Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json)
Hash identifier: iQU5TJNrrgmtMJRVXaHIPNPdQRYA5nPBByN3lnCXL6U=
Subject key identifier: C5:B7:BD:A9:A4:2D:95:4A:66:DE:CD:1E:32:D8:55:73:D4:87:0E:93
Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7
Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7
Certificate serial: 1162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
Manifest number: 115B
Signing time: Fri 31 Jan 2025 17:13:43 +0000
Manifest this update: Fri 31 Jan 2025 17:13:43 +0000
Manifest next update: Fri 07 Feb 2025 17:13:43 +0000
Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: Xyz8U17W1+3qEICE50rnNB+ML2iaxVVdlsc0+uthk0c=)
2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4450 (0x1162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7
Validity
Not Before: Jan 31 17:13:43 2025 GMT
Not After : Feb 7 17:13:43 2025 GMT
Subject: CN=679d04c7-78e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:7e:88:ff:d7:35:d5:18:c9:be:4b:21:90:
5b:59:2c:aa:3b:60:aa:26:25:29:13:3a:d7:59:d8:
0c:10:90:11:47:62:a7:14:96:1c:76:24:2e:35:8b:
0f:36:17:2e:4b:48:60:b5:97:ab:3c:14:ae:4d:c3:
9b:0e:d7:4e:7f:49:9c:a0:28:26:64:ec:d5:35:7e:
90:b8:1a:35:90:b0:a0:cd:20:b5:92:c1:44:07:42:
00:48:45:e0:ff:92:2d:1a:39:b7:9b:d1:76:74:5d:
21:14:91:ad:ab:63:d8:0e:9a:81:d9:98:f1:c1:19:
44:b6:26:d2:4a:62:89:34:b9:11:af:40:c7:1c:63:
d6:8b:96:c1:09:c4:1b:c9:7a:75:40:60:9c:e2:d7:
a6:f5:11:0d:40:e3:00:64:d4:c6:57:e3:3a:b1:26:
a5:7c:86:38:a4:20:71:7d:35:ef:dc:f8:96:58:3c:
52:cf:87:23:51:d7:7d:ac:5d:f9:60:f9:21:65:1a:
ab:aa:21:f0:2c:ee:b0:9f:9a:c9:dc:c6:af:50:f8:
17:45:3e:e7:50:a6:b9:53:c4:1c:ee:48:55:0d:2e:
a5:3b:14:89:74:68:a3:57:d1:de:2c:f7:c1:7e:33:
25:a4:10:4f:82:4e:e5:9d:60:43:fd:df:55:18:bc:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:BD:A9:A4:2D:95:4A:66:DE:CD:1E:32:D8:55:73:D4:87:0E:93
X509v3 Authority Key Identifier:
keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:88:d8:a9:96:2d:38:8d:45:a7:40:40:88:bf:cc:4f:b5:9e:
fe:2a:80:c3:44:3b:b7:0e:ef:5a:05:9a:4d:df:fb:38:81:c8:
05:6a:e3:89:b8:3e:ed:8e:d4:78:c3:93:7c:8b:de:9e:9d:c9:
d1:7b:ce:fc:24:03:51:6a:9d:1f:85:d5:c7:5c:af:ce:69:12:
aa:ec:2f:cb:0e:01:ba:e3:ea:60:fc:56:59:f6:75:0d:fb:79:
39:4c:74:14:20:f2:80:2b:34:b4:db:23:a7:02:3c:9f:2d:d2:
8f:6c:b1:6a:62:fc:20:da:30:a5:41:16:cf:84:3c:eb:17:36:
1f:c2:b5:c4:80:0b:90:42:25:33:32:c0:4c:a8:a0:64:cd:5e:
33:99:b0:85:0b:6e:39:10:98:18:87:be:1f:6f:b1:b0:f5:c0:
f8:a3:ec:42:72:e8:92:48:ce:8f:ce:6b:0d:1a:72:bd:57:53:
4c:ec:8c:19:10:f7:87:6f:a0:ff:90:9d:bf:be:dd:45:b1:20:
f6:a1:04:79:59:90:ca:a5:c6:e5:38:9b:ef:78:8b:34:09:37:
72:81:0a:1e:37:11:58:3e:10:e0:5a:38:8f:dc:8a:90:71:66:
ff:04:c8:97:24:c9:57:3b:af:ae:01:fe:5c:c4:05:7b:78:09:
ba:ee:59:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4
NUI1MDBFQzcwHhcNMjUwMTMxMTcxMzQzWhcNMjUwMjA3MTcxMzQzWjAYMRYwFAYD
VQQDEw02NzlkMDRjNy03OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4md+iP/XNdUYyb5LIZBbWSyqO2CqJiUpEzrXWdgMEJARR2KnFJYcdiQuNYsP
NhcuS0hgtZerPBSuTcObDtdOf0mcoCgmZOzVNX6QuBo1kLCgzSC1ksFEB0IASEXg
/5ItGjm3m9F2dF0hFJGtq2PYDpqB2ZjxwRlEtibSSmKJNLkRr0DHHGPWi5bBCcQb
yXp1QGCc4tem9RENQOMAZNTGV+M6sSalfIY4pCBxfTXv3PiWWDxSz4cjUdd9rF35
YPkhZRqrqiHwLO6wn5rJ3MavUPgXRT7nUKa5U8Qc7khVDS6lOxSJdGijV9HeLPfB
fjMlpBBPgk7lnWBD/d9VGLy+UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW3vamk
LZVKZt7NHjLYVXPUhw6TMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4
M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp
dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASiNipli04jUWnQECIv8xPtZ7+KoDDRDu3Du9aBZpN3/s4gcgFauOJ
uD7tjtR4w5N8i96encnRe878JANRap0fhdXHXK/OaRKq7C/LDgG64+pg/FZZ9nUN
+3k5THQUIPKAKzS02yOnAjyfLdKPbLFqYvwg2jClQRbPhDzrFzYfwrXEgAuQQiUz
MsBMqKBkzV4zmbCFC245EJgYh74fb7Gw9cD4o+xCcuiSSM6PzmsNGnK9V1NM7IwZ
EPeHb6D/kJ2/vt1FsSD2oQR5WZDKpcblOJvveIs0CTdygQoeNxFYPhDgWjiP3IqQ
cWb/BMiXJMlXO6+uAf5cxAV7eAm67ll6
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:42:05 2025 by rpki-client