Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: BcrIBwzt/nqxfWBg6+8ZgiXV8sqhH8yn3d0uA35g2YA=
Subject key identifier: B6:25:B0:B1:64:DF:63:0A:1E:E4:B7:84:47:CD:6B:B5:8F:BA:4E:87
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0C7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0BC3
Signing time: Thu 30 Jan 2025 19:17:48 +0000
Manifest this update: Thu 30 Jan 2025 19:17:48 +0000
Manifest next update: Thu 06 Feb 2025 19:17:48 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: SXBe7fKKcX+YfqwHGCObtEhQskTi4SPbRmiF5LmepOE=)
2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=)
3: A0169DBCC9F211EF986EE370C4F9AE02.roa (hash: mxnd4bKMnM6vFAxjyjj3PMkKozFl61/lGpJC+uIpTxc=)
4: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=)
5: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=)
6: 51E0E8F6705F11EF97D9604FC4F9AE02.roa (hash: r8ER7MZWjqI9rg+ZmaWCcejrQuZoRi4E7E1k6EKhYpY=)
7: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=)
8: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: 08kq3N2T6u9VBQ7SP6eASP9Fa/uiNzMCtB0p+sr0X3w=)
9: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=)
10: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=)
11: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=)
12: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=)
13: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=)
14: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=)
15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=)
16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=)
17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=)
18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=)
19: D0B10316030C11EF89EB2145C4F9AE02.roa (hash: Gej+KvJzxksRbXf9MDUrKVIkeJNRWuoQ13umTdja1qU=)
20: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=)
21: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=)
22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=)
23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=)
24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Jan 30 19:17:48 2025 GMT
Not After : Feb 6 19:17:48 2025 GMT
Subject: CN=679bd05c-7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:fa:d8:b1:36:9b:94:52:38:22:19:ba:2c:
b9:e9:cb:20:b0:90:aa:8b:03:98:7f:8c:b3:51:ab:
8c:67:5f:e4:0e:c4:b3:38:55:16:fb:72:93:13:2c:
1d:55:05:0a:a7:dd:54:de:05:0b:32:40:fc:16:26:
f7:51:85:6c:70:76:7e:0a:f7:00:44:2f:82:31:b8:
47:8a:b1:cb:97:45:69:d5:d3:6a:ab:b2:49:db:e4:
37:4b:4c:c2:b2:41:cd:8a:7f:56:9e:ee:1d:ba:fb:
6d:98:2c:cd:d1:23:2f:4b:ea:bb:04:52:b1:de:a9:
0b:33:86:a8:9e:7a:06:90:f2:c0:83:73:9f:59:0c:
00:89:11:6f:97:b6:15:e5:24:97:d1:4f:52:a1:06:
83:a1:bc:6b:94:e8:75:9d:89:c2:44:ae:7e:a0:71:
ca:8e:b8:0e:4c:0c:c1:c5:68:29:fb:f1:6d:f3:ac:
97:ce:06:b2:17:ce:9f:4a:82:ae:26:7d:e9:b7:5d:
44:cc:8e:c3:2b:1c:2f:4a:a1:c4:ab:62:da:aa:61:
51:40:73:32:c8:d9:dd:72:95:ba:6e:05:30:2b:6c:
fe:3a:67:62:01:ee:50:d9:b6:a6:c8:99:c8:03:d7:
e2:73:fc:07:8b:f8:95:ad:77:df:f7:51:a9:f4:15:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:B0:B1:64:DF:63:0A:1E:E4:B7:84:47:CD:6B:B5:8F:BA:4E:87
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:a3:a2:ae:12:7d:34:34:89:ea:7e:70:95:92:00:bc:50:64:
fb:b4:3f:06:58:ef:37:ea:62:e8:22:fe:8b:d8:6c:a1:04:25:
15:5e:ac:b6:e4:5c:2b:6b:f7:42:26:78:f7:e0:15:4b:5f:24:
18:cc:16:55:2f:ce:56:4b:1d:03:50:f4:b1:6e:cb:33:c4:22:
a1:70:81:0d:5f:d3:61:c3:a1:f8:ac:b5:a9:be:d0:fa:4f:11:
11:0d:38:c4:88:80:dd:64:f5:49:d8:db:81:57:fa:24:29:91:
f7:3a:d5:35:29:02:dd:d4:42:4b:69:7a:bc:11:c2:82:ce:ed:
b6:e9:15:55:15:25:12:93:0d:0c:7a:4d:ec:d1:75:4c:bc:93:
f4:89:a4:4d:8b:3b:3b:e2:73:d2:97:b1:00:18:2d:c3:f9:77:
7f:e5:98:3d:88:52:33:90:05:63:08:7d:31:0b:b5:29:70:6d:
a2:78:3e:b8:60:84:f0:e0:25:7e:5c:90:8a:0d:67:ac:a2:8f:
e6:4e:62:12:a6:af:bc:01:51:1a:e3:32:a3:09:2e:b1:61:8e:
d0:76:f4:e0:7e:63:ec:fe:af:c6:97:47:8f:46:07:5f:5f:f3:
3d:66:02:ba:b7:c3:10:bc:b8:c9:91:59:0b:20:d5:1b:65:b9:
3a:87:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:26:51 2025 by rpki-client