Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier: 4W6OwY7IEECOhn7XXJ4oHEaONX4M2lp0hWJCJIgdu+c=
Subject key identifier: 9A:CE:3C:56:5F:4E:3F:E4:82:C7:FB:41:CE:4F:63:1D:FE:CB:FD:DA
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number: 017B
Signing time: Fri 31 Jan 2025 03:00:54 +0000
Manifest this update: Fri 31 Jan 2025 03:00:53 +0000
Manifest next update: Fri 07 Feb 2025 03:00:53 +0000
Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: vZAgFHUCgxssKstkOjA7qxD+FEk5o5rgfuktCSNXEns=)
2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: gmNihSedKpDGfcYPF1sadPjFdgvJvl9JTBA30x8f3SM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Validity
Not Before: Jan 31 03:00:53 2025 GMT
Not After : Feb 7 03:00:53 2025 GMT
Subject: CN=679c3ce6-043a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:b6:df:1d:fa:d0:56:70:6f:5e:d8:4e:97:
d4:9a:ba:a3:ad:da:38:56:ec:7f:9f:23:d0:d2:28:
b6:0c:ae:30:68:f0:68:4b:8f:6c:cc:41:ce:13:de:
a8:30:1c:95:c3:31:4e:1f:53:be:42:1d:a1:5b:01:
b0:60:29:e6:ea:37:61:27:ae:dc:b9:49:43:00:f6:
e2:25:24:5b:61:ef:c0:3d:48:b4:1a:fd:c2:d7:a3:
0d:21:5f:5c:5d:91:66:41:88:5f:c1:dd:82:47:0a:
38:8e:2d:12:83:82:3e:f6:08:05:05:f8:87:50:f0:
fd:e5:eb:53:cd:dc:8f:ac:c2:70:21:ab:bf:5f:5d:
f1:b5:c0:4c:53:07:dd:93:d2:27:ed:07:79:12:2a:
49:f9:12:83:37:68:6d:fb:f2:94:39:99:4e:4f:00:
00:06:e5:0d:b4:b5:48:bb:72:90:bc:36:30:2c:5d:
eb:de:d6:5f:08:39:47:61:a4:d0:3e:45:da:a9:f2:
c1:57:c1:30:37:65:a1:4e:46:1c:ce:61:d4:5f:b7:
1e:2b:37:7e:ab:71:da:b0:cc:f7:d0:ea:76:84:ef:
96:24:01:56:fc:57:00:09:6b:5b:e7:e4:c7:8f:87:
d7:7b:86:f8:c3:1f:10:0c:03:8e:44:47:fb:bd:c7:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:3C:56:5F:4E:3F:E4:82:C7:FB:41:CE:4F:63:1D:FE:CB:FD:DA
X509v3 Authority Key Identifier:
keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:47:62:d4:e3:74:7b:45:64:58:9b:5b:3c:08:8c:55:73:f7:
db:15:3e:27:9a:8b:d9:2f:c7:d2:f6:ff:e0:c1:8b:34:74:ff:
74:bb:b4:99:a8:ad:c3:9b:78:00:97:50:f1:bb:36:56:50:02:
be:d9:9f:ee:42:f8:8a:c2:0c:3b:f6:e6:f9:65:ff:7e:89:4d:
79:28:4f:a5:02:43:94:d5:62:1c:fe:23:db:ce:05:ea:70:00:
05:79:63:4c:03:77:4d:ea:c7:bc:85:43:eb:66:ec:f1:8d:ad:
f8:9d:aa:af:1d:4b:14:3c:4e:27:56:21:e1:ca:3c:83:30:c8:
cc:ee:76:91:23:c2:bf:10:2b:5b:6f:c5:f6:1c:68:80:55:d4:
df:21:6c:57:ea:31:96:28:68:f7:00:8b:5b:ea:9a:66:9a:f0:
fb:cf:c4:69:3d:f0:5e:b5:60:94:60:9c:99:54:81:da:b7:65:
ce:58:ef:1e:43:7f:5a:95:9c:98:ad:97:c0:ae:11:45:00:00:
30:00:62:54:b0:dc:04:e0:2c:a3:ee:ac:5a:f3:f4:da:4d:9b:
39:7a:ee:d1:13:72:6a:b7:4b:73:f1:63:f0:d1:f2:31:d6:ae:
a4:1e:58:2f:d6:ec:a1:50:87:ca:ec:10:cf:f0:5b:3d:b8:e7:
3e:21:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:18 2025 by rpki-client