Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: HVcs/p8L2ZJAxcO8swI4FFvJ+lBydop3AEt0CbQkUM4=
Subject key identifier: B6:40:97:C5:71:43:E8:4F:D6:80:C0:09:B4:9D:AC:6E:55:4D:63:19
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 121D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 1204
Signing time: Fri 31 Jan 2025 17:09:50 +0000
Manifest this update: Fri 31 Jan 2025 17:09:50 +0000
Manifest next update: Fri 07 Feb 2025 17:09:50 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: odWPjBpIsLqMt+IA1XmVGn2CYxX2PwtdU+adh8eisyc=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Validity
Not Before: Jan 31 17:09:50 2025 GMT
Not After : Feb 7 17:09:50 2025 GMT
Subject: CN=679d03de-bb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:20:fb:2c:23:95:19:4e:08:37:76:c5:00:
49:b4:81:0d:f7:72:7a:15:2f:f7:0d:71:f2:6a:7c:
2e:b2:5c:28:d2:1f:87:5e:b1:d4:30:7a:51:5c:61:
93:5e:25:fc:05:5e:69:f1:75:1d:5e:be:5b:c1:72:
85:8e:9c:40:81:3e:51:ad:d5:93:1f:5e:bf:a0:c7:
fd:5c:bc:dd:f7:4c:21:ca:c2:ba:40:ba:14:10:ce:
31:a0:44:9c:e4:cf:e9:78:19:5f:d4:f1:28:f8:26:
cb:7a:18:eb:c4:ea:f1:8b:4c:9a:ea:b3:4e:d7:8d:
b3:65:8c:38:36:54:93:87:fc:3e:7d:67:bf:46:7a:
3a:26:01:1a:a6:ab:43:ff:d8:85:af:e4:8f:d0:40:
e1:73:5b:15:33:6f:ff:cd:10:92:4c:d9:52:81:e8:
ab:20:b3:8b:e0:c5:34:08:0b:b8:57:2d:78:5f:ba:
b5:66:c4:dd:72:55:1b:88:9e:c5:53:62:4b:1b:f4:
77:75:65:2e:b1:cc:df:a6:21:04:2e:f7:d8:e1:35:
63:94:71:cf:76:ea:d5:7a:53:0b:e5:f8:d5:5f:e0:
fe:99:9f:86:33:56:73:e0:a0:54:0b:7c:bb:55:70:
e2:f2:4e:e2:c5:7a:cc:9c:77:7f:c3:c3:13:47:c0:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:40:97:C5:71:43:E8:4F:D6:80:C0:09:B4:9D:AC:6E:55:4D:63:19
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:52:66:1d:a0:20:3f:36:d1:68:8d:4a:40:cf:2b:ee:50:bb:
c3:54:e2:69:b1:ed:34:65:db:0d:64:b8:2f:97:ce:95:be:61:
06:c0:59:2a:c5:70:9c:cb:28:d0:b3:82:c0:f4:cd:67:66:c3:
c7:b8:61:ab:03:5e:e4:05:29:fc:26:b7:d0:3d:1c:4f:94:a4:
5e:bb:4c:44:93:e6:1c:58:c5:75:fe:45:ef:ec:e7:f4:eb:fa:
97:a8:e0:00:e3:65:98:d4:77:e0:58:3c:fa:3b:1a:6b:12:36:
39:6a:9a:f8:ad:68:b2:2e:fd:a6:0c:74:81:65:ce:5f:e3:aa:
4e:e2:16:ee:3a:5a:b5:e7:f5:b4:92:87:47:8f:30:48:eb:b0:
c5:49:66:fc:a2:f8:8e:ff:1c:73:b6:38:a7:93:4c:6a:26:76:
bf:52:b4:16:65:1d:44:d7:8c:fe:70:0c:f4:8b:9a:e6:13:54:
85:61:bc:96:aa:b8:ff:cb:fc:05:be:ec:48:31:d1:bb:71:bf:
b4:47:ab:55:69:2b:ae:c2:87:08:3d:e3:3f:5b:34:bc:f4:21:
f1:18:3e:74:14:ce:ba:cd:2c:be:cd:13:01:85:6c:0b:4e:69:
32:46:33:02:08:58:11:65:a4:d2:7f:c4:65:4c:ae:02:a8:52:
a3:71:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:53 2025 by rpki-client