Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier: GPxOCxj32mp3O3uT/DXk9Lhcq3+xtKiYPU1WJ3qV0BE=
Subject key identifier: E5:62:93:E6:93:D2:65:F7:99:FB:C1:0F:A4:CA:8B:1A:41:16:58:C6
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number: 02B5
Signing time: Fri 31 Jan 2025 01:34:08 +0000
Manifest this update: Fri 31 Jan 2025 01:34:07 +0000
Manifest next update: Fri 07 Feb 2025 01:34:07 +0000
Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: EJC5PobMYlXr9AL5Jz+8Un4zbqfC3iEdLizKvpE36oY=)
2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: RSA/ql0lNyv9WyAk0d5FOAFZ5R84Y3YnmGvbKn1e7f4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Validity
Not Before: Jan 31 01:34:07 2025 GMT
Not After : Feb 7 01:34:07 2025 GMT
Subject: CN=679c2890-c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:c2:cb:46:21:83:b7:2f:84:79:84:64:69:
19:4e:cc:3c:65:38:f5:1e:af:8b:fa:58:3e:a7:e0:
d0:f9:77:cb:09:09:e5:d0:45:de:cd:9e:99:aa:e4:
ad:b4:7e:d5:4e:69:24:d7:19:40:d7:b1:d6:ea:98:
cd:d0:f5:8d:38:40:aa:ff:bc:4a:b4:f9:91:26:ad:
d1:1f:aa:2d:3f:da:08:f5:e7:e5:7b:22:d3:2b:50:
85:ef:1f:a2:01:82:f3:89:c2:09:ca:ca:ec:cc:73:
d6:fd:b9:d0:8d:3b:86:75:27:20:8d:85:3d:32:6d:
60:ef:7e:37:c1:89:42:7b:98:6f:77:65:9d:e3:c8:
ae:9d:b2:91:d6:61:f7:fc:b0:34:44:8d:c8:97:56:
ef:ed:9d:02:39:f8:89:e9:79:22:63:05:66:fd:21:
29:03:02:03:6c:dc:fa:46:1e:70:a6:09:90:d3:17:
83:31:de:43:9c:e8:ad:30:42:fb:31:7a:56:9d:a2:
12:01:31:33:a2:83:c2:57:6d:3a:e0:89:79:61:ec:
25:1f:b1:77:27:69:41:b4:f7:70:d9:58:8f:c2:19:
82:d9:89:e5:7a:f3:75:b8:52:3a:96:bb:67:df:9e:
e5:7b:ea:32:ac:b5:52:bc:89:7c:22:02:42:01:c2:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:62:93:E6:93:D2:65:F7:99:FB:C1:0F:A4:CA:8B:1A:41:16:58:C6
X509v3 Authority Key Identifier:
keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:b5:14:44:46:37:66:3a:27:3a:df:fe:9d:91:ab:13:f9:
ee:47:ce:89:31:7c:6e:b6:fc:14:07:54:fc:13:9b:6a:b6:a5:
2b:fe:f1:47:9c:76:51:ac:2e:1c:f8:68:8c:f7:a4:bf:6f:ea:
d7:50:ff:5a:6f:1e:bd:e2:29:a4:b6:0a:dd:d6:7b:8a:66:ce:
e3:fb:af:31:76:1a:09:01:a7:0c:1f:11:9c:69:06:21:68:6b:
4d:03:0d:0c:7b:c5:4b:ba:d8:9e:97:39:99:96:1b:bd:de:b8:
e1:db:d6:3d:64:77:fa:fd:fe:88:4d:31:0f:2e:ae:d6:c9:16:
dd:80:eb:3b:f3:5e:28:98:a3:1e:6c:c8:00:83:26:07:ea:9a:
79:5a:cd:69:20:4b:6b:b7:32:e2:90:84:cc:0a:ab:0d:3f:0e:
88:83:57:74:11:3a:74:6c:c6:e1:e0:c1:9b:14:d2:cf:3e:ee:
77:6f:4c:11:d7:ad:ea:f9:89:91:b2:83:2b:f4:dc:ac:30:91:
77:aa:4b:fd:f8:cc:e4:3d:3b:62:6c:19:52:11:a6:f0:41:80:
a3:01:f7:1b:59:65:bd:f6:2c:4b:52:8f:83:45:14:43:f9:0d:
55:27:dc:2e:4d:38:05:25:08:d1:57:6d:b7:c7:7b:53:ff:95:
b2:65:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:47 2025 by rpki-client