Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier: +akcb95GaoqKSDx8PE+kQlD8HBvAYNjCSjKcA7N+jzE=
Subject key identifier: 5D:20:5B:51:24:6D:7D:35:AB:FB:1D:45:C4:31:36:32:69:BC:14:0A
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 3487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number: 3468
Signing time: Fri 31 Jan 2025 15:20:22 +0000
Manifest this update: Fri 31 Jan 2025 15:20:21 +0000
Manifest next update: Fri 07 Feb 2025 15:20:21 +0000
Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: qA5GZNEWld/+4ZaVDVDoeANOYBTgB/WGEJ8KnNhq9+w=)
2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: rwJT2YdcBWIo+AYt6oaAo4E5fXWOqiy9ZBXvVvPoImY=)
3: 9554034062CB11EEA41B6D2EC4F9AE02.roa (hash: x5SsZ9fPo44FXXa4cVncXx0ome2Tsxvse4Uv1sTSAKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13447 (0x3487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Jan 31 15:20:21 2025 GMT
Not After : Feb 7 15:20:21 2025 GMT
Subject: CN=679cea35-8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:2b:88:6a:32:21:8e:1e:ce:27:f3:84:90:
6d:00:19:04:32:3f:a7:f0:41:e1:c1:62:77:54:58:
b4:d3:c0:99:f3:8d:c2:a6:3d:7b:bf:eb:80:43:e2:
3f:b2:65:95:f0:d8:62:c5:08:01:d5:44:04:99:1b:
c8:d8:b0:a3:d9:c8:82:c5:d0:49:75:b3:3e:5b:61:
92:6e:e4:9c:95:8d:1e:33:16:2d:7c:5c:23:98:fd:
82:4a:c0:5c:69:97:49:31:b1:8d:0b:32:bf:95:2c:
85:a7:73:a9:12:20:b9:12:53:ff:26:5d:2b:26:f4:
85:5d:b5:19:aa:7a:ce:83:a4:95:06:5f:84:b0:31:
85:a9:2e:da:3f:83:c4:fa:e0:68:fd:e5:9c:2e:28:
49:17:7b:34:ce:b0:21:66:02:62:47:6c:b3:f7:9e:
f0:22:55:1c:b2:5f:1b:28:b3:70:1b:e0:1e:8f:74:
46:5b:2f:2e:49:57:ea:ce:55:fa:ed:97:90:9a:75:
78:24:e6:46:79:80:2d:1b:99:59:ec:b1:ae:2a:aa:
91:a5:5f:3a:0d:3a:3d:c5:ad:41:a6:a6:af:4e:68:
87:bd:7d:17:93:07:7a:d5:07:64:4b:87:21:22:4e:
a7:77:04:22:94:a2:91:b1:24:68:a8:80:dc:b6:d1:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:20:5B:51:24:6D:7D:35:AB:FB:1D:45:C4:31:36:32:69:BC:14:0A
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:b0:00:c0:b0:ca:25:9a:8d:f3:1c:27:a1:d9:42:a9:4d:
10:ad:1a:65:8a:14:5b:e0:b9:b3:e5:ba:58:95:f8:17:cd:87:
5a:61:28:ee:b5:67:f6:af:5a:b1:6d:3f:81:0c:d8:a5:0e:7e:
e4:00:68:1e:88:ce:0b:f6:0f:9d:40:1d:04:f9:cf:79:ed:d5:
2f:d8:f0:c5:7a:91:29:1e:b9:3d:ae:ec:ac:c5:22:37:30:8f:
bf:24:03:59:fd:5f:91:8e:16:eb:27:b1:26:18:df:09:1d:7e:
92:85:4a:95:a4:96:1f:4d:4b:46:09:ce:cb:48:cc:18:21:aa:
93:a4:f9:de:bb:a2:5e:87:7f:b6:93:29:e3:4c:2e:8a:2c:f2:
9f:67:4a:a3:d6:f3:f9:9e:74:0d:cf:d0:77:f6:44:5b:2b:69:
ad:97:cb:67:17:b5:3e:c0:d4:bf:04:f6:24:95:d1:df:af:04:
65:e3:d1:4e:d7:9c:1e:56:64:6c:40:2e:25:1c:69:a9:5e:9b:
34:93:70:c4:98:67:0e:5b:43:79:2c:c3:0e:f8:20:30:5a:09:
87:f9:28:0d:1b:ad:1d:b0:9c:4b:aa:83:27:6f:7c:39:c0:e9:
76:51:a0:27:c8:8a:6f:83:1e:5f:c3:88:72:5f:06:fc:ad:60:
98:36:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:35 2025 by rpki-client