Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
File: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json)
Hash identifier: j1y9bPkNij/n/1Lc+Nk1KKsBCKj0kAgcWjDGjC60FnM=
Subject key identifier: E1:37:5A:68:CD:63:44:16:06:8E:1C:2F:18:FD:79:BF:1B:56:27:04
Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
Certificate issuer: /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 04:43:01 +0000
Manifest this update: Fri 31 Jan 2025 04:43:00 +0000
Manifest next update: Fri 07 Feb 2025 04:43:00 +0000
Files and hashes: 1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: RKTPtsAyalpYsml9WrT2cKvtnXNfQkrFl5RShVwbq9w=)
2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: qMb5p2DafyW8EWL0hOaIMJWbQyW8PlH7p5vaUcSXFyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Validity
Not Before: Jan 31 04:43:00 2025 GMT
Not After : Feb 7 04:43:00 2025 GMT
Subject: CN=679c54d4-ee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:f8:82:7b:94:f6:41:e8:f3:34:e1:18:a7:
60:13:34:b9:1d:16:40:8f:f1:9d:4d:fc:ad:3d:64:
cd:5a:bb:90:00:e2:5e:00:0a:af:32:79:f9:c9:6f:
fa:d3:aa:a3:36:21:38:b6:f1:a4:ac:f3:fd:df:c2:
01:58:65:6c:31:89:9d:66:69:dc:98:d3:b8:e4:c4:
7f:d2:27:c1:bb:61:c2:46:6d:3a:83:4b:56:e0:ce:
56:af:5c:e5:96:6b:f7:89:f7:69:71:21:f7:b3:d3:
ff:ff:ed:4c:96:94:86:39:65:76:cb:e5:1a:be:aa:
c2:de:34:fc:01:50:09:38:cd:da:fb:8d:a1:19:e2:
3d:1a:7b:67:31:df:6e:10:0b:bf:49:ce:fb:79:65:
8f:ab:3f:ca:6d:99:95:5b:f0:55:3d:ff:73:a6:be:
9a:35:3b:6c:56:e3:b9:75:47:04:a0:d7:c4:cb:d3:
87:7e:6a:40:03:b0:8a:3d:79:7a:f4:32:ca:a2:6e:
45:d0:f2:ac:b1:8b:58:01:b7:5a:e0:0f:f2:e6:45:
a8:4b:b9:86:58:e4:04:e1:85:f1:15:9f:cf:48:81:
e7:54:58:0f:fb:d5:36:36:3a:9d:a8:4d:f3:ea:32:
12:1b:a2:46:b9:4d:b3:85:b0:ef:4e:45:49:38:3a:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:37:5A:68:CD:63:44:16:06:8E:1C:2F:18:FD:79:BF:1B:56:27:04
X509v3 Authority Key Identifier:
keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:6e:bf:9f:7e:e0:df:fd:0c:9a:41:58:a1:1b:3f:76:5a:
18:b9:41:ba:08:28:d0:f2:c2:07:7c:5b:72:03:60:a1:f9:86:
d3:1e:ae:c8:49:04:ff:34:6f:62:bc:a2:54:75:0e:45:72:1f:
03:ff:f2:32:6f:5f:8c:70:4b:e8:e3:1e:b2:05:85:2f:10:38:
27:49:86:69:2f:c2:00:9e:9f:20:23:68:e1:ed:0c:b3:a6:e7:
f0:85:22:87:e4:58:19:97:c6:84:3d:ba:fa:8c:92:c4:d4:21:
28:d3:4b:37:7a:a9:37:68:9f:7e:51:87:e3:a4:75:a7:17:7a:
16:e8:43:ba:27:c6:a3:43:04:53:ba:1c:2e:b9:7e:1b:55:85:
81:ef:6e:6b:d7:0a:95:5b:c3:bd:2b:62:e8:e5:0d:7f:3e:bc:
d8:2b:f5:3d:f5:2f:b4:cb:e2:8f:70:2c:fc:46:44:c8:05:03:
4e:ec:29:5f:4a:a1:3a:da:8d:6f:25:2b:30:4b:28:06:2b:15:
be:04:db:f9:16:ec:5f:c6:a8:fe:69:d9:3d:6e:bb:62:66:8c:
2c:35:ca:e9:8f:5b:34:04:4c:99:f2:74:15:73:ea:12:2e:02:
26:5d:b2:5e:89:2e:0c:59:e2:bd:02:2d:f2:10:db:ff:cb:6c:
04:f0:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:10 2025 by rpki-client