Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier: Ow/J0d7UrqIvttD3Ks7n67FzXO3zWCG6vH3RP7NTWQs=
Subject key identifier: 96:45:D6:CA:E4:8F:11:EA:EE:6B:16:84:96:BD:68:19:4D:AD:41:05
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 04:32:11 +0000
Manifest this update: Fri 31 Jan 2025 04:32:11 +0000
Manifest next update: Fri 07 Feb 2025 04:32:11 +0000
Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: ooIRCLjmBsw+VTnep5BsiXFmeogynazSJJPHxv1wHhU=)
2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: +vHH0mUjaHjNGLcgyypJ8y/RcZMmCEJZHVNAnsairms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Validity
Not Before: Jan 31 04:32:11 2025 GMT
Not After : Feb 7 04:32:11 2025 GMT
Subject: CN=679c524b-4f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:1c:12:d2:fe:cb:c0:7d:be:ea:f6:73:43:
7a:9f:6f:e5:f1:42:0c:b4:51:42:34:a0:99:43:00:
32:ab:a6:44:94:bd:a5:d6:a2:d7:db:40:56:cb:47:
7e:79:2e:70:85:1c:fb:17:51:49:6e:76:62:4c:17:
d0:fb:b5:9e:fe:6f:67:f6:19:9a:33:da:e1:91:9c:
bd:9d:6c:53:7a:f1:f0:27:37:65:af:d1:70:d6:87:
e8:70:e3:89:20:bc:b1:a3:db:ee:e7:8b:e3:83:38:
2f:d0:67:16:69:6e:8a:1c:6a:75:68:90:05:4a:ae:
a8:ae:ca:20:44:47:43:45:d3:ef:cd:9b:3d:84:ef:
ab:c1:d8:0f:80:15:be:48:8c:25:6c:7e:eb:bd:13:
9f:47:dd:e9:98:9e:a4:55:2c:e3:ca:f1:f6:1d:a4:
8e:f6:e4:c2:f2:8e:10:b2:fa:83:ec:0d:db:d9:dc:
8f:66:a3:5b:a6:5a:f9:a8:27:df:6f:bb:74:b5:48:
d6:df:74:b7:24:61:3c:0c:81:b5:27:82:de:81:43:
11:4e:aa:4a:e6:de:bb:36:a6:c6:2b:05:82:21:98:
14:1b:e0:1c:73:85:3c:d7:81:9a:38:c0:46:c8:bc:
24:74:0b:a7:4d:87:79:66:e0:72:a2:b8:0a:2b:f9:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:D6:CA:E4:8F:11:EA:EE:6B:16:84:96:BD:68:19:4D:AD:41:05
X509v3 Authority Key Identifier:
keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:98:25:10:74:ce:d4:55:4e:12:98:60:12:0c:d6:b4:ad:
33:08:0d:3f:a9:55:fa:ea:47:33:6f:b4:f3:76:5b:64:a3:07:
dd:10:ff:9a:bc:ee:22:a1:42:e1:7c:dd:31:13:6f:07:61:87:
1b:81:7f:f7:bb:bd:c6:4f:bc:06:c7:00:a3:14:db:ff:a7:3b:
b3:09:cf:79:1a:76:3a:5b:2c:eb:4d:e2:af:2b:31:29:c5:f6:
3c:bc:fd:71:e9:e8:31:06:39:1a:ad:71:4b:e5:dd:35:89:26:
79:0c:ae:f5:9b:13:58:9d:da:e7:78:bd:da:93:cb:06:b1:65:
0c:8e:58:9c:76:f9:6c:bf:cc:3f:4a:1c:e1:c3:f4:af:d2:c8:
3c:8f:e6:68:2c:6b:00:72:53:f6:ce:b7:05:aa:fc:fe:e3:72:
de:95:d0:2b:71:30:06:62:04:65:26:e3:9b:6c:db:cc:53:67:
b4:81:a0:a4:84:29:ea:32:b0:c8:4a:0a:7a:86:7e:60:e9:c3:
91:9f:3c:12:b7:ad:3b:61:8c:0f:df:e8:d8:35:d8:f7:10:82:
43:96:d0:57:06:da:18:fe:64:79:fb:c2:05:91:4e:f9:ff:07:
f5:fe:a6:fc:4d:26:9c:17:1d:be:5e:db:d3:e5:f4:bb:9b:7a:
5f:78:81:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI3QjExMTAvBgNVBAUTKDQzMkEzNkU2RDU3MDBCMEJDQUNDRTBGNDE1NzZBRTZC
MTNDQUQzQzAwHhcNMjUwMTMxMDQzMjExWhcNMjUwMjA3MDQzMjExWjAYMRYwFAYD
VQQDEw02NzljNTI0Yi00ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplMcEtL+y8B9vur2c0N6n2/l8UIMtFFCNKCZQwAyq6ZElL2l1qLX20BWy0d+
eS5whRz7F1FJbnZiTBfQ+7We/m9n9hmaM9rhkZy9nWxTevHwJzdlr9Fw1ofocOOJ
ILyxo9vu54vjgzgv0GcWaW6KHGp1aJAFSq6orsogREdDRdPvzZs9hO+rwdgPgBW+
SIwlbH7rvROfR93pmJ6kVSzjyvH2HaSO9uTC8o4QsvqD7A3b2dyPZqNbplr5qCff
b7t0tUjW33S3JGE8DIG1J4LegUMRTqpK5t67NqbGKwWCIZgUG+Acc4U814GaOMBG
yLwkdAunTYd5ZuByorgKK/mTDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZF1srk
jxHq7msWhJa9aBlNrUEFMB8GA1UdIwQYMBaAFEMqNubVcAsLyszg9BV2rmsTytPA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdCMS84RkFGMkJERTgy
QTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3dkt6T0QwRlhhdWF4UEsw
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F5bzI1dFZ3Q3d2S3pPRDBGWGF1YXhQSzA4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjdCMS84RkFGMkJERTgyQTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3
dkt6T0QwRlhhdWF4UEswOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVKpglEHTO1FVOEphgEgzWtK0zCA0/qVX66kczb7TzdltkowfdEP+a
vO4ioULhfN0xE28HYYcbgX/3u73GT7wGxwCjFNv/pzuzCc95GnY6WyzrTeKvKzEp
xfY8vP1x6egxBjkarXFL5d01iSZ5DK71mxNYndrneL3ak8sGsWUMjlicdvlsv8w/
Shzhw/Sv0sg8j+ZoLGsAclP2zrcFqvz+43LeldArcTAGYgRlJuObbNvMU2e0gaCk
hCnqMrDISgp6hn5g6cORnzwSt607YYwP3+jYNdj3EIJDltBXBtoY/mR5+8IFkU75
/wf1/qb8TSacFx2+XtvT5fS7m3pfeIEr
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:16:48 2025 by rpki-client