Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier: EKzK1WNta+IMSLQd7B9BSbuHL9QlajIdUPbJt7Pi8gA=
Subject key identifier: 3C:5A:7B:09:C7:25:BD:AE:A5:3D:51:EF:2D:D4:A2:8B:05:E4:49:DB
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 0FCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number: 0FBB
Signing time: Fri 31 Jan 2025 17:28:38 +0000
Manifest this update: Fri 31 Jan 2025 17:28:37 +0000
Manifest next update: Fri 07 Feb 2025 17:28:37 +0000
Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 215uyGbcS1AoiAn9YUbXDkDhkExG+1JftY3JvMTXowg=)
2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: /71nbSiWt0RVe5ogZCQfFYyxEZ4Mr3Z7iCfhqhLbM+k=)
3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: JhAWbCAMrXKEKj1b3MlbXCTMtcBsS+XKDtYcGnLBqlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4045 (0xfcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: Jan 31 17:28:37 2025 GMT
Not After : Feb 7 17:28:37 2025 GMT
Subject: CN=679d0845-6745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:6e:0e:7e:68:43:8f:c7:7f:b2:e1:c8:34:
1e:ab:63:91:d9:65:06:d8:19:d0:74:11:8a:8e:47:
29:3e:a4:ba:10:f6:74:ae:da:ba:54:43:b9:34:3b:
15:8a:29:c6:3d:f7:6d:e1:1a:9b:25:c4:57:d0:ba:
a6:4b:7a:81:73:ff:77:af:7e:a3:2c:54:34:01:5f:
32:d2:04:17:70:ec:48:f3:96:8e:2a:07:2c:13:ee:
c6:a7:2f:54:65:d6:68:88:d9:11:6e:36:84:2e:03:
f0:9e:5f:8f:23:bf:a9:54:91:51:dc:5c:e0:b4:d9:
89:60:65:ec:9f:b7:4b:13:8e:f5:4f:6e:5d:3a:39:
c0:12:9a:f1:08:db:02:49:d8:f6:f3:96:e3:c6:39:
00:33:07:b5:b5:d1:c4:e7:0c:fe:ee:a8:e9:db:27:
77:ff:4c:9f:e8:1f:36:a1:b7:07:5e:d4:63:5a:a8:
c1:1f:19:40:f6:1e:cc:3a:a4:bb:65:db:ae:23:4c:
6f:9b:ce:30:71:3b:f5:7b:d4:5d:29:72:c2:c8:0b:
df:ac:85:28:d4:18:1c:1e:9f:0c:a5:be:b9:24:0e:
df:7a:5c:72:a1:12:8e:2a:1b:6d:c0:c6:3c:9e:dc:
ed:fe:07:9c:69:69:cf:4d:27:23:49:ed:2f:ec:13:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5A:7B:09:C7:25:BD:AE:A5:3D:51:EF:2D:D4:A2:8B:05:E4:49:DB
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:20:01:4e:06:38:d7:3c:de:72:fc:38:0f:c8:d4:3f:fc:
c5:58:6f:52:5b:1c:03:36:84:5d:e6:23:c9:8f:33:90:7d:e2:
a8:bf:df:4a:d7:f0:24:f2:c7:1c:ab:32:27:f4:b8:0f:c1:a6:
ca:da:91:47:d5:a3:b8:87:90:26:79:73:b7:49:5f:4c:da:be:
f6:1c:68:88:09:4e:38:dd:c0:0e:4d:0a:56:9e:a4:33:38:45:
fb:be:63:05:80:a3:d3:82:c9:53:1e:60:0e:63:8c:87:02:9c:
55:92:1a:84:95:4a:ab:ac:ee:eb:32:6c:11:5f:f4:62:48:61:
91:67:51:9b:e2:13:74:17:f8:36:b0:df:e0:55:55:ef:fc:9e:
c4:63:49:79:1f:8a:46:4b:a5:23:06:c7:43:ad:f5:31:b2:97:
9f:2d:f5:5f:b1:a6:23:8d:0b:88:62:90:31:48:a6:9b:95:09:
18:b5:35:94:4b:c1:08:65:c4:c7:8e:ed:ea:37:26:05:bb:bb:
0a:61:14:19:bd:28:36:1e:81:49:3d:4c:9e:5e:c0:e2:42:7d:
be:59:0b:bf:b6:c0:3e:56:ef:e3:f3:d1:bd:c5:fe:f3:0a:b2:
d9:81:66:bf:e7:c2:8e:13:60:08:ec:4f:77:9f:93:3c:cf:9a:
60:23:75:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:28 2025 by rpki-client