Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: dEFhMXkXrAFPvgUtsEdFjut59yFlwuG058MjPUSyf2o=
Subject key identifier: D0:31:41:4F:9C:24:09:F2:93:2F:41:89:5C:E6:22:41:EF:E8:14:67
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1AD3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1ACF
Signing time: Fri 31 Jan 2025 16:20:34 +0000
Manifest this update: Fri 31 Jan 2025 16:20:33 +0000
Manifest next update: Fri 07 Feb 2025 16:20:33 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: bhKJLZ6yTg4D//eBDzOWvgJcDsIRKQLpRvhk2uxUOGk=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: l8rbVcrxpBL4K1nr5JzCpQg12eUyxOnsIOK36gYUlKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6867 (0x1ad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Jan 31 16:20:33 2025 GMT
Not After : Feb 7 16:20:33 2025 GMT
Subject: CN=679cf851-bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:ab:4d:e8:65:3e:f7:3d:a7:7b:8a:20:19:
f9:2c:b1:fd:be:1f:09:6c:d2:7b:92:91:4a:c1:43:
4e:8d:97:99:4e:ad:ef:78:5d:f8:ce:e8:5f:51:38:
27:93:2c:da:3a:90:1c:07:0a:65:65:92:80:3d:13:
a2:19:01:ef:b4:9b:b5:ac:9f:4c:f1:2d:db:8a:13:
b7:0a:91:f7:56:cb:50:0c:48:76:4d:68:de:d3:b8:
88:83:53:fe:89:35:67:af:fc:bf:4b:73:34:0f:44:
fd:9a:c8:85:6b:ed:df:ba:45:49:e1:d7:22:6c:b4:
7d:4e:3d:99:ee:27:7f:f8:1a:2c:dc:dc:ec:36:a9:
3a:8c:d4:07:26:06:60:50:8a:92:f1:85:01:0d:6b:
b4:25:ea:30:71:87:be:fb:2e:a4:82:5b:07:9f:0e:
41:d3:48:6d:34:b4:a0:c0:4d:88:37:a2:72:d2:98:
3b:b4:81:75:7f:3f:7f:3c:f0:72:1c:ce:bc:a4:9b:
70:85:ee:d6:36:57:cb:90:ba:b5:82:bc:bf:d5:47:
03:a7:60:da:f5:53:7d:b9:91:e4:ae:ae:ab:65:38:
68:14:76:fa:c2:9b:c7:e5:1e:92:a1:f2:42:1e:c3:
e1:e7:23:71:b5:3c:3c:7c:bc:4e:a3:ec:b1:4e:42:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:41:4F:9C:24:09:F2:93:2F:41:89:5C:E6:22:41:EF:E8:14:67
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:03:f9:64:9e:e8:c4:c9:e6:c0:66:12:50:7d:6e:ca:bc:3d:
78:f3:4c:66:59:bf:5c:89:e5:9a:18:32:e0:32:78:ff:e1:bb:
c3:4f:7b:19:a6:c1:a8:cc:f3:31:46:2f:5d:2a:be:82:ae:3c:
38:97:df:53:d1:5e:96:2b:c8:b5:4f:8e:fc:8f:f9:26:82:e1:
db:53:e7:e5:4a:82:49:c2:8a:07:e2:75:d8:4d:b2:03:ba:12:
9d:b2:e6:b9:3b:ba:d9:e0:58:d9:01:ac:28:a5:fd:71:4d:8c:
b7:9e:d1:02:1e:46:1f:b8:a2:9a:0f:60:38:56:15:29:ac:52:
02:5f:52:1f:88:18:16:16:9d:24:9e:53:aa:38:b7:99:d4:7f:
77:9a:56:43:a5:d0:bf:be:ef:22:f3:b9:57:6a:48:0a:c5:0c:
34:fb:ba:e3:7f:5a:cf:d6:0b:d6:44:9c:fd:4d:31:0d:60:10:
30:ea:5c:18:4b:fc:2d:c9:2b:34:5a:ee:b2:10:f2:e0:f9:4e:
1a:3e:16:f7:01:98:72:b6:a5:0d:2e:a0:b7:20:cf:2c:e0:fc:
40:d5:13:13:ce:cc:94:d1:b3:4b:10:b2:95:67:63:2f:1e:d0:
39:4d:38:22:45:63:f6:67:5d:88:f7:72:6e:42:6b:98:23:c6:
7e:77:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:51 2025 by rpki-client