Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File: qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier: aMfaUyU9QeN0sH4Uv65rSPHVFC+yO6Egz/4k/qeSREE=
Subject key identifier: 0E:D7:5C:BA:19:12:31:C6:06:03:93:E7:28:88:36:FA:1C:82:5B:AA
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial: 2C86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number: 2C52
Signing time: Fri 31 Jan 2025 15:34:01 +0000
Manifest this update: Fri 31 Jan 2025 15:34:00 +0000
Manifest next update: Fri 07 Feb 2025 15:34:00 +0000
Files and hashes: 1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: YNetoQK6ZjR2d5jUz+ihobrJbXk9EEWtWksbPopwqNQ=)
2: C8E49B061B4A11EFB0254061C4F9AE02.roa (hash: 7FPN0SRuWJfULT9tVDvUHZr3ouxxqIjwcV/rSLIEsSw=)
3: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: cgJY4Uq3MzUzp2B5uz4iMY9zZJaK3BtYC4bJCl9WkNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11398 (0x2c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Validity
Not Before: Jan 31 15:34:00 2025 GMT
Not After : Feb 7 15:34:00 2025 GMT
Subject: CN=679ced68-6735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:f7:71:45:20:c5:f6:a7:04:cd:1b:cb:a8:
32:ce:7b:4b:9d:ed:eb:e7:2f:39:8e:78:bb:b9:fb:
40:af:07:4b:5d:fe:ed:46:79:24:78:60:20:46:ef:
54:e4:74:0c:24:8c:9c:e9:e5:db:55:3d:aa:36:7a:
7e:1c:50:76:f9:15:94:8c:5d:e8:6b:fa:ef:e1:80:
55:58:70:84:1f:15:d3:b0:61:3f:cb:48:05:9e:ed:
75:05:b3:24:ff:af:9b:90:91:bc:17:67:e9:02:39:
64:5a:f4:a2:f9:0d:79:50:11:1b:38:2f:60:10:a3:
ff:5d:88:82:48:99:66:11:db:76:1f:3f:55:f6:a8:
8b:06:f8:97:5c:a1:e5:fb:aa:8b:5c:97:67:66:17:
79:61:84:38:e6:8b:dd:02:5d:94:b5:05:fb:44:4c:
54:63:d8:a8:a6:06:fa:1a:5e:16:82:af:b5:2c:b0:
21:43:f2:3b:0b:78:02:97:2d:a9:00:07:aa:51:ce:
4b:8e:a3:6c:7e:c3:b8:4a:5f:bd:a5:5a:80:76:4a:
77:97:a3:ef:c6:60:90:79:54:ea:0a:0c:b6:bd:35:
90:b1:f7:ab:92:92:4d:42:8a:17:dd:0c:1b:70:91:
21:b7:f4:5f:33:a6:d6:4f:a5:e7:3c:d8:b5:d7:97:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D7:5C:BA:19:12:31:C6:06:03:93:E7:28:88:36:FA:1C:82:5B:AA
X509v3 Authority Key Identifier:
keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:4c:4f:bc:4a:43:d7:79:a6:00:12:a6:ac:17:ee:5f:fe:
66:6b:fa:3a:cf:47:a1:63:3d:c4:a1:3f:9c:6f:3f:15:28:b0:
6c:db:0a:dc:46:c9:fb:53:ea:ea:dd:a1:d3:59:1e:64:78:94:
ea:bc:e1:49:a4:f7:5b:05:2d:15:cb:31:44:e1:73:fe:0a:3e:
3e:11:7d:64:21:54:ea:c3:3f:77:ed:87:51:45:05:ac:9e:89:
91:11:b8:b5:bf:a4:5a:f9:3f:5b:fa:9d:f0:9e:f2:bc:57:5b:
de:88:a2:c5:5c:73:16:72:d4:89:d9:a8:9c:c8:99:f9:7b:64:
3a:6d:53:af:25:26:ff:e7:66:23:b6:44:9e:71:4f:00:5f:44:
bb:b0:98:a9:70:2c:d8:7a:98:0f:3f:1a:17:1f:f5:b8:bf:56:
a3:a9:62:0c:8b:d3:81:d8:25:80:1a:e3:4b:8e:63:bd:9d:b7:
43:fc:3d:fb:24:68:63:a7:a2:0d:78:4c:90:2e:d9:aa:e8:9a:
e5:13:50:ba:5d:b6:cc:86:ae:e8:6f:48:fa:da:04:0e:8a:79:
52:3a:b0:e6:52:4f:db:c6:f4:d1:ed:3e:20:2c:61:dd:f7:45:
49:b2:f7:b6:7a:92:c6:12:65:d4:77:ec:db:34:ec:fd:53:83:
bf:88:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:04:09 2025 by rpki-client