Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier: WU95rF2+KetndiH2QggoyfoR6g0b1IqNJcJ7xOkomKc=
Subject key identifier: 82:CF:0D:1D:A3:CB:E8:B9:49:EA:2D:5B:24:30:A3:B3:23:A5:3F:C7
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 05:00:28 +0000
Manifest this update: Fri 31 Jan 2025 05:00:28 +0000
Manifest next update: Fri 07 Feb 2025 05:00:28 +0000
Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: +jIwY67KGrnT7ZStFo1roPqhdFGZ+M7J1nUfdSnYqkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Validity
Not Before: Jan 31 05:00:28 2025 GMT
Not After : Feb 7 05:00:28 2025 GMT
Subject: CN=679c58ec-c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:89:ef:3c:fc:1d:62:9c:05:91:7e:32:6f:
6a:cd:d8:17:10:2c:f2:0e:d7:38:14:40:26:ed:05:
d2:c1:c2:df:df:25:4a:4c:ba:bc:5f:40:70:fd:3a:
52:cb:e8:5a:b7:2e:6d:04:88:09:8a:50:85:33:98:
cc:cf:88:89:17:4a:db:f7:4d:2c:dd:1b:79:c6:ce:
9f:ad:a4:8f:03:19:d6:b9:44:0b:f2:19:26:ab:6f:
47:27:b8:6e:e3:da:1b:d1:83:b4:d7:a6:31:5b:1e:
55:20:dc:18:3e:b5:21:bf:8c:b2:2b:a6:73:38:8d:
e6:b4:84:bd:a1:6e:69:c4:7d:09:7c:21:38:48:8d:
f8:33:a8:1b:d5:03:f1:d0:4d:70:38:c2:88:0a:f7:
d0:f7:65:45:58:95:52:16:81:1a:65:03:7a:bb:08:
73:05:1a:f5:50:01:e0:85:b7:d3:46:f0:13:40:40:
79:46:2a:57:82:d7:fb:47:37:85:80:8c:0c:41:ff:
e2:9d:b0:f4:65:f9:b7:10:41:aa:39:89:31:37:aa:
0f:f3:4f:66:08:52:36:f0:be:f7:1f:48:c9:ba:86:
c2:0f:95:56:a2:8f:19:47:51:f7:58:9f:c5:b6:9d:
91:35:e0:64:6a:49:49:63:c1:eb:17:d5:42:af:01:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:0D:1D:A3:CB:E8:B9:49:EA:2D:5B:24:30:A3:B3:23:A5:3F:C7
X509v3 Authority Key Identifier:
keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e0:76:9b:b0:1c:0d:3f:74:a9:de:e8:dd:2e:85:a4:f1:91:
92:38:83:c6:f0:d8:9b:ad:6e:85:b6:76:6b:40:45:1b:b1:4a:
46:90:ff:e2:c2:26:1a:a3:78:71:b9:17:a8:9f:31:94:76:cd:
f2:66:b8:86:96:b4:6f:f1:f6:b8:60:c5:7e:8a:36:84:f7:60:
e6:cc:05:2f:7a:40:80:29:f4:21:75:2b:4c:e6:52:24:d0:29:
72:eb:3d:9d:40:f4:39:09:06:61:0a:6e:c4:fb:6f:24:57:7a:
a9:90:80:49:88:73:46:96:59:41:ce:9d:26:6d:b7:9a:7e:6c:
b3:29:29:73:3a:b3:36:35:43:6c:ef:31:36:40:d5:eb:04:d4:
98:87:67:df:cb:85:9a:9a:3b:b9:6e:bb:82:5b:7d:57:b7:c8:
42:8e:e8:f0:3c:c6:92:cd:e7:8a:ae:a4:b7:62:00:39:28:38:
69:7a:75:94:75:26:dc:97:29:6b:5b:24:e5:45:75:fd:1f:b3:
17:45:9e:c2:66:a3:0f:85:cb:86:71:b3:49:38:c8:98:85:64:
d7:6f:47:e0:f3:41:e4:9d:65:de:e5:46:02:a4:e1:df:30:f2:
66:2a:b6:00:e0:f7:b2:b5:c5:1a:bf:97:b0:cb:a6:2c:f0:36:
c1:94:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:10 2025 by rpki-client