
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier: GW5GLIgxJbOA7vdtRbvUkYfJ6WJa1BNyWmFAyMqw6cU=
Subject key identifier: CD:2A:EA:EB:88:66:9C:8F:D7:BF:84:C2:8C:75:65:4D:B5:78:4C:B9
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 02:30:43 +0000
Manifest this update: Fri 31 Jan 2025 02:30:42 +0000
Manifest next update: Fri 07 Feb 2025 02:30:42 +0000
Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: eDexw/dNyiVergjSC3TrPUVqPOhSiOqgkK+iTOJN+38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Validity
Not Before: Jan 31 02:30:42 2025 GMT
Not After : Feb 7 02:30:42 2025 GMT
Subject: CN=679c35d2-5bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:7c:ab:3e:a0:16:ba:d4:e3:58:99:2a:7b:
dc:fb:c9:07:9c:87:74:45:76:2f:a9:0e:0f:c8:04:
e9:4f:0e:f0:ef:54:49:55:af:7c:52:f9:61:58:7b:
84:34:25:2e:5f:21:5f:71:76:5a:1c:ec:85:8b:73:
48:54:48:03:93:99:ca:6a:d4:22:ab:f2:ec:e9:d2:
f3:84:47:b8:f4:c1:89:ca:42:fc:01:28:66:04:f9:
13:d2:4f:0a:b2:4a:a8:98:fc:a7:47:32:0c:39:e3:
d4:ad:25:05:c9:0e:0a:d2:04:64:bb:d0:68:c4:b3:
1f:8f:9a:bd:d5:e3:5b:95:c0:e1:72:35:1c:19:b1:
c2:69:93:38:8a:0d:40:f6:0a:bb:14:96:35:97:d9:
0e:7a:c7:13:24:2f:fd:3a:56:f6:e5:a2:fb:d5:99:
75:5d:09:7d:8b:7d:77:3d:ad:08:56:93:e4:c1:4f:
73:fc:17:34:b0:20:2d:15:81:45:cf:75:51:d8:a7:
51:74:b2:56:d3:bb:e0:18:a7:28:c8:6e:69:e3:e6:
31:e5:46:a0:15:06:74:96:9e:b4:3a:6e:cc:92:b1:
0d:52:73:49:8b:c2:99:5b:7c:19:bd:d6:ab:a8:aa:
9f:19:be:a8:0a:f8:69:08:c8:4a:ad:8c:9f:31:b3:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:EA:EB:88:66:9C:8F:D7:BF:84:C2:8C:75:65:4D:B5:78:4C:B9
X509v3 Authority Key Identifier:
keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:14:32:3d:ce:1b:6c:35:11:78:9b:9e:97:bc:ec:44:4d:
8e:d2:53:8d:87:cc:79:d1:e6:fe:24:ce:b5:48:17:f3:b4:09:
5f:1c:5e:08:29:bb:70:42:de:42:0a:9f:27:68:ac:e4:5c:9e:
53:fd:4f:33:93:46:21:70:b8:74:50:ce:20:8b:f8:a6:3c:94:
1a:3d:d1:ad:2f:e5:6d:a3:bd:25:b7:c2:bf:16:9e:0b:08:13:
e6:35:ed:11:aa:55:5e:21:50:1c:04:d0:02:04:fb:df:81:54:
a1:94:2f:4e:d6:99:27:50:62:b8:24:a2:2a:dd:2e:e4:9e:49:
21:99:29:ab:96:4e:70:70:71:aa:1d:90:5f:75:ab:9a:2c:90:
10:18:39:f0:fe:5a:06:2e:9e:7d:1b:25:a6:51:dc:24:49:ed:
28:9c:a6:53:af:45:8a:ed:70:3a:66:d6:1f:4a:7c:44:fd:de:
63:0a:7f:0a:cc:7d:f0:c9:33:ab:3d:4c:aa:a5:b8:ce:42:b2:
d1:83:43:d8:08:db:63:63:0b:d0:8b:af:5b:be:73:9d:24:40:
95:e4:15:8c:e5:6f:d0:b0:02:a7:67:ad:c7:ff:bd:e3:0c:c3:
c6:e5:13:85:a1:a3:d8:79:51:84:e7:df:44:82:00:21:83:67:
28:61:be:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC
Nzg4MTMzREYwHhcNMjUwMTMxMDIzMDQyWhcNMjUwMjA3MDIzMDQyWjAYMRYwFAYD
VQQDEw02NzljMzVkMi01YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx918qz6gFrrU41iZKnvc+8kHnId0RXYvqQ4PyATpTw7w71RJVa98UvlhWHuE
NCUuXyFfcXZaHOyFi3NIVEgDk5nKatQiq/Ls6dLzhEe49MGJykL8AShmBPkT0k8K
skqomPynRzIMOePUrSUFyQ4K0gRku9BoxLMfj5q91eNblcDhcjUcGbHCaZM4ig1A
9gq7FJY1l9kOescTJC/9Olb25aL71Zl1XQl9i313Pa0IVpPkwU9z/Bc0sCAtFYFF
z3VR2KdRdLJW07vgGKcoyG5p4+Yx5UagFQZ0lp60Om7MkrENUnNJi8KZW3wZvdar
qKqfGb6oCvhpCMhKrYyfMbOVSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0q6uuI
ZpyP17+Ewox1ZU21eEy5MB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE
N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw
dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPUhQyPc4bbDUReJuel7zsRE2O0lONh8x50eb+JM61SBfztAlfHF4I
KbtwQt5CCp8naKzkXJ5T/U8zk0YhcLh0UM4gi/imPJQaPdGtL+Vto70lt8K/Fp4L
CBPmNe0RqlVeIVAcBNACBPvfgVShlC9O1pknUGK4JKIq3S7knkkhmSmrlk5wcHGq
HZBfdauaLJAQGDnw/loGLp59GyWmUdwkSe0onKZTr0WK7XA6ZtYfSnxE/d5jCn8K
zH3wyTOrPUyqpbjOQrLRg0PYCNtjYwvQi69bvnOdJECV5BWM5W/QsAKnZ63H/73j
DMPG5ROFoaPYeVGE599EggAhg2coYb7n
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:19 2025 by rpki-client