Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: V/pRxqOtQqytnUYuDgFDRRSYg2aK7pzqliyUfCj2Pdg=
Subject key identifier: C0:04:CA:16:2E:FB:0D:9E:3E:07:6B:22:35:D7:7C:7A:E1:00:A9:FA
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0A97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0A89
Signing time: Thu 30 Jan 2025 19:44:21 +0000
Manifest this update: Thu 30 Jan 2025 19:44:21 +0000
Manifest next update: Thu 06 Feb 2025 19:44:21 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: H6anTnrA3DFPhpC9VeD+bT2qynl4YCzPK+QWvJ3rgyY=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: En9dIPtNAsqzocSYMmtm97H1ooZs8MGknLuErJdgZyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: Jan 30 19:44:21 2025 GMT
Not After : Feb 6 19:44:21 2025 GMT
Subject: CN=679bd695-75e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:fe:fd:35:f9:6a:0e:c1:5e:51:20:d4:6d:
bc:95:2d:c5:92:bb:89:10:f1:18:0c:48:d1:e1:d0:
25:2c:61:4d:66:3d:5f:26:0a:6b:4a:6b:eb:e9:58:
af:61:a8:51:66:40:07:ca:a0:42:8d:e3:b2:cf:7b:
67:9a:bc:d8:f8:f5:6d:d1:9a:01:de:6a:59:0b:7c:
4a:9b:63:22:a6:ea:1d:96:e9:f8:00:c7:75:6c:1b:
24:88:8c:a9:19:99:00:b0:c6:05:a3:a0:1f:31:1a:
b3:4d:2c:84:27:57:c1:53:73:b4:2b:df:53:c5:fb:
98:e3:38:62:8c:1a:bf:ce:85:d6:b4:fa:b7:17:98:
76:23:fb:32:3b:dd:90:04:e5:9b:f0:b1:ce:d6:a0:
4b:08:6d:0a:b3:5a:27:e1:10:7b:c6:28:56:18:45:
48:51:9a:13:38:77:e3:66:f2:b5:26:2d:84:3b:dc:
7f:fc:62:54:c7:d1:7d:11:05:16:14:50:6b:07:14:
9c:43:46:de:0a:74:09:8a:17:28:26:42:05:84:ef:
61:70:42:54:92:1f:46:c6:c9:1f:da:28:50:fe:80:
f3:aa:8c:31:ba:a7:2b:5c:6b:5b:b2:5a:53:47:39:
cb:c2:b4:a9:ec:45:ec:9e:b8:8c:57:69:85:da:52:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:CA:16:2E:FB:0D:9E:3E:07:6B:22:35:D7:7C:7A:E1:00:A9:FA
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dd:70:e8:f6:68:47:12:fb:fc:cf:72:35:02:34:79:56:2a:50:
cf:64:d8:a7:28:90:c0:41:f5:c5:28:04:0a:19:5b:71:86:fc:
b8:4c:ec:a0:75:ee:d5:c1:2d:18:00:8b:d6:8c:cf:0e:4a:3b:
42:3d:b7:79:da:ce:0a:af:8d:72:2b:82:d5:d5:cd:21:55:d2:
47:61:1a:b1:49:ec:6b:98:07:45:39:c3:6d:f9:5f:f1:93:a4:
80:d6:76:ba:ec:89:10:f3:ee:3f:ca:2d:6b:64:c0:a3:30:e3:
7a:57:dc:1a:bb:2a:af:b7:e0:d3:ec:4d:50:39:7e:57:67:4f:
5e:11:3c:2a:10:61:ed:33:1a:3b:57:0a:19:76:05:21:d0:b9:
ed:e8:cd:6b:a0:15:48:34:87:95:53:97:54:c2:01:82:a3:50:
aa:eb:fb:a5:9b:5c:80:26:a4:8e:25:cc:22:ef:54:16:ae:ad:
04:09:47:df:dd:3f:77:25:8e:d2:c4:ff:69:15:08:14:97:d2:
12:f8:70:97:7f:2a:a6:b3:86:f4:43:43:cf:ac:ea:7b:45:d5:
37:5d:a1:e6:22:69:41:0b:04:7f:6f:6b:2d:6f:62:b5:d5:0d:
fc:56:a7:5c:d3:5a:b5:c3:84:45:69:53:96:7f:41:98:27:a6:
6e:ca:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:25 2025 by rpki-client