Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: sr5xgDhnk5ex0QKfp7aTj5ynU7Rk/0foNnz6jrQrmQM=
Subject key identifier: A5:46:86:A1:71:E6:FC:EE:D5:A0:8C:8E:EC:EF:AE:69:61:CF:F0:48
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 0752
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 074C
Signing time: Thu 30 Jan 2025 21:32:50 +0000
Manifest this update: Thu 30 Jan 2025 21:32:49 +0000
Manifest next update: Thu 06 Feb 2025 21:32:49 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: iRHkXQremJ4t6qBhiXIiC0sYwQsl4e6M8ATPXf83cQU=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: Ra2znUTkgYIAlMI3Nb4TxH0Q0Xt60h4LRpNWU6qPbaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Jan 30 21:32:49 2025 GMT
Not After : Feb 6 21:32:49 2025 GMT
Subject: CN=679bf001-371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:4d:45:ae:04:85:6c:f4:d9:f1:00:a2:d2:
b7:b1:d2:9f:95:02:1a:64:8f:2d:b2:ea:a4:97:44:
1d:2f:e2:70:33:4b:2d:36:f3:f9:38:ee:86:df:b5:
2d:77:bf:32:52:a7:3a:3c:e1:e6:e9:f6:19:ae:e2:
9c:c1:97:fb:b2:41:64:1f:4a:2b:c2:cb:36:18:9c:
9f:54:b3:a0:80:42:e0:9b:53:6d:81:dd:67:fb:3c:
43:cf:fa:a4:78:d3:e5:3b:87:c2:c3:2b:62:37:c9:
d7:7a:9a:09:7f:0d:ee:67:7c:60:f2:9b:36:3a:6a:
e6:4c:e9:39:90:63:d5:cf:91:72:74:2e:11:7a:ee:
54:81:27:b4:41:2e:4a:40:6f:b4:c9:04:8f:dd:39:
5d:0e:0e:33:07:16:9d:5a:99:0d:69:7e:a7:90:d7:
17:cf:9c:a7:a2:c9:b1:00:ca:a6:88:39:cc:73:e3:
18:39:d4:b1:cc:d5:8a:a1:3c:4f:4a:af:a9:4a:1f:
b2:e3:61:22:e4:9c:36:ae:8b:b2:76:8f:ae:f2:e6:
43:c2:49:d3:71:06:46:87:0b:3c:ff:67:5b:e8:b1:
12:07:3f:59:e6:fe:4e:47:cb:59:c9:0a:81:5d:d4:
78:c7:ba:98:cf:7c:55:0e:ae:b4:22:d1:36:3a:04:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:86:A1:71:E6:FC:EE:D5:A0:8C:8E:EC:EF:AE:69:61:CF:F0:48
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:bd:8b:d6:fb:f9:89:39:93:24:42:dc:8e:ad:e4:90:29:
0d:28:ac:95:41:51:7f:dc:90:fa:8b:e0:99:88:0e:3f:b5:53:
94:0c:75:cf:5d:36:2a:98:f2:fc:fd:61:ff:4a:b4:4a:87:39:
5a:ad:a0:57:ca:e7:d3:ed:43:4f:2f:94:fe:80:ac:99:aa:49:
f8:d8:55:9a:36:f6:f1:e4:1d:60:0b:f9:4c:5e:9b:e8:09:62:
c7:8e:35:11:b0:3d:b2:5f:dc:1e:e0:86:4d:bb:2a:2b:46:8d:
a2:16:ec:e3:dc:9e:1e:58:0e:fd:ab:40:87:61:17:3d:34:da:
50:e5:71:1a:1d:eb:8c:a9:8f:82:6b:e2:6b:0d:ab:f3:a6:40:
67:4e:28:8c:1e:c4:b5:d9:3b:67:88:12:af:7f:ef:df:13:45:
6d:20:0e:26:6d:81:7c:39:5c:40:28:5c:33:d8:10:28:f6:0d:
1e:ff:3a:8c:ab:72:34:88:ee:84:c6:12:8a:75:28:86:10:2c:
f8:1c:8b:1b:a1:b2:84:c2:74:cb:09:67:0e:dd:14:12:d2:90:
d2:de:5a:ef:d8:cd:39:de:60:66:28:46:8b:58:09:62:ac:5b:
fd:ac:b8:f3:28:bd:e2:2d:38:28:84:eb:77:ba:80:a1:a1:ee:
b8:85:39:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix
QUU1NDQyMzkwHhcNMjUwMTMwMjEzMjQ5WhcNMjUwMjA2MjEzMjQ5WjAYMRYwFAYD
VQQDEw02NzliZjAwMS0zNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3QJNRa4EhWz02fEAotK3sdKflQIaZI8tsuqkl0QdL+JwM0stNvP5OO6G37Ut
d78yUqc6POHm6fYZruKcwZf7skFkH0orwss2GJyfVLOggELgm1Ntgd1n+zxDz/qk
eNPlO4fCwytiN8nXepoJfw3uZ3xg8ps2OmrmTOk5kGPVz5FydC4Reu5UgSe0QS5K
QG+0yQSP3TldDg4zBxadWpkNaX6nkNcXz5ynosmxAMqmiDnMc+MYOdSxzNWKoTxP
Sq+pSh+y42Ei5Jw2rouydo+u8uZDwknTcQZGhws8/2db6LESBz9Z5v5OR8tZyQqB
XdR4x7qYz3xVDq60ItE2OgTOxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVGhqFx
5vzu1aCMjuzvrmlhz/BIMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF
QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM
Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrD72L1vv5iTmTJELcjq3kkCkNKKyVQVF/3JD6i+CZiA4/tVOUDHXP
XTYqmPL8/WH/SrRKhzlaraBXyufT7UNPL5T+gKyZqkn42FWaNvbx5B1gC/lMXpvo
CWLHjjURsD2yX9we4IZNuyorRo2iFuzj3J4eWA79q0CHYRc9NNpQ5XEaHeuMqY+C
a+JrDavzpkBnTiiMHsS12TtniBKvf+/fE0VtIA4mbYF8OVxAKFwz2BAo9g0e/zqM
q3I0iO6ExhKKdSiGECz4HIsbobKEwnTLCWcO3RQS0pDS3lrv2M053mBmKEaLWAli
rFv9rLjzKL3iLTgohOt3uoChoe64hTlb
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:26 2025 by rpki-client