Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json)
Hash identifier: IFNPUwgzqyIeRPmDexSmwY7hCkiU7SFB1+fJmhzDGFI=
Subject key identifier: 12:C0:8B:2A:56:63:94:4F:EC:13:F8:43:18:EE:58:90:ED:C1:45:65
Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
Manifest number: 0C2B
Signing time: Fri 31 Jan 2025 18:18:23 +0000
Manifest this update: Fri 31 Jan 2025 18:18:23 +0000
Manifest next update: Fri 07 Feb 2025 18:18:23 +0000
Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: KUnvqIFbGVYrSdtnwv6VZ3NxJBicr+vcEyfCjQtpOi4=)
2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: NrdZbVMd1dHy2FEEAMNxWeknBO6BNRI5lNG3a+z4IPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Validity
Not Before: Jan 31 18:18:23 2025 GMT
Not After : Feb 7 18:18:23 2025 GMT
Subject: CN=679d13ef-6bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:0c:c4:08:de:73:8e:f0:42:b2:b7:09:c1:
fd:0a:b6:d6:00:12:47:92:e0:89:20:63:ad:0d:e0:
b4:1b:16:d6:4f:b8:20:b1:da:0e:05:49:46:be:5a:
ab:d4:82:54:b6:d0:cb:a5:a8:2b:8c:53:2d:85:ef:
7c:1d:42:50:4f:3b:49:78:5c:2c:d8:75:ca:3c:1d:
7c:9a:92:13:b3:c2:b1:91:da:62:ca:0e:a1:2f:cb:
0b:00:21:50:d0:c8:4a:b0:73:e7:8c:6c:cd:eb:6f:
c7:7d:d8:40:5c:d3:db:85:1b:45:a6:3f:c9:64:42:
27:b6:37:b0:f3:5e:1e:6b:a9:47:29:0e:a7:ad:d6:
55:8e:32:f8:93:76:dd:15:08:67:67:fa:62:05:e9:
4c:ed:c1:b8:00:7b:ad:31:60:51:a0:98:34:ce:74:
88:12:fe:9b:c2:a1:e7:24:f2:69:c7:75:bc:b9:7f:
5f:82:ca:e3:86:90:72:9a:2b:97:26:e1:7b:c4:18:
41:44:31:3c:ac:dd:84:7f:51:12:57:cb:f7:7a:f7:
6e:56:db:8c:2c:eb:dc:e5:a0:b2:1f:7b:bd:b4:39:
ce:b0:cd:e8:81:74:21:76:60:0a:1d:d9:e8:13:ae:
88:2b:24:57:c7:81:dc:52:41:74:95:48:99:de:27:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:8B:2A:56:63:94:4F:EC:13:F8:43:18:EE:58:90:ED:C1:45:65
X509v3 Authority Key Identifier:
keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:89:5e:c4:09:db:dc:6c:51:92:6a:e6:2e:31:33:e8:ba:7a:
49:56:09:4b:2a:41:ca:46:c3:f3:bf:f3:f3:b2:ac:ff:cf:26:
5a:72:7f:7d:58:7a:66:54:d5:36:96:fc:e3:9b:42:39:29:9f:
d4:39:c4:4e:34:c7:10:7a:bd:cc:06:31:f7:cd:0a:f2:dc:7d:
15:e0:3b:49:17:a4:3b:94:91:b6:85:4d:bc:08:ff:c0:e4:60:
d5:ea:db:fd:5e:f8:d5:cb:e3:6a:47:a6:aa:0a:8f:07:20:04:
af:0b:28:27:ba:9f:c7:2d:c6:68:10:6e:9d:4b:0b:cf:49:a1:
c9:a7:26:cd:d4:09:64:9a:6b:53:d7:13:79:0f:55:75:c0:b5:
5b:1e:70:65:90:a9:fd:7f:dc:ca:3c:e5:6c:50:45:3d:f5:72:
7f:35:32:8c:ce:17:49:ff:8b:61:36:c0:a8:d4:cc:09:30:04:
d5:22:90:f1:b3:c4:38:f1:d9:55:6e:fb:4b:50:59:e0:0a:de:
33:b7:11:34:8f:a0:6b:45:2d:cb:bd:7b:8e:ba:75:65:67:67:
66:00:ce:73:a0:a3:e4:4c:f7:99:ee:45:59:99:63:ba:74:01:
dd:f7:5f:b1:db:17:4c:47:5b:00:ad:6f:98:08:ba:56:fe:0e:
da:2d:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:31 2025 by rpki-client