Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json)
Hash identifier: WKPU2a5E2bbDsrbyp7qQZr0N/u/FvPIpfT9yeQIlYiE=
Subject key identifier: B0:94:3A:3F:1B:E8:EF:EE:14:5D:5E:5F:EF:F3:F2:7E:35:F5:66:2D
Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Certificate serial: 344D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
Manifest number: 344D
Signing time: Fri 31 Jan 2025 14:40:09 +0000
Manifest this update: Fri 31 Jan 2025 14:40:08 +0000
Manifest next update: Fri 07 Feb 2025 14:40:08 +0000
Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: ZOjfSnk5jOPRgqmRdTeHOmo/OInfMfs9L8/0kEW1850=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13389 (0x344d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Validity
Not Before: Jan 31 14:40:08 2025 GMT
Not After : Feb 7 14:40:08 2025 GMT
Subject: CN=679ce0c8-c343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:41:27:e2:96:e2:7f:a7:da:ee:33:0a:78:
9c:6f:1a:8f:37:c4:11:75:06:9c:94:b3:8e:c6:d6:
72:57:8c:1e:5e:11:58:33:53:f6:30:ed:e2:92:4f:
43:dd:99:f4:4e:aa:d3:08:36:66:3a:81:dd:9a:df:
80:2b:e2:ef:f9:3f:2f:2a:16:f0:bd:24:c9:60:71:
21:a4:2b:0f:54:42:5b:5c:35:f1:da:7d:89:43:1a:
7c:9a:c2:fa:6f:86:b7:76:de:88:09:af:fe:13:61:
e7:f8:9b:bd:fc:03:3c:f9:ec:ab:05:9b:e3:05:e1:
6d:95:40:65:87:84:89:4c:d8:ca:69:4b:3a:72:84:
9f:a3:b2:56:b8:f9:d0:7d:3e:15:5a:44:89:fe:40:
02:d6:6e:d6:17:ec:76:cc:e2:ea:2b:56:6d:d3:52:
01:4a:a6:ba:91:e3:13:37:59:bd:00:a3:58:65:3b:
8c:8a:d9:e9:d5:a2:a3:40:aa:b6:38:99:12:c6:90:
49:ee:4d:dc:e0:5c:2b:97:57:da:f0:a8:65:dc:e0:
51:43:64:b6:ec:3e:79:08:6e:39:84:1f:1f:20:28:
f1:4e:43:bc:39:b6:a8:27:85:a4:9f:50:8c:d8:b4:
cc:95:db:21:ed:4d:c2:20:14:1b:a6:3d:ab:e5:ee:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:3A:3F:1B:E8:EF:EE:14:5D:5E:5F:EF:F3:F2:7E:35:F5:66:2D
X509v3 Authority Key Identifier:
keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:59:87:1a:2e:91:ee:e9:b6:ae:e3:7c:b8:a3:ff:92:a0:
6b:b8:ca:91:c1:19:40:67:19:c4:6d:0c:99:54:4c:0f:33:ef:
45:cf:8d:2e:be:31:10:cc:67:e8:d2:c8:ce:34:70:43:fc:84:
e9:14:d6:d4:23:b3:6d:fe:a4:b6:88:61:75:2b:c2:e0:ca:85:
b3:ca:64:4b:69:8d:13:94:b1:0a:5d:4d:c3:96:e8:6b:c9:62:
fc:c7:1d:7b:2b:2f:df:aa:d6:2f:9d:d8:16:9c:7b:dc:20:9d:
05:85:c5:bb:b2:e8:cc:fb:86:2b:32:32:ed:ba:88:16:9b:3e:
77:10:9d:34:c9:bc:df:c3:f3:54:bb:2b:7f:19:d1:74:0d:8e:
9b:c1:19:48:ef:60:58:e8:e0:0d:d9:cb:9f:8f:f7:73:2e:98:
5e:28:ff:43:47:5a:58:81:4d:95:09:7c:81:f1:d1:19:91:df:
c7:46:09:f1:56:3e:93:4c:d0:31:88:3c:7e:e7:d2:1f:65:2a:
1d:b8:14:dc:9a:1f:64:6c:7f:98:11:92:19:fe:a6:72:cf:30:
4e:0b:9b:a4:27:74:f0:a1:8a:ad:06:29:be:69:56:c2:dc:74:
ca:a1:07:47:52:f1:1a:5e:55:c6:79:9b:c9:69:e6:3c:5c:e0:
01:7f:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:05 2025 by rpki-client