash identifier: 8eThOLF3bUEwbiHq/BZpJq7loR+7xR88/esvIsMWVis=
Subject key identifier: 6E:45:38:84:E8:5C:F4:B6:8E:46:CA:61:F0:A6:DF:33:C6:EE:7A:35
Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
Manifest number: 0107
Signing time: Fri 31 Jan 2025 04:26:29 +0000
Manifest this update: Fri 31 Jan 2025 04:26:29 +0000
Manifest next update: Fri 07 Feb 2025 04:26:29 +0000
Files and hashes: 1: QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl (hash: xSCa5kaUEkxG3WxcrUAK5aouhfVGzEEAU3JXbdp66Vk=)
2: 437375BC7F5111EFB8735348C4F9AE02.roa (hash: MiUmrOUrY1jCxzNkOhDOwwFLSpw0fp+op0zeu0tdUGo=)
3: E8B6593E38D611EF9B2A0B1CC4F9AE02.roa (hash: ML05tIhfPPPKTJGxmiWcRHeARlxvccwno//ZTa1YmaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Validity
Not Before: Jan 31 04:26:29 2025 GMT
Not After : Feb 7 04:26:29 2025 GMT
Subject: CN=679c50f5-a0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:61:96:e7:30:49:44:60:50:fe:ac:b4:4f:
1c:ea:4a:53:ea:3d:c8:94:1a:9e:ce:fb:2d:c6:4c:
82:13:78:65:ec:a9:bc:18:c0:68:80:cf:a2:4a:1a:
8a:b2:49:14:36:2c:87:e4:b6:a6:de:dc:c6:e2:60:
16:41:f9:f1:9f:f8:62:c5:45:3f:d4:98:da:c0:44:
4b:cb:c3:a4:58:58:7b:75:5f:50:7e:dd:5b:8f:09:
01:77:bd:ec:1f:e4:56:81:21:bb:7a:d3:f7:bd:01:
e0:ee:d2:e6:6e:37:a3:a2:71:aa:a1:a2:94:c2:4d:
f1:92:9a:6c:67:1a:c4:cf:99:06:37:dd:ad:b2:c9:
f8:16:0f:89:dd:58:cf:e6:1d:3a:fe:1a:3f:11:fc:
a2:c9:80:4f:b2:90:dc:48:f7:a3:20:4c:8d:d9:f6:
72:1b:74:81:5b:03:19:c4:bf:b9:01:16:1c:b4:d2:
a5:63:7f:75:07:33:7c:17:44:47:6b:df:33:c8:06:
12:65:8a:54:6f:96:b6:a3:cb:a9:cb:5d:27:0f:1f:
a0:fb:d4:36:70:94:38:34:8c:99:c7:c4:3b:0a:3a:
2f:81:1e:2d:d3:92:47:3f:19:a6:84:0f:31:bf:71:
6d:b1:ee:46:3d:1c:7b:a6:e7:42:f7:2b:05:ca:9a:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:38:84:E8:5C:F4:B6:8E:46:CA:61:F0:A6:DF:33:C6:EE:7A:35
X509v3 Authority Key Identifier:
keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:0f:25:59:4f:41:23:08:2b:b6:f6:83:69:22:3e:d9:d3:
e4:f5:81:b7:06:7f:e0:7d:8d:40:e8:6c:68:9f:4c:cf:ec:3a:
65:ad:4e:2d:c1:c5:70:ce:55:30:74:c1:30:5f:6b:c9:6d:f0:
e0:6a:97:9e:a2:4a:d3:89:c8:5c:ab:e3:5d:8a:fd:db:e3:0e:
ad:3e:1a:fc:b7:87:18:41:53:38:66:47:1e:f1:ca:95:9f:d4:
7f:82:62:28:df:da:e6:2c:19:96:ac:ae:c3:f8:8d:90:a5:f9:
15:bf:12:8d:92:73:34:67:83:a2:46:df:8b:42:9a:62:c9:48:
79:b6:2f:49:6b:28:2c:45:d9:b9:d7:e3:35:ab:41:88:88:dd:
4b:19:25:93:cf:fa:7d:8b:89:9a:90:0a:ad:44:05:b6:8e:43:
50:b3:53:03:d7:3d:f1:ec:0c:3e:94:7f:36:10:ba:29:6c:d7:
e8:44:a9:7d:3c:8b:ed:9f:9c:23:0f:51:fc:32:02:92:45:d5:
39:9a:84:2e:c3:3d:cd:5f:a8:f3:dc:77:ba:e3:43:18:20:33:
28:6f:fb:f0:4b:e6:72:38:9e:88:a4:96:31:7e:c4:44:5d:e0:
7b:52:d1:f5:70:5e:55:76:b4:64:4c:a5:ab:2b:cc:72:73:3d:
00:cc:66:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCMTcxMTAvBgNVBAUTKDQyRjI3OTFFRUFDMUZDN0Q3RUMxMEI2OUYyNUU5RUU5
NURBQjM0RTEwHhcNMjUwMTMxMDQyNjI5WhcNMjUwMjA3MDQyNjI5WjAYMRYwFAYD
VQQDEw02NzljNTBmNS1hMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvFhlucwSURgUP6stE8c6kpT6j3IlBqezvstxkyCE3hl7Km8GMBogM+iShqK
skkUNiyH5Lam3tzG4mAWQfnxn/hixUU/1JjawERLy8OkWFh7dV9Qft1bjwkBd73s
H+RWgSG7etP3vQHg7tLmbjejonGqoaKUwk3xkppsZxrEz5kGN92tssn4Fg+J3VjP
5h06/ho/EfyiyYBPspDcSPejIEyN2fZyG3SBWwMZxL+5ARYctNKlY391BzN8F0RH
a98zyAYSZYpUb5a2o8upy10nDx+g+9Q2cJQ4NIyZx8Q7CjovgR4t05JHPxmmhA8x
v3Ftse5GPRx7pudC9ysFypqvfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5FOITo
XPS2jkbKYfCm3zPG7no1MB8GA1UdIwQYMBaAFELyeR7qwfx9fsELafJenuldqzTh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUIxNy81OTY2REQyNjcy
QTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9IMS13UXRwOGw2ZTZWMnJO
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F2SjVIdXJCX0gxLXdRdHA4bDZlNlYyck5PRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUIxNy81OTY2REQyNjcyQTcxMUVFQjEwQkU4NTJDNEY5QUUwMi9Rdko1SHVyQl9I
MS13UXRwOGw2ZTZWMnJOT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBl3w8lWU9BIwgrtvaDaSI+2dPk9YG3Bn/gfY1A6Gxon0zP7DplrU4t
wcVwzlUwdMEwX2vJbfDgapeeokrTichcq+Ndiv3b4w6tPhr8t4cYQVM4Zkce8cqV
n9R/gmIo39rmLBmWrK7D+I2QpfkVvxKNknM0Z4OiRt+LQppiyUh5ti9JaygsRdm5
1+M1q0GIiN1LGSWTz/p9i4makAqtRAW2jkNQs1MD1z3x7Aw+lH82ELopbNfoRKl9
PIvtn5wjD1H8MgKSRdU5moQuwz3NX6jz3He640MYIDMob/vwS+ZyOJ6IpJYxfsRE
XeB7UtH1cF5VdrRkTKWrK8xycz0AzGZZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:32 2025 by rpki-client