Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json)
Hash identifier: a/YKMtyA016vim0ui2XYFIsKxFzHFrzsvGO1N+ehPfU=
Subject key identifier: E5:D7:E6:CB:81:3A:1E:FE:73:AC:D7:F6:24:13:5B:2A:3B:77:DD:CA
Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Certificate serial: 3408
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
Manifest number: 3408
Signing time: Fri 31 Jan 2025 15:23:41 +0000
Manifest this update: Fri 31 Jan 2025 15:23:40 +0000
Manifest next update: Fri 07 Feb 2025 15:23:40 +0000
Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: 2kGMhrFwn/95nhqGGmLMNonCNLqJmM4WYFjBQvNo4j4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13320 (0x3408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Validity
Not Before: Jan 31 15:23:40 2025 GMT
Not After : Feb 7 15:23:40 2025 GMT
Subject: CN=679ceafc-5de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:30:94:90:db:6f:e2:07:ba:2e:aa:30:89:
88:55:4c:a3:aa:ad:7b:2a:4c:d0:de:8e:c4:14:85:
a3:12:a3:f2:5a:09:d4:bf:24:86:dd:06:bc:45:0c:
7c:38:fe:88:a6:db:99:17:e5:73:c4:95:8a:8f:f8:
94:3a:d8:35:27:24:ed:c1:ad:d5:b8:e0:49:29:ae:
0d:55:2e:02:79:e3:7d:bc:93:8d:d5:fb:5a:90:37:
4e:3d:1b:61:10:a6:01:18:e6:ee:5e:3a:b3:64:b6:
56:df:da:44:8a:5a:bc:9d:1f:81:ec:51:2d:6a:eb:
99:09:2d:26:82:3e:af:bf:54:08:fa:d8:45:b0:4b:
c3:16:12:c0:fa:ef:50:70:22:37:64:7c:48:65:1e:
5a:35:db:f7:ba:44:ff:63:db:c3:67:70:a8:d6:ae:
0f:a6:4e:90:ea:0d:3c:a4:d1:f9:5b:34:5e:aa:f5:
2d:d6:89:8f:6f:bd:d6:c5:df:db:0e:fd:77:e8:54:
57:1d:a4:21:a4:46:5e:ea:ea:db:d3:a0:5e:2f:c1:
01:d5:8f:10:ae:0b:5c:dc:b0:c9:82:c0:88:1e:58:
2c:df:cd:a5:0f:52:bf:7d:c3:bc:18:ee:c8:1b:2c:
fa:09:65:ad:17:5d:22:0d:36:55:f8:4a:42:7a:20:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:E6:CB:81:3A:1E:FE:73:AC:D7:F6:24:13:5B:2A:3B:77:DD:CA
X509v3 Authority Key Identifier:
keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:1c:b6:6b:01:c6:15:e0:d6:cd:09:2e:21:92:73:fc:01:df:
6f:69:a5:b7:0f:24:40:b8:f2:a2:48:de:c8:a4:9e:66:60:1a:
a6:47:04:ca:fa:c4:da:bc:49:3f:ed:6d:a3:fc:e7:5b:c0:95:
6b:d4:9e:46:dc:f4:1b:19:10:b5:84:11:02:b0:91:93:6a:2b:
3e:72:88:48:a1:c7:bf:99:fa:67:b1:0a:90:3d:da:8b:1e:af:
69:8e:01:70:af:74:a4:83:25:4c:2c:50:85:d0:a7:d1:b0:9f:
8e:4e:1e:2f:1a:b3:aa:f2:ef:bc:19:6f:30:06:ff:be:30:5a:
88:be:a5:78:f3:e8:47:3a:16:a0:6f:2c:ab:88:8e:26:ac:2a:
7d:f6:22:31:2b:00:32:cc:4f:0a:5b:8c:12:db:b0:51:16:09:
43:0d:e9:03:29:80:0b:d6:a6:d7:64:64:d0:58:a3:f6:09:53:
ec:2c:ea:e7:58:c8:93:e4:ef:78:8a:cf:6f:93:49:83:57:46:
52:8c:6c:75:a5:2d:b2:41:02:7a:84:95:34:68:9b:b9:f6:f6:
8b:37:74:a6:ac:66:8a:f1:73:d9:b5:11:ab:e3:d2:af:62:75:
72:da:69:ff:be:61:31:e7:f6:fa:56:ff:75:97:3e:cb:d3:fb:
64:22:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:39 2025 by rpki-client