Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier: 8gGiZIq7BEKFrVIeb922K2O+OZEphu1MZOfPE+t2IP4=
Subject key identifier: DE:28:60:88:CE:4E:36:59:19:0D:3B:4B:01:F8:B3:F2:C2:A7:DA:D0
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 070D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number: 0696
Signing time: Thu 30 Jan 2025 22:56:57 +0000
Manifest this update: Thu 30 Jan 2025 22:56:56 +0000
Manifest next update: Thu 06 Feb 2025 22:56:56 +0000
Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: rae4kKCRxHqiQFeTGpOD5MtRD9tRJdTbkl9/itWzkhg=)
2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: E8TJXB5p3Bk6Mywr/JoQzqnkHpychLbxDlvay8pE/5g=)
3: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: gHO3ucDCMpaAi01yTk9v+DmdcMeSIsp2IE197EC8p+s=)
4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: XtqW7baviXAU6XqPk4n9ZbDubsg33KGDVEvxGrKpGog=)
5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: HE9hhfjLbpoLmdYRqz2hD2rCJCRDbET7MCnv1VGXqgg=)
6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: L3oo3WwbXDM/suf25S9ZfGKmbEMta5yJxrHpRj7RBoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Jan 30 22:56:56 2025 GMT
Not After : Feb 6 22:56:56 2025 GMT
Subject: CN=679c03b9-66c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:bf:d1:ff:32:69:f7:ad:e2:f7:46:11:fd:
1c:6d:c6:e9:02:27:94:04:c6:4f:b9:57:81:32:f7:
c8:f3:7e:e5:0e:f6:6f:5e:6d:73:6d:2d:36:77:14:
69:dc:e0:09:8a:90:ca:00:74:ca:a0:1f:fc:4b:5f:
20:c7:4b:fc:a7:65:55:a7:26:ad:fc:3e:7f:47:8f:
17:6e:92:41:44:b5:39:f9:08:2b:18:6d:86:84:15:
3e:18:ca:03:6f:c2:32:ee:f8:6a:be:45:09:2c:a4:
4e:a2:50:33:1c:a2:bd:34:73:ca:2f:0c:8d:31:2d:
e2:52:4f:70:64:a6:4a:37:24:1f:ed:46:4e:da:da:
97:4d:17:87:e4:fc:81:00:70:de:c4:24:8b:47:a7:
0c:7c:b2:2a:32:a0:5d:63:5f:b9:5a:fa:3b:de:29:
aa:71:ea:bb:47:5f:6a:d6:8e:7d:17:c8:51:37:82:
97:d0:ae:34:e2:22:cf:ff:88:9f:52:45:e3:f4:9c:
8f:e6:28:c6:00:f1:36:15:63:46:1d:f6:2c:6e:ac:
d3:25:b6:03:91:0a:6b:36:f9:9d:86:6b:14:a1:5b:
24:a3:35:80:9c:6a:18:f9:55:74:fe:f5:39:ca:ae:
6c:87:3a:9c:1e:63:f0:fd:29:c5:5a:f6:f6:82:b8:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:60:88:CE:4E:36:59:19:0D:3B:4B:01:F8:B3:F2:C2:A7:DA:D0
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:13:e1:5c:5f:ee:b8:09:76:45:f6:40:d9:01:0c:33:0e:91:
55:f7:64:8a:87:a5:d1:7a:7c:1d:8a:3e:0e:5b:c9:10:9f:b7:
a2:d7:7b:11:bf:b3:44:e3:7c:e9:36:4a:70:6c:59:6a:ac:0b:
68:5b:0c:4d:05:1b:03:65:02:58:75:74:97:40:28:39:39:9c:
ae:b2:bb:bf:d9:15:b0:24:e7:d7:4f:ca:a1:8a:52:a0:7e:cc:
73:f6:c2:45:90:3d:94:4e:84:25:14:4b:ba:8e:a5:9d:df:34:
2a:37:9d:4e:53:00:09:3a:fb:b4:60:bc:eb:eb:93:dd:eb:d4:
3f:9d:d9:fc:ba:e7:87:40:69:77:b7:8a:6c:5d:88:d1:29:cf:
52:13:dc:39:06:a1:47:10:09:4e:ef:07:2c:5f:f3:e8:ea:d4:
f3:d7:0b:0d:e2:8f:ee:2d:29:8d:dd:2e:fd:6b:a0:55:d5:fc:
3e:49:b2:bb:ae:f2:b4:a4:a7:95:85:58:97:d7:78:c6:8c:29:
7d:9f:8f:49:16:5e:1f:04:46:f0:0b:70:cf:bc:f9:e7:4c:0f:
24:3b:06:98:25:7f:6b:10:e2:30:c3:42:f6:cd:08:44:d1:ec:
ea:7f:97:39:c6:a7:22:0e:6f:ce:57:b9:10:4f:3a:9f:22:9d:
20:01:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:49 2025 by rpki-client