Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier: 0pMHiTm1IYtdyHaoaTomCK3XR0dwFj9ewY/YXvLas4U=
Subject key identifier: F7:C6:D6:4A:76:FC:8F:E4:CF:30:EE:BC:6E:96:D5:05:D2:CF:F1:1A
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 05:28:37 +0000
Manifest this update: Fri 31 Jan 2025 05:28:37 +0000
Manifest next update: Fri 07 Feb 2025 05:28:37 +0000
Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: F3KA/0KLJPXT5tXb3V1s91JrjQTaXH9pNRb9k2Le+5A=)
2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: ey0oQHiSGpH4+EnFGwizJ9b66lbUXNoAkMqUMUf/z8g=)
3: 138E2452F89011EE8B2FC42AC4F9AE02.roa (hash: /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Validity
Not Before: Jan 31 05:28:37 2025 GMT
Not After : Feb 7 05:28:37 2025 GMT
Subject: CN=679c5f85-27f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:5f:c3:60:fc:04:08:dc:5c:b2:e7:93:1b:
f1:5b:a4:e5:ce:5d:2a:34:3a:10:96:9d:1b:57:77:
ad:f5:d1:ff:6e:64:a0:85:3f:9a:82:cb:ac:a0:73:
41:11:3e:b0:50:8c:42:5f:dd:98:80:7f:1a:ec:59:
d7:c1:75:bb:a8:04:e0:79:03:60:3b:08:ef:cb:56:
24:0a:fd:bf:59:51:c9:f2:12:ad:98:eb:12:56:15:
d3:f4:52:f4:37:a4:d9:74:68:10:ac:3b:7f:1a:68:
ec:21:a9:6b:9b:1d:48:b8:73:32:35:c4:21:b8:b7:
3b:08:09:4f:9b:10:f8:9a:11:5b:fe:79:92:90:83:
9b:ad:d6:8a:a7:ff:f6:03:fc:51:3b:d3:4e:38:be:
70:73:a4:3a:c3:c2:30:65:9f:d3:fe:67:d2:99:65:
8d:8b:28:7c:a1:3e:a3:46:d6:2c:ad:5b:f1:b2:3c:
c6:46:12:4e:2b:0c:b7:f1:31:01:a7:78:79:0b:de:
9f:d1:45:b8:eb:f1:e4:ee:c5:5d:2a:95:c8:1a:ee:
38:2a:26:27:7f:27:1a:7c:ee:bc:41:18:6b:9b:6d:
16:b1:8e:62:8a:17:f0:6c:53:10:88:9a:a8:f9:81:
f1:8c:be:01:44:5d:93:5b:ab:31:ec:dd:65:bc:b5:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:D6:4A:76:FC:8F:E4:CF:30:EE:BC:6E:96:D5:05:D2:CF:F1:1A
X509v3 Authority Key Identifier:
keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:89:58:11:ff:be:09:12:9b:26:c4:21:40:f7:62:5d:8a:
5c:c7:15:fa:ca:26:93:22:42:56:1a:9c:14:18:9c:ec:4a:cf:
aa:e6:64:90:fa:80:1f:a7:53:11:f1:a3:52:c5:b2:80:5d:fb:
93:2f:c2:ad:41:ad:46:61:37:4b:04:f0:ef:91:e2:4e:e4:08:
c8:3c:a0:ef:ea:ce:a4:f2:eb:9e:e2:54:44:76:59:87:b5:e9:
20:25:ed:57:b3:3a:8c:c3:a3:2f:70:59:fe:c1:b1:41:c3:50:
56:e9:36:ea:46:3d:23:17:72:ac:98:6f:06:a1:51:ba:2a:b3:
f9:fc:b4:33:39:d7:17:a8:ed:c0:d3:a4:bf:c7:c4:d2:03:12:
a3:e2:6e:17:c2:13:64:51:9a:37:df:66:e4:31:36:d7:1d:1e:
80:85:c0:11:30:60:09:58:78:56:e1:7e:0b:17:f7:f0:65:fc:
b4:42:46:fb:1f:f7:43:4c:29:e0:1a:90:f0:d4:30:10:c0:2e:
ad:4a:6f:e4:9b:75:f7:ae:29:ee:3a:21:39:84:e0:c7:4a:75:
44:f3:d3:2e:cd:6a:c2:4a:2a:c7:36:c4:a1:19:19:b7:56:32:
c6:ef:ba:33:a0:69:46:e8:75:f6:66:b6:dc:81:cf:b2:60:ae:
f6:75:79:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx
QTMzRTIzRTMwHhcNMjUwMTMxMDUyODM3WhcNMjUwMjA3MDUyODM3WjAYMRYwFAYD
VQQDEw02NzljNWY4NS0yN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAso9fw2D8BAjcXLLnkxvxW6Tlzl0qNDoQlp0bV3et9dH/bmSghT+agsusoHNB
ET6wUIxCX92YgH8a7FnXwXW7qATgeQNgOwjvy1YkCv2/WVHJ8hKtmOsSVhXT9FL0
N6TZdGgQrDt/GmjsIalrmx1IuHMyNcQhuLc7CAlPmxD4mhFb/nmSkIObrdaKp//2
A/xRO9NOOL5wc6Q6w8IwZZ/T/mfSmWWNiyh8oT6jRtYsrVvxsjzGRhJOKwy38TEB
p3h5C96f0UW46/Hk7sVdKpXIGu44KiYnfycafO68QRhrm20WsY5iihfwbFMQiJqo
+YHxjL4BRF2TW6sx7N1lvLUC6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfG1kp2
/I/kzzDuvG6W1QXSz/EaMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4
OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ
YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCGoolYEf++CRKbJsQhQPdiXYpcxxX6yiaTIkJWGpwUGJzsSs+q5mSQ
+oAfp1MR8aNSxbKAXfuTL8KtQa1GYTdLBPDvkeJO5AjIPKDv6s6k8uue4lREdlmH
tekgJe1XszqMw6MvcFn+wbFBw1BW6TbqRj0jF3KsmG8GoVG6KrP5/LQzOdcXqO3A
06S/x8TSAxKj4m4XwhNkUZo332bkMTbXHR6AhcARMGAJWHhW4X4LF/fwZfy0Qkb7
H/dDTCngGpDw1DAQwC6tSm/km3X3rinuOiE5hODHSnVE89MuzWrCSirHNsShGRm3
VjLG77ozoGlG6HX2Zrbcgc+yYK72dXnm
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:25 2025 by rpki-client