Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File: QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier: El+yIucwRe8uwYZrXNrStixxJqtNo2OinCUkaRyCG5g=
Subject key identifier: FF:00:EC:14:90:06:67:8D:C8:79:A6:49:83:DE:A4:A8:0B:58:F0:24
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 04:49:45 +0000
Manifest this update: Fri 31 Jan 2025 04:49:45 +0000
Manifest next update: Fri 07 Feb 2025 04:49:45 +0000
Files and hashes: 1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: oaG0X/s8VMnre8SIEOTGYOybYOrf0ShyHrkr3NiLOYQ=)
2: 209A2EA88D9B11EEB4F6C646C4F9AE02.roa (hash: TsxmXKaWMwLW8KFltVLChPEvdcgwmQl6oA7bHzvI6Mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Validity
Not Before: Jan 31 04:49:45 2025 GMT
Not After : Feb 7 04:49:45 2025 GMT
Subject: CN=679c5669-eb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:78:16:74:9a:39:82:0f:03:f6:6a:4d:2d:
f4:e2:c3:0e:20:da:f7:a1:11:28:65:6b:a8:25:e0:
6c:91:5b:c7:60:59:ae:b4:ba:5f:6d:dd:cb:95:fb:
08:de:a8:2a:05:b7:49:08:ec:4d:8d:ad:89:0a:8d:
f5:64:5d:36:4e:8b:fe:ca:cb:b0:39:97:5c:6b:f4:
5d:df:88:24:6f:64:0c:c7:7d:57:59:f7:3a:78:48:
15:38:6f:7a:36:c9:50:cf:ab:63:de:6e:d3:65:92:
67:f3:85:3d:a2:85:98:5e:c2:1c:66:f8:98:86:f4:
a0:82:d3:e1:e8:f9:b7:39:34:3d:f5:17:fc:c7:78:
91:cf:05:27:21:6c:7d:63:21:80:88:f1:30:3e:ef:
60:e5:56:f6:d9:cb:cf:6f:eb:53:0e:27:df:25:f9:
ea:29:30:c4:d1:88:c3:ae:ab:2f:be:d5:73:a0:79:
16:e4:b2:ab:34:db:44:30:58:b4:15:1a:33:22:b3:
77:34:8e:19:da:63:e0:4c:a8:fb:a0:52:1c:3d:8e:
b8:34:f1:7c:bd:a7:a4:53:65:f2:08:49:2a:2f:e3:
34:f2:a3:00:34:23:ff:d7:fc:06:42:13:d7:da:ce:
04:ad:e9:e1:49:b8:1a:a5:4c:ff:60:09:d8:eb:44:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:EC:14:90:06:67:8D:C8:79:A6:49:83:DE:A4:A8:0B:58:F0:24
X509v3 Authority Key Identifier:
keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:96:09:a3:5e:22:12:67:9a:83:5e:ed:80:c0:66:c8:11:73:
ff:7f:24:37:2b:0c:ec:06:14:7f:41:a4:c9:3c:31:d2:64:e7:
9e:fc:3b:0b:c7:79:19:71:82:c9:74:32:1d:5d:61:c3:80:6f:
ee:ae:51:d1:9b:93:89:c8:b3:5c:12:7a:d9:a9:8f:51:64:95:
bc:c1:55:41:14:47:23:f3:f3:1e:c1:77:31:1c:49:d5:49:dd:
1f:d1:88:0b:20:ef:21:1a:60:a0:5c:4f:e9:5c:15:f0:b8:95:
18:76:e4:82:35:55:17:31:e9:52:2b:80:8b:de:d4:a1:1a:d3:
e7:b2:1a:49:95:a1:b8:92:37:63:56:b6:b2:0b:3f:b2:30:b3:
0e:46:08:a6:52:6b:a4:f8:23:c8:01:2c:2d:99:bf:0a:23:1a:
38:ac:e9:39:9c:d6:16:9e:a7:b4:1c:ce:57:19:c1:63:55:76:
d4:38:ac:6d:4d:ed:e9:87:42:95:ba:07:ea:63:91:8d:42:ea:
73:2a:97:ea:a9:14:81:e0:bf:37:b2:fc:23:4a:2b:88:30:2a:
37:f9:82:42:cd:5e:3c:8a:5b:75:a3:9c:a1:81:a1:97:97:9b:
1c:3c:e7:a6:0d:2a:7a:5a:4e:8e:12:c9:0a:d3:31:7e:c9:05:
2d:3b:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:07 2025 by rpki-client