Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json)
Hash identifier: RQ78eblw9+JbIJD7i7VMNcdyYe1Wqtv7X3+rnpros3w=
Subject key identifier: 48:F8:97:BF:C7:3F:CB:6F:6F:C8:30:D9:D6:14:98:B8:69:90:DB:9B
Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC
Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
Certificate serial: 344D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
Manifest number: 344A
Signing time: Fri 31 Jan 2025 14:45:46 +0000
Manifest this update: Fri 31 Jan 2025 14:45:45 +0000
Manifest next update: Fri 07 Feb 2025 14:45:45 +0000
Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: b7BiDMkfu9MF/23qkeGx6qZotfIXFALchfYh9lYIf1Y=)
2: 362219222CA111ED86813324C4F9AE02.roa (hash: GSkj+FjbpSWazTQM86dN8iHsP6D58CYPSX2/HEL/jx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13389 (0x344d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
Validity
Not Before: Jan 31 14:45:45 2025 GMT
Not After : Feb 7 14:45:45 2025 GMT
Subject: CN=679ce219-aafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:19:cb:b3:bd:af:9d:5c:53:94:92:5b:d1:
a8:c0:11:3c:03:7b:d5:52:a5:67:55:d7:be:94:a8:
81:7d:97:76:5c:d9:0b:ea:a8:a6:a2:cb:fc:61:8e:
a2:5c:e2:21:c9:9b:79:6b:57:99:1e:3b:c7:a6:c0:
7f:81:da:77:58:16:92:b8:1b:d9:33:81:42:cc:48:
a2:80:03:e0:62:74:19:46:f2:23:24:bf:0b:4f:75:
4c:7a:db:f3:bf:3d:12:1e:53:d3:7e:1b:55:b1:bb:
d9:7d:34:57:1e:75:5d:57:67:1b:da:02:db:6b:76:
02:ce:18:a1:03:8f:71:04:0e:66:ff:46:b3:d1:52:
a1:b5:d5:fe:82:bc:d8:c6:f0:e3:17:b8:8d:35:b0:
b7:85:aa:4a:b6:23:a4:80:f9:82:7e:b7:33:6b:17:
0e:a2:05:de:87:1a:cf:3f:4e:92:31:b8:5f:ea:f5:
9f:9a:3d:d0:f3:5b:73:d0:44:74:5e:5a:18:ea:24:
34:eb:99:6b:ec:22:e2:31:56:9b:27:14:bf:87:d4:
59:cd:f0:59:bf:68:52:51:a5:8e:91:96:ab:07:1b:
ad:16:75:eb:d8:8a:5f:0c:31:43:e5:a2:67:62:5e:
c3:f0:3e:cb:dd:a7:7d:19:42:e5:82:8c:75:69:69:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F8:97:BF:C7:3F:CB:6F:6F:C8:30:D9:D6:14:98:B8:69:90:DB:9B
X509v3 Authority Key Identifier:
keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:1f:eb:b1:5b:62:7c:aa:66:59:bb:ab:63:9b:23:10:5a:
19:c3:dd:55:2d:2b:2f:6e:29:0c:50:b0:21:33:73:dc:0b:9f:
80:38:bd:a2:4d:89:bb:d6:11:92:3c:4a:b9:65:7f:6c:04:77:
7a:f2:9c:2f:c0:bc:68:df:90:20:9b:8a:21:57:4f:eb:fc:43:
88:88:85:8f:65:c7:61:b9:0f:c4:af:e8:84:44:16:81:5a:41:
6b:b6:43:b2:d5:c4:0a:dc:61:c3:c8:f9:3e:fd:30:17:80:1e:
ee:a9:22:d4:6b:7a:75:ce:a5:1b:84:8a:b6:14:3c:c3:cb:98:
53:62:82:18:74:65:b7:0a:b3:98:c9:bd:06:a9:43:8a:c7:39:
f7:9b:30:1d:15:41:ba:ef:12:29:c7:de:d7:44:e6:6a:d5:83:
3c:1d:03:2a:94:28:9f:f8:19:55:d3:ee:0f:fd:2a:26:ad:51:
9b:c6:8c:bb:f8:6c:db:4c:cb:ac:ba:14:62:19:f9:fd:62:c4:
d9:72:9a:a3:1a:bd:63:e7:9d:21:2f:ae:43:11:27:7c:ad:cc:
9d:ae:e6:56:b6:e6:0d:2f:8a:c0:53:86:27:cb:a6:1c:eb:a2:
4f:24:50:31:be:59:11:69:fe:37:47:f2:a6:b2:c9:bd:03:26:
f9:57:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:16 2025 by rpki-client