Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json)
Hash identifier: x6QS5XjVcreL3mo/V0/Xcq9lltojaE9DujG0l8A8DSc=
Subject key identifier: 68:BE:4D:42:63:45:EB:59:90:41:79:DE:93:50:65:E9:50:BC:3F:D7
Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Certificate serial: 08FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
Manifest number: 08E2
Signing time: Thu 30 Jan 2025 20:31:18 +0000
Manifest this update: Thu 30 Jan 2025 20:31:18 +0000
Manifest next update: Thu 06 Feb 2025 20:31:18 +0000
Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: HYT6wjkMj0T1RsCVZ1Mxd6xZx4HTfA6luM5XNrSmuLQ=)
2: 9A357E62171111EEA9C5DD2CC4F9AE02.roa (hash: ZzvPd5LHjJjhVtmj0leruUn3ZgBweBo8kJim+9/25sQ=)
3: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 32vqSpioV/ocfZ8lNVlLrP1HBCXvPW2r4a1wVHXWwtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Validity
Not Before: Jan 30 20:31:18 2025 GMT
Not After : Feb 6 20:31:18 2025 GMT
Subject: CN=679be196-fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:2e:08:a2:f5:a4:4b:13:88:e8:92:63:e1:
cd:17:bf:5d:3a:49:fd:f1:15:2d:0a:3f:4e:ca:99:
3c:fc:48:47:12:13:d6:9f:50:63:ac:c8:fe:0d:72:
77:ed:c0:9f:02:44:f7:24:21:9e:f9:55:3d:cc:fb:
af:bf:49:e3:e1:84:06:e8:70:8b:c5:43:01:f3:4d:
91:b8:43:f9:5d:4e:15:aa:72:24:67:65:57:38:46:
7c:09:74:37:01:43:cb:95:ee:1d:78:c9:47:95:59:
2b:f9:97:68:0d:66:84:8c:1c:80:b7:42:04:4a:74:
cb:d7:98:32:8e:67:e6:0f:af:13:67:32:e0:43:d0:
e4:e3:ad:27:52:74:4e:e0:3f:cb:18:55:e3:7c:45:
0e:51:43:63:56:d7:2d:f3:4f:d3:d0:65:96:b9:26:
fd:08:22:87:fc:94:28:20:79:c8:b0:32:7f:8e:cd:
bf:d3:d7:ad:22:41:86:76:61:f3:d6:ca:b4:12:15:
95:37:99:53:ff:37:2a:99:00:58:ef:83:f2:4e:18:
ac:3f:da:1d:09:23:b3:b8:c7:24:29:bc:0e:3c:c4:
a9:01:91:12:65:c1:55:a3:6b:9a:97:e2:11:48:06:
d4:d4:97:95:b0:3e:2a:8a:32:17:89:00:43:61:f9:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BE:4D:42:63:45:EB:59:90:41:79:DE:93:50:65:E9:50:BC:3F:D7
X509v3 Authority Key Identifier:
keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:fd:9e:9e:75:23:d8:97:d6:24:50:eb:ec:64:7c:ff:b2:9b:
8d:cd:7b:42:fe:e9:00:35:70:87:1f:72:50:9f:b4:4f:85:9b:
4c:2f:d2:4c:53:40:af:d9:97:e0:39:c6:f5:b5:a4:d9:a2:b5:
93:6f:1f:ef:64:d7:23:68:2a:74:c1:48:19:c0:53:b5:03:25:
91:87:02:e6:3a:25:fa:29:ed:93:ac:d2:7c:5c:e0:56:d1:78:
3f:09:df:a3:3b:66:05:83:30:2c:0b:4e:45:01:14:49:d2:5a:
a6:90:cd:3a:68:f5:af:47:0f:65:be:4c:a5:a5:45:9d:54:ed:
f3:69:ad:46:50:49:ac:86:d8:b7:0c:22:a6:25:0d:a2:9c:62:
36:06:b9:54:0b:8e:6b:c6:32:43:8e:54:95:54:12:5a:06:a5:
57:a5:c1:00:d3:97:9a:ef:62:c9:76:7b:8f:96:b4:9c:91:ae:
c2:8f:80:3d:a9:32:1d:88:50:a1:69:c3:77:45:6f:81:4d:f8:
73:95:95:c8:ff:6a:06:f6:14:0b:48:77:fa:e3:25:40:ff:58:
d8:44:63:35:08:7c:14:aa:42:ac:90:ee:1d:a6:10:9d:10:d3:
7d:ed:4f:4b:1f:96:f1:2b:9c:c9:e9:69:16:5f:6c:62:8f:8d:
e7:c0:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:25 2025 by rpki-client