Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File: QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier: 7c6KIiiov9vvwQxLbD6XKp+ou3euA7CuMMRNBsPqCkk=
Subject key identifier: 88:E2:68:93:04:85:67:A1:62:FE:42:63:6F:05:98:52:C8:A6:AE:74
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial: 0612
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number: 060B
Signing time: Thu 30 Jan 2025 22:47:11 +0000
Manifest this update: Thu 30 Jan 2025 22:47:10 +0000
Manifest next update: Thu 06 Feb 2025 22:47:10 +0000
Files and hashes: 1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: 4FqVXhfHrtSpUzT+7Etw3D8RTDRAzBQJKWyp+tGW5SU=)
2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: 9fks3NvnHOVB0kb3Kc99MGLGUTLgUhxpBqtGNsXU3KQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1554 (0x612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Validity
Not Before: Jan 30 22:47:10 2025 GMT
Not After : Feb 6 22:47:10 2025 GMT
Subject: CN=679c016f-202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:43:80:5b:76:7d:e2:b9:61:0d:36:3f:8e:
61:0c:05:ce:04:90:ec:3d:39:83:84:bb:b4:d6:26:
d8:26:e0:bc:be:e4:fe:00:3f:83:83:fa:47:2e:e2:
17:a6:c8:ac:88:2f:03:e4:f7:18:62:82:f2:5e:48:
cf:0c:f0:0d:6a:25:53:65:47:14:10:55:05:97:e2:
81:1d:d8:b7:13:52:5e:cc:1d:92:6c:5e:14:ed:e5:
74:e2:75:d8:5e:1b:39:71:d5:c7:a5:44:f4:d3:a6:
97:86:4e:a3:de:19:a4:a2:87:8c:52:1f:04:f3:f1:
4a:4e:c8:39:0b:10:25:a8:b2:4d:3c:09:7e:74:65:
86:1a:08:6c:6e:a9:9c:33:0b:65:1c:23:33:76:b1:
31:77:75:67:19:9f:16:e3:39:54:d3:16:5e:b0:53:
da:cf:6e:d0:35:c6:33:92:47:10:0f:02:95:f2:74:
9d:f5:09:3b:f9:53:ec:7b:f6:a1:12:38:1c:ad:ea:
d6:20:49:8b:a9:a4:d2:da:e8:ed:70:f7:a6:59:bd:
47:84:d2:1d:3d:84:91:bf:da:63:e3:ab:0b:ca:fe:
b9:eb:81:04:de:d1:eb:83:dd:0d:e4:9e:4b:06:56:
f5:11:af:c5:6d:fc:17:ae:90:b1:61:1f:ba:d9:b7:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:68:93:04:85:67:A1:62:FE:42:63:6F:05:98:52:C8:A6:AE:74
X509v3 Authority Key Identifier:
keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:c9:6d:0b:ac:dd:7f:9e:01:b5:25:01:3f:14:67:11:3f:16:
4e:b7:6d:0c:98:d3:66:d1:98:70:e7:93:00:6a:f3:3e:27:44:
88:0c:6c:d3:1c:3f:7c:cb:cf:bb:fa:4c:27:3f:fc:76:6b:c9:
b8:41:d6:b4:8a:82:31:10:ac:e2:7d:5a:13:8b:74:4b:25:a7:
29:d2:15:4c:99:df:e1:7c:48:d9:58:16:ac:0b:68:b1:68:4e:
82:2d:47:60:95:95:30:a6:c2:18:e8:2a:9f:2b:d6:8c:b1:f5:
c3:91:09:fb:64:ce:d9:37:1b:41:8a:bc:e0:ed:45:05:26:de:
ee:de:e5:62:d0:3a:2e:10:b6:09:7e:35:3a:03:59:f0:6c:9d:
b8:0a:08:8e:5d:09:fe:3c:15:a8:be:2d:54:a5:23:d1:b5:d6:
26:73:48:a9:fa:ef:d9:f9:60:3c:cc:2c:14:10:65:42:8d:75:
8c:ba:8c:bb:f5:fa:83:f6:37:88:87:c5:80:81:04:42:47:34:
76:d2:90:ec:7f:60:53:a4:a4:67:00:e7:b8:ee:dd:a4:5c:7c:
d7:00:bb:3a:a5:12:2b:2e:0e:cd:a1:17:f3:59:6e:36:4e:95:
92:13:c6:5c:18:17:ed:d2:93:98:23:26:38:7a:72:8c:59:44:
54:a3:70:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNGNDQxMTAvBgNVBAUTKDQwREQ2NjJCNkY2RTk3QjM0RDNCNzVBODAwN0RFNTM4
OEQ5MjcyNTMwHhcNMjUwMTMwMjI0NzEwWhcNMjUwMjA2MjI0NzEwWjAYMRYwFAYD
VQQDEw02NzljMDE2Zi0yMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJtDgFt2feK5YQ02P45hDAXOBJDsPTmDhLu01ibYJuC8vuT+AD+Dg/pHLuIX
psisiC8D5PcYYoLyXkjPDPANaiVTZUcUEFUFl+KBHdi3E1JezB2SbF4U7eV04nXY
Xhs5cdXHpUT006aXhk6j3hmkooeMUh8E8/FKTsg5CxAlqLJNPAl+dGWGGghsbqmc
MwtlHCMzdrExd3VnGZ8W4zlU0xZesFPaz27QNcYzkkcQDwKV8nSd9Qk7+VPse/ah
EjgcrerWIEmLqaTS2ujtcPemWb1HhNIdPYSRv9pj46sLyv6564EE3tHrg90N5J5L
Blb1Ea/FbfwXrpCxYR+62bdzdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjiaJME
hWehYv5CY28FmFLIpq50MB8GA1UdIwQYMBaAFEDdZitvbpezTTt1qAB95TiNknJT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0Y0NC82Njc3QkVCNjhD
ODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3Tk5PM1dvQUgzbE9JMlNj
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FOMW1LMjl1bDdOTk8zV29BSDNsT0kyU2NsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0Y0NC82Njc3QkVCNjhDODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3
Tk5PM1dvQUgzbE9JMlNjbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyyW0LrN1/ngG1JQE/FGcRPxZOt20MmNNm0Zhw55MAavM+J0SIDGzT
HD98y8+7+kwnP/x2a8m4Qda0ioIxEKzifVoTi3RLJacp0hVMmd/hfEjZWBasC2ix
aE6CLUdglZUwpsIY6CqfK9aMsfXDkQn7ZM7ZNxtBirzg7UUFJt7u3uVi0DouELYJ
fjU6A1nwbJ24CgiOXQn+PBWovi1UpSPRtdYmc0ip+u/Z+WA8zCwUEGVCjXWMuoy7
9fqD9jeIh8WAgQRCRzR20pDsf2BTpKRnAOe47t2kXHzXALs6pRIrLg7NoRfzWW42
TpWSE8ZcGBft0pOYIyY4enKMWURUo3BJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:18 2025 by rpki-client