Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: 2h2AX2lmWXIZuNx8pWOTjqhqiqOnnVQT00lHZzYSE3k=
Subject key identifier: 56:D9:B5:F4:E0:E4:64:24:FD:CF:F3:91:A4:1D:13:C2:B9:EF:2D:6A
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 01B9
Signing time: Thu 30 Jan 2025 22:39:26 +0000
Manifest this update: Thu 30 Jan 2025 22:39:25 +0000
Manifest next update: Thu 06 Feb 2025 22:39:25 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: MaMVytMjmp1cmE8uggnvQVH6XhG2uka/PLhvr5FiUxc=)
2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: Ocok0YaJANXTvMflX7rHaTlDxzxA5eYlN+U42YstUOc=)
3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: NlZGw5kxdJBiCylDN3iP3l9B8OoHi1F1b4+2lDwSRDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Jan 30 22:39:25 2025 GMT
Not After : Feb 6 22:39:25 2025 GMT
Subject: CN=679bff9e-a906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fd:ad:2f:7d:a7:a4:39:30:1e:0c:5c:b4:b5:
40:c6:2a:52:fc:10:40:ee:bd:1a:48:b1:57:5b:fb:
51:3a:13:17:8c:1b:33:a7:c5:33:e5:f7:9f:28:60:
74:19:6f:33:47:38:8f:6d:84:63:8a:bb:63:01:d4:
a2:2f:aa:03:73:60:37:fc:8a:ad:5b:18:54:db:ec:
b6:7f:85:35:17:81:ac:8c:d3:24:1d:6e:8a:b1:00:
9d:28:fe:73:6b:9e:c8:f6:ba:c1:5f:ca:30:27:47:
8e:10:d4:24:b3:bf:5c:b3:c6:6f:87:fd:58:74:81:
8c:ea:cf:d3:1e:c6:ad:57:e1:41:81:62:9a:a4:67:
0a:71:f3:66:ad:be:f1:b2:66:e4:7c:a1:7c:4c:86:
48:77:2a:84:5c:fe:5a:49:cf:70:38:81:64:6a:fc:
f8:b3:3a:d3:fc:7a:5b:5e:08:b3:0e:de:9a:8c:ee:
3d:b3:6c:77:d2:8b:e9:c3:50:20:21:82:03:ed:46:
55:49:52:cb:9e:2d:60:21:b7:a6:71:74:fa:de:a0:
79:af:cd:fa:65:f4:e7:a8:66:e7:49:3b:10:6c:26:
87:9c:d9:f6:3c:d8:c3:4e:70:e2:73:24:b4:d8:0f:
2d:7c:5e:21:f8:dc:2e:b4:d8:ee:9c:28:d9:54:a4:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D9:B5:F4:E0:E4:64:24:FD:CF:F3:91:A4:1D:13:C2:B9:EF:2D:6A
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:72:e2:80:36:52:f8:c6:25:de:4c:5d:de:14:8a:e9:b1:32:
a8:e1:c0:51:ee:c9:fb:84:53:54:cd:bc:fc:bf:10:f2:0e:db:
b0:bf:9d:1b:bb:1d:f1:06:da:05:62:54:81:bf:fa:3d:71:36:
83:2b:5a:ef:af:d7:ed:f6:6e:34:3c:2c:dc:7f:73:07:0d:df:
c8:16:63:26:c9:71:5c:d1:23:d6:3f:f3:64:67:96:0e:3c:e7:
08:2e:f7:10:a1:a2:21:ff:c4:ca:22:1c:32:c6:d0:72:d3:a0:
dd:1e:e7:22:d8:f3:9b:91:e5:4a:9a:d7:e8:b5:ad:83:d3:d7:
e0:da:0f:0d:9a:82:9c:53:0b:db:8c:73:2b:7e:b9:d9:ec:04:
af:b1:3b:4f:8c:30:00:52:ff:71:d5:97:90:f2:d4:50:a4:39:
98:38:2e:87:61:4f:a7:38:88:f6:c1:3a:9c:0f:d4:9d:3c:32:
20:41:be:ce:52:fc:b1:55:e1:df:50:08:44:f7:76:01:45:9d:
1d:59:29:75:4d:64:22:fb:d4:ad:de:4f:52:91:9a:de:3e:55:
f4:2b:15:f8:f3:a3:c2:0d:a5:70:50:84:5b:da:b8:01:f1:20:
1a:d3:55:06:b4:2f:9e:1b:d7:95:3b:ca:12:5a:4b:09:d8:45:
38:94:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:34 2025 by rpki-client