Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
File: QZ8npM_s9GHbgvb5BnZPttZfI88.mft (raw, json)
Hash identifier: LkwUw8mcDWtZ/eKuEoo6x7dOjf48m+8ZkKL9Pq5JGbI=
Subject key identifier: F1:15:9C:F7:6A:68:F0:95:1F:5C:72:AF:6C:A7:85:E3:04:D2:28:4C
Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
Certificate issuer: /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
Manifest number: 83
Signing time: Fri 31 Jan 2025 05:44:01 +0000
Manifest this update: Fri 31 Jan 2025 05:44:00 +0000
Manifest next update: Fri 07 Feb 2025 05:44:00 +0000
Files and hashes: 1: QZ8npM_s9GHbgvb5BnZPttZfI88.crl (hash: pCOhTQ+WeHheN+AKRcoFHx6q+eB8PQZdIZHMFI2cYH8=)
2: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (hash: TrqB+PZze3/PHsx+S+f9vvK9WuKsfRUtYIK0Ow1+dU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Validity
Not Before: Jan 31 05:44:00 2025 GMT
Not After : Feb 7 05:44:00 2025 GMT
Subject: CN=679c6321-b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:e8:01:7f:41:47:1e:ba:6e:d2:eb:2a:d1:
93:71:b9:2f:3f:9f:b5:21:6a:39:98:61:2e:39:ec:
78:03:78:10:94:74:c1:97:e4:94:f8:f1:aa:9c:22:
9e:29:5e:b6:6f:24:2d:50:a3:27:a1:97:8b:30:1f:
0b:18:03:70:4d:3d:3b:1f:61:e3:c9:03:72:d5:45:
8b:e3:e7:0c:94:0f:3c:ff:90:6b:cf:84:e9:ac:3a:
2a:b0:b7:6c:2a:90:8c:76:f5:4c:0c:c8:68:16:53:
44:a1:09:bf:04:9d:f3:02:d6:69:82:26:35:9c:75:
a5:d9:bb:04:0c:65:a9:d3:d4:c0:12:6f:44:1e:90:
e7:d8:9f:39:be:5a:bb:92:d9:3a:0a:48:05:15:68:
33:58:02:30:c7:74:99:ed:0b:c3:ba:97:c0:4a:71:
d2:93:cf:63:f9:64:03:58:11:08:5b:14:f9:e7:f3:
76:67:68:ba:e9:58:3d:31:50:31:f9:e8:fb:e7:60:
c2:ac:cd:aa:44:8c:5e:be:28:57:96:37:63:e5:e3:
c4:9a:cc:00:3d:e2:a5:fd:f5:d5:06:18:20:80:80:
86:db:83:67:e0:cc:e1:64:9e:db:ae:e2:46:c0:aa:
b0:50:6c:dc:5b:55:34:be:f8:c8:24:d5:02:0c:88:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:9C:F7:6A:68:F0:95:1F:5C:72:AF:6C:A7:85:E3:04:D2:28:4C
X509v3 Authority Key Identifier:
keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:c8:7e:6e:6d:1a:14:3a:91:59:05:33:1d:c6:b2:35:70:
ea:b8:6f:7b:03:d2:01:67:04:24:21:4a:c4:01:91:bf:55:04:
52:fb:15:75:f8:3b:6f:7e:e3:10:13:71:ce:e4:34:90:14:bb:
83:05:7b:dd:cb:4b:d9:fd:97:76:50:1e:15:f8:f3:af:48:ff:
9b:b6:bd:d7:d9:28:b3:d4:3a:e5:5d:6e:40:e6:03:ea:80:94:
a6:ae:a3:f3:3a:c9:54:fe:e8:e8:41:47:af:5d:cd:93:97:a4:
64:cf:1d:b2:55:0f:09:d2:66:04:91:59:c8:92:1e:aa:d3:4f:
74:3f:db:ec:2d:3c:bc:92:df:31:e9:7d:ca:19:d6:24:83:a9:
05:88:8f:5a:70:50:01:68:fa:68:f2:c6:17:fa:84:65:57:83:
c8:25:8e:38:b8:bf:91:72:47:fe:40:dd:3c:b5:49:41:d1:28:
1f:f4:d0:59:ef:e7:2c:fc:24:cf:11:bb:c0:31:e6:5c:c8:52:
fb:af:96:1b:d3:23:6b:98:da:93:c6:36:51:57:e3:68:09:32:
14:49:90:23:68:29:63:cc:a1:5e:87:d0:7e:a6:4b:cc:f9:a3:
9c:95:3d:d6:49:26:4d:4e:5f:47:2a:f4:92:5f:7f:bf:6b:2d:
f8:1a:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:22:02 2025 by rpki-client