Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
File: QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json)
Hash identifier: 5og7xe7Lcni4XMQIVgwUykda12tYkUz8sW6O20JbPYs=
Subject key identifier: F9:C5:2A:D5:DA:BB:C4:15:54:93:9E:9A:09:DD:C0:C9:34:CE:F8:D9
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial: 246A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
Manifest number: 244A
Signing time: Fri 31 Jan 2025 15:48:30 +0000
Manifest this update: Fri 31 Jan 2025 15:48:29 +0000
Manifest next update: Fri 07 Feb 2025 15:48:29 +0000
Files and hashes: 1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: YnyNzboioi6HnDE56RhRnSKgkaO/SH2IXJ8K6fgj3ck=)
2: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: mECvLTKiNtfSmorR6F/JjM52Np+0S4zr3je4uTIkUj8=)
3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: dltD8ogNsgEp1LNwu/hSjpxIyXjpYdO8Yd4ZGWGZBuI=)
4: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: tv9RdWOPyxWE44FO50AuecGDdKWojTS5Z904qdTlAMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9322 (0x246a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Validity
Not Before: Jan 31 15:48:29 2025 GMT
Not After : Feb 7 15:48:29 2025 GMT
Subject: CN=679cf0cd-ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:a4:4b:6c:df:b0:fa:bc:33:85:ae:84:b0:
ca:4a:3d:6c:26:55:03:5c:ab:82:6f:8c:b9:8a:24:
6f:e2:b4:07:de:ec:17:e0:2d:de:40:27:a5:a2:d8:
c0:4b:83:a4:5b:c5:7d:69:29:8d:30:f0:c8:fe:46:
e8:ae:99:93:07:c2:9f:bc:0a:74:f2:08:65:ac:70:
16:3c:cd:0b:fc:6e:3f:95:45:63:52:39:4f:23:6c:
cf:fd:f8:1a:39:5c:74:c4:6d:88:d7:56:ec:6e:d3:
ac:57:6c:97:2c:b8:01:71:fe:6d:b7:37:6b:da:51:
dc:c9:c4:c8:2d:be:ae:9c:da:74:00:ab:f2:63:88:
98:7d:99:81:f5:aa:90:ef:b7:a6:a5:c2:1e:4f:9e:
c3:40:28:11:06:86:f0:7c:3f:26:4e:7a:06:1a:f8:
cc:a9:cd:5e:69:9d:42:fe:86:8a:74:52:bb:ad:9e:
b0:61:d7:fe:b7:44:af:88:d3:fe:de:72:d9:4c:54:
62:8d:26:fc:77:f1:53:e6:73:e1:6b:2b:b7:ed:54:
d9:cd:ca:9e:24:9b:fc:13:76:e9:88:98:46:2e:c2:
78:b8:89:d2:96:53:24:1f:a3:44:cc:eb:f8:cb:a4:
25:e7:44:80:1c:be:71:34:e8:b4:f9:e9:db:15:92:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C5:2A:D5:DA:BB:C4:15:54:93:9E:9A:09:DD:C0:C9:34:CE:F8:D9
X509v3 Authority Key Identifier:
keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:57:b6:b3:03:33:cb:00:59:6a:7f:6f:f3:1c:16:90:49:de:
c4:5a:d6:86:c3:81:7b:85:4e:dd:95:ad:f0:97:0c:79:8a:d1:
f0:dd:4d:71:f3:36:b2:cd:f3:09:f1:41:6c:57:e8:1b:d3:df:
67:e5:63:98:6d:9e:b9:8a:a5:1b:04:e3:a5:eb:da:1e:ce:b1:
1d:60:ac:cb:24:b5:48:52:82:df:22:68:69:73:2d:4c:e1:28:
cc:8d:ad:64:93:1b:ab:30:c9:55:70:40:a1:6f:12:de:39:e9:
70:77:58:b9:a8:49:c1:1a:58:a9:95:47:c8:3f:e2:aa:47:72:
ff:b6:07:8d:69:81:41:a4:af:ae:f4:ad:b4:a3:bc:24:c5:04:
6e:a8:1a:bd:60:a2:1c:74:78:31:3a:89:53:6a:60:1d:54:1b:
0c:f5:9c:7b:75:79:32:81:1d:02:45:57:6c:05:64:7f:24:6e:
49:77:63:90:86:51:1f:31:2c:6d:19:96:99:dc:4d:dd:fa:7b:
e8:2d:ee:ff:bf:66:7a:5c:c0:82:b9:d9:f4:53:5b:5b:d4:d6:
45:31:a4:c9:50:fc:e3:7b:6b:45:89:66:95:6c:5e:b0:73:14:
fe:23:2f:e6:59:b1:70:fb:6a:c5:e3:6a:92:6a:18:9e:92:cd:
55:e4:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:55 2025 by rpki-client