Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json)
Hash identifier: HeXtYG76EgefwR46DcYKOpk0gPQFvGCLMdMJRfB4m9o=
Subject key identifier: A6:F6:BA:04:E0:E8:CB:5A:76:30:91:F1:5C:7B:13:39:54:99:84:D9
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial: 06BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
Manifest number: 06B5
Signing time: Thu 30 Jan 2025 22:05:57 +0000
Manifest this update: Thu 30 Jan 2025 22:05:56 +0000
Manifest next update: Thu 06 Feb 2025 22:05:56 +0000
Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: sjRiJXkzFHVpjH45oWrDxvamjIdGTkDWyEnwYAQ1QuA=)
2: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (hash: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722 (0x6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Validity
Not Before: Jan 30 22:05:56 2025 GMT
Not After : Feb 6 22:05:56 2025 GMT
Subject: CN=679bf7c4-2edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:02:0d:62:a2:8f:8c:43:56:65:64:a3:84:
e5:67:42:61:71:32:00:b4:42:32:90:cf:ce:e7:9e:
a3:89:2a:9e:c0:dc:d4:df:e5:3e:97:5d:cb:c3:58:
b6:ca:63:c4:42:aa:72:83:d1:68:b1:d5:0d:a2:44:
f9:e5:1d:0a:84:98:d9:04:ef:42:80:63:b9:28:bc:
ba:ed:33:02:cd:7d:73:d6:86:9f:2b:14:aa:63:29:
3a:76:51:67:54:7e:05:2a:83:a8:01:d3:09:0d:8e:
eb:c1:9e:1b:f7:15:d0:f3:81:5e:f7:66:64:58:c3:
ef:27:fc:66:69:70:83:bf:7c:40:0a:99:6f:ae:8e:
1b:b8:9b:0e:78:b6:d3:e1:e9:79:8e:c4:98:34:c4:
1b:be:2d:bf:35:0c:96:16:75:1b:ec:d2:5b:7b:63:
11:37:96:f1:df:92:bd:dc:01:f1:e5:95:2f:5b:f0:
14:ff:de:ef:58:8e:00:db:dd:c0:bf:8c:ab:5b:a3:
91:a3:ec:6e:6f:bd:a0:cc:38:83:b9:49:1f:75:f0:
22:47:23:f5:84:48:83:d6:48:03:39:1e:f3:17:e6:
12:2c:21:94:ed:5e:bb:15:5b:e0:db:bb:29:f3:6e:
3a:cf:50:46:dc:b2:d3:ba:7e:62:6e:b5:e8:7e:b5:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:BA:04:E0:E8:CB:5A:76:30:91:F1:5C:7B:13:39:54:99:84:D9
X509v3 Authority Key Identifier:
keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:76:41:bb:a0:7c:3a:ef:cc:98:d9:0f:81:b9:05:69:a5:d5:
d7:f7:77:1b:fe:79:32:88:77:9e:fc:e9:26:38:c7:9a:ca:66:
63:27:bf:4a:4f:1d:7f:b6:db:52:44:f4:d0:de:42:2a:8d:8e:
67:f5:9e:0b:ea:24:9f:23:34:a4:de:e5:e0:10:0c:8e:14:06:
db:21:20:b4:46:cb:1c:7a:b0:c4:9b:af:93:be:2c:24:52:22:
f6:de:f2:be:f8:20:17:0a:44:a8:a3:15:b2:b3:92:27:22:60:
76:73:fb:8f:9b:e8:58:64:0d:71:55:01:89:1b:63:4b:5b:5d:
af:91:13:ea:3d:4a:0d:18:6b:f0:8e:97:28:28:fb:a6:7a:9c:
33:09:1a:8d:4f:b2:57:1c:e3:91:40:6e:a6:d5:46:ba:74:eb:
94:02:53:9d:b5:b1:eb:02:b5:e6:3f:78:72:37:cb:af:3a:68:
55:dd:35:18:b8:80:34:9c:4d:40:99:99:98:af:99:0a:1c:25:
5a:95:d3:bb:42:7e:a2:a6:b8:d0:59:17:7e:1e:4d:af:94:4e:
6e:83:55:60:9e:76:91:eb:a3:7b:2d:1e:a2:fd:27:06:35:cb:
ef:04:87:f2:4a:15:0c:32:d1:b9:04:3f:a2:47:9b:a8:d3:6e:
5b:72:2a:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF
NTMzMENGNzgwHhcNMjUwMTMwMjIwNTU2WhcNMjUwMjA2MjIwNTU2WjAYMRYwFAYD
VQQDEw02NzliZjdjNC0yZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxT4CDWKij4xDVmVko4TlZ0JhcTIAtEIykM/O556jiSqewNzU3+U+l13Lw1i2
ymPEQqpyg9FosdUNokT55R0KhJjZBO9CgGO5KLy67TMCzX1z1oafKxSqYyk6dlFn
VH4FKoOoAdMJDY7rwZ4b9xXQ84Fe92ZkWMPvJ/xmaXCDv3xACplvro4buJsOeLbT
4el5jsSYNMQbvi2/NQyWFnUb7NJbe2MRN5bx35K93AHx5ZUvW/AU/97vWI4A293A
v4yrW6ORo+xub72gzDiDuUkfdfAiRyP1hEiD1kgDOR7zF+YSLCGU7V67FVvg27sp
8246z1BG3LLTun5ibrXofrWi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKb2ugTg
6MtadjCR8Vx7EzlUmYTZMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5
MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1
NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsdkG7oHw678yY2Q+BuQVppdXX93cb/nkyiHee/OkmOMeaymZjJ79K
Tx1/tttSRPTQ3kIqjY5n9Z4L6iSfIzSk3uXgEAyOFAbbISC0RsscerDEm6+Tviwk
UiL23vK++CAXCkSooxWys5InImB2c/uPm+hYZA1xVQGJG2NLW12vkRPqPUoNGGvw
jpcoKPumepwzCRqNT7JXHOORQG6m1Ua6dOuUAlOdtbHrArXmP3hyN8uvOmhV3TUY
uIA0nE1AmZmYr5kKHCValdO7Qn6iprjQWRd+Hk2vlE5ug1VgnnaR66N7LR6i/ScG
NcvvBIfyShUMMtG5BD+iR5uo025bcio2
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:53:08 2025 by rpki-client