Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier: 2eE4H48YlrJPm3h3v0B+egVYNaNKrPGrvJF05YkhHW0=
Subject key identifier: F2:D2:42:4B:3D:12:83:6C:5D:CE:34:52:22:F1:8A:29:91:F7:59:18
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial: 078F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number: 078F
Signing time: Thu 30 Jan 2025 21:13:33 +0000
Manifest this update: Thu 30 Jan 2025 21:13:33 +0000
Manifest next update: Thu 06 Feb 2025 21:13:33 +0000
Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: /he/RQdycFj0s7DxgPkwCh+LiHSHs+xQ6/97/22jBbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Validity
Not Before: Jan 30 21:13:33 2025 GMT
Not After : Feb 6 21:13:33 2025 GMT
Subject: CN=679beb7d-d006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:b2:0f:49:72:a3:02:65:a2:1c:97:53:9e:
ad:af:30:e1:d8:30:b9:4b:b4:af:34:ef:db:78:81:
c8:78:eb:76:69:12:e3:98:e8:aa:ae:75:0f:d3:8e:
89:8d:c9:37:db:89:ce:f3:5f:4d:be:e2:f5:7c:eb:
3e:04:96:6d:25:92:93:95:ed:ea:8e:1a:a5:46:0d:
12:0b:10:78:f8:93:f5:69:1e:d3:46:7e:f4:d0:77:
e0:bd:ce:85:a7:94:9b:b7:c4:55:52:5c:17:e3:7a:
93:d1:b8:d3:a6:da:c8:c0:57:e8:33:f8:7e:54:b7:
18:b4:d4:e7:0b:f0:38:78:84:8a:64:e5:7e:16:35:
d7:65:14:e5:92:d1:6a:da:6a:1d:bf:bd:4d:9b:76:
1c:35:8c:28:e5:ad:b8:f1:26:ee:6c:23:64:84:a7:
a4:cc:0d:29:e7:3e:af:36:08:f9:27:30:a8:33:4f:
47:e6:7d:19:b4:8b:2e:35:b0:6f:6c:d0:8d:cc:33:
b6:99:98:fb:c6:6a:ff:3c:5e:53:ab:9a:1e:71:df:
d5:a6:ee:2e:8f:09:4f:11:1d:52:e8:6f:42:5d:b5:
1b:4b:6c:43:1d:59:19:90:43:4b:38:83:2e:07:06:
e1:70:14:38:0b:f0:0a:70:2e:3a:28:c8:91:8f:dd:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D2:42:4B:3D:12:83:6C:5D:CE:34:52:22:F1:8A:29:91:F7:59:18
X509v3 Authority Key Identifier:
keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:da:14:a2:e7:d4:9a:01:bd:46:bc:e0:64:ca:5b:a4:28:9f:
88:ef:0b:a8:3b:6c:b3:04:1d:2d:53:2e:6d:49:c3:af:f0:4a:
30:1c:7d:ba:72:1a:1e:4b:17:ff:d6:17:37:bd:c9:d1:fa:0a:
74:a1:0c:80:8f:83:3b:04:d3:e4:48:ac:ae:0f:9d:43:f2:87:
0a:cf:f0:95:33:ce:05:21:46:8a:df:da:82:5d:91:02:d0:02:
ce:4b:cb:68:45:19:56:01:27:c8:00:f9:e6:a5:9f:18:14:51:
18:9c:68:31:1f:1c:c4:c7:b1:30:e0:a9:c4:94:8f:e6:94:b2:
6c:09:de:13:0c:d6:62:66:f8:ef:30:0f:86:88:a4:ab:ee:8c:
4e:93:63:e0:d0:0f:74:d4:85:c5:bf:1a:b9:f8:22:f9:3d:56:
60:a4:51:56:09:e3:2b:3d:45:35:cf:5d:44:fb:fa:35:f0:9d:
f3:8f:33:50:1b:18:11:2d:2a:f1:e3:e9:cc:16:62:c6:07:e8:
c3:d9:e6:cc:9c:56:12:b7:0a:9b:6b:74:28:b0:f9:0e:f3:b2:
2b:a9:b6:0d:c7:0c:70:58:1d:f2:d9:60:ef:ca:fc:ce:5a:e0:
99:c2:1a:3e:7b:e0:61:fd:be:f5:68:6c:df:7c:e6:0d:36:cc:
62:07:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:03:09 2025 by rpki-client