Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier: JGnSq4ZKRG8Iov4CUDAw2shGz/G7S2NX9c5UnD0D6Ok=
Subject key identifier: 68:E7:0E:47:84:6F:36:15:40:00:4A:FC:D0:4A:56:AB:85:D3:64:CE
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial: 1A65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number: 1A52
Signing time: Fri 31 Jan 2025 15:41:09 +0000
Manifest this update: Fri 31 Jan 2025 15:41:08 +0000
Manifest next update: Fri 07 Feb 2025 15:41:08 +0000
Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: 2Ho3y9L6EbqVf8vn4/7AD5AbmD2JaS4wSpkSq2fOQSQ=)
2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: uUlOQpzZO3P5eVMM621nQ4qWEKEyn8v2Q1jC2RCuf4E=)
3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: InP2ZGCygpqo7jQ5/iXnWywhtU95neHUOm+r+LrIH0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6757 (0x1a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Validity
Not Before: Jan 31 15:41:08 2025 GMT
Not After : Feb 7 15:41:08 2025 GMT
Subject: CN=679cef15-b02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:09:40:13:3a:9d:f9:db:2e:db:27:35:1d:
65:a4:21:3c:2f:cd:b5:58:e7:eb:ce:11:2e:e6:6d:
30:47:dc:ca:1e:51:5a:88:bd:c0:0f:c9:29:44:6d:
00:14:39:27:3b:15:0b:8c:87:0c:f4:2e:db:05:e2:
9d:e4:a9:22:0e:c7:7e:11:5a:0c:74:56:1e:d8:ab:
0a:0e:71:3e:90:06:3b:25:37:a4:f4:c5:6f:1a:50:
0d:d0:d0:01:dd:1d:77:50:49:fa:0b:6d:46:1b:1a:
3c:35:d0:08:69:c7:25:c1:4d:2a:4b:2e:57:12:23:
9e:bd:c7:54:9d:38:dd:94:d1:7b:f9:6b:86:bf:66:
ec:c5:db:57:80:0d:64:72:f8:83:fe:d8:5a:bd:0e:
4b:5e:b8:22:e7:c2:a2:d3:18:e1:6a:c9:2a:6f:13:
f0:b9:c8:71:eb:b4:37:6a:64:74:fc:6b:70:cd:24:
a8:db:23:80:8f:2f:f6:d6:89:38:9f:25:17:91:be:
d0:1c:b7:0e:f1:8b:1b:c6:b6:c6:ab:0b:82:f1:27:
32:57:9c:28:0c:f1:76:6f:6d:42:a1:d9:ea:d0:76:
e6:da:6e:82:2c:3d:50:86:8a:cd:8f:9b:5e:f0:b3:
26:85:2b:53:65:37:b8:56:a8:48:f4:e2:5f:e1:ed:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E7:0E:47:84:6F:36:15:40:00:4A:FC:D0:4A:56:AB:85:D3:64:CE
X509v3 Authority Key Identifier:
keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:69:b8:cc:0a:ea:c7:a8:5d:0b:5f:30:02:88:94:14:a2:
bf:53:32:a2:5e:e1:04:2e:02:de:be:2e:86:e9:9c:91:6a:36:
c7:1c:3a:26:b6:bc:eb:43:33:e0:21:25:cf:61:8b:a7:63:90:
fe:15:b5:7b:e0:c1:f7:35:f4:4e:b0:2d:99:e6:37:63:ac:68:
02:8d:12:87:88:25:83:d4:c6:a7:7e:82:c3:cc:7e:e7:c2:76:
38:a7:ae:03:c9:96:e2:ce:2b:46:c2:58:45:62:1d:f5:7c:09:
52:84:cd:ab:f1:cc:8c:f2:76:a9:ea:77:dc:62:39:75:ff:0b:
58:ec:fc:66:c6:d4:25:ae:92:3a:40:1b:e7:7e:60:94:82:df:
a5:5e:a8:87:de:1d:07:d8:bf:cf:a9:c8:c3:4d:3b:dd:c1:00:
36:3e:24:82:e3:fc:a4:4d:2b:e1:9d:f7:39:65:43:e8:33:79:
67:dd:13:a3:7e:3d:76:92:f1:ea:c3:70:5b:a4:ab:89:a4:67:
13:19:23:39:99:90:01:19:e8:dd:f4:7c:28:1d:e6:09:7a:f6:
9e:c3:af:64:53:11:68:d0:d0:b8:78:95:65:f4:d8:c9:ab:12:
73:16:9a:de:cc:d5:bc:35:f6:63:b2:70:2d:71:75:ba:60:8b:
24:48:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:38:09 2025 by rpki-client