Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier: GjgaOe46ncOvabGPPV3gciTpg8N7MN3T9tes5nQXLj4=
Subject key identifier: F7:42:E1:69:39:E9:8C:84:4A:3C:70:A7:61:18:0F:73:7F:A9:AD:96
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1DF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number: 3264
Signing time: Fri 31 Jan 2025 15:42:06 +0000
Manifest this update: Fri 31 Jan 2025 15:42:05 +0000
Manifest next update: Fri 07 Feb 2025 15:42:05 +0000
Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: u99yUJhWLNjwqZytub/oQXjUDeNnmAG1NxFbwGZsOto=)
2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: zBYE/5fRTCQSO3jWk1oOmSo/Ul1q1Praa4fc7ng9+AE=)
3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: X2qav5EFr+Ua635VH9BvI7EhV1owUod2CiDjBop2am4=)
4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: LAARyCxmzy516MHC0uw5Kfkv56HjOBgenKPezXUQvg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7664 (0x1df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Jan 31 15:42:05 2025 GMT
Not After : Feb 7 15:42:05 2025 GMT
Subject: CN=679cef4e-472b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:a0:3d:de:bc:ee:76:05:08:04:bb:ef:ef:
9d:41:f9:be:a3:0c:81:24:ec:b8:a2:0c:eb:ac:57:
42:ed:86:da:4e:23:d5:27:f7:81:75:b4:d9:62:4e:
cf:e2:20:41:99:4b:a8:82:8b:43:af:b2:20:8c:5f:
d8:ee:76:00:a8:4d:cc:2e:88:df:79:e1:46:bc:79:
97:e9:6f:1a:b3:a5:f3:b8:a3:a3:45:26:5e:0f:8f:
40:44:15:81:32:6c:a7:14:53:81:5f:67:02:56:e4:
38:92:50:6b:bb:f3:5e:3d:d9:22:93:82:7a:6a:c8:
38:7f:dc:04:7e:02:59:29:47:2b:72:3e:b0:f3:d4:
97:9e:e0:a1:06:a8:16:aa:50:20:70:3e:d6:91:ec:
39:40:26:0d:c2:ef:44:90:9d:69:4d:3e:af:f3:f8:
9a:db:13:fd:f9:fe:c5:71:97:37:06:bf:a7:0f:e0:
72:45:d3:0e:55:49:24:7a:09:4b:47:70:a4:e4:96:
ab:14:cc:e5:ea:0c:76:d1:ce:b8:58:31:27:bc:00:
a3:f5:af:ad:97:7d:c4:68:7f:3c:cd:b5:c8:38:4d:
9e:cf:12:1e:f5:8d:84:c0:e9:27:c8:5c:43:f1:7a:
c5:de:eb:0b:71:8c:cc:05:42:ec:92:80:2d:76:af:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:E1:69:39:E9:8C:84:4A:3C:70:A7:61:18:0F:73:7F:A9:AD:96
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:0c:af:6c:c1:f6:87:eb:36:76:6e:00:ff:96:f5:8e:82:
1e:0f:66:28:c0:d7:41:d9:40:e5:df:3d:a9:67:63:b6:11:a6:
c4:4b:8d:6a:e5:1c:14:4b:b1:bd:04:a3:be:be:99:16:af:21:
05:78:22:fc:94:5e:69:5a:c4:9d:69:70:d0:b6:bb:00:15:27:
9c:99:6f:44:c8:25:9f:c3:3a:23:04:44:be:ad:2b:08:56:ee:
32:ef:31:6f:91:4e:af:57:5a:e6:27:ee:d1:13:28:a6:59:9c:
98:69:c9:d0:44:77:3d:92:12:ea:7e:fa:3b:ad:6d:fc:23:97:
fc:65:2f:58:50:24:7e:17:34:c0:29:26:2a:a2:bc:01:d3:f0:
77:91:0b:f4:de:cd:77:44:b2:83:d2:05:af:7f:ff:07:8c:4a:
51:4f:28:22:34:7a:48:42:d8:75:e4:29:29:27:22:86:5d:f2:
8a:06:90:53:1c:75:49:44:2d:28:10:11:73:2d:ac:09:31:4b:
ec:13:cd:20:1e:94:98:bf:db:b6:a6:6d:19:4e:d9:b9:d2:cb:
14:04:d7:87:2b:66:14:62:36:df:92:66:0d:69:a8:4d:f4:80:
37:22:f8:68:eb:e2:31:a4:4e:0a:96:4f:24:b9:2f:f8:a3:e8:
ca:85:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:03 2025 by rpki-client