Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json)
Hash identifier: KT9FMoWjwY77YjIrkcnbdnrSQ1eimhqRyRPAbvwSdzU=
Subject key identifier: C9:4E:C9:7D:D6:7C:52:E0:48:C3:DB:8A:21:8C:63:F5:C3:28:66:8B
Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Certificate serial: 0881
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
Manifest number: 087A
Signing time: Thu 30 Jan 2025 20:40:42 +0000
Manifest this update: Thu 30 Jan 2025 20:40:41 +0000
Manifest next update: Thu 06 Feb 2025 20:40:41 +0000
Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: J+/95eBCm3LFaVUbBPfQMD7a6BnYTjPoU6UXlFgJJto=)
2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: tTT8521eqCETDqz4+sHnOdxTbgNFFlJoAdsqLu2m7HI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Validity
Not Before: Jan 30 20:40:41 2025 GMT
Not After : Feb 6 20:40:41 2025 GMT
Subject: CN=679be3c9-1243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:db:1c:cd:f6:61:8b:91:a0:94:93:53:3e:
b0:b3:c6:32:67:3e:55:1f:52:d4:21:10:30:5b:05:
85:7b:be:6b:83:46:a0:d2:34:f1:5b:ae:04:28:98:
92:e0:51:74:e7:bb:9c:5f:61:ce:fb:6d:45:e6:15:
aa:2f:df:8c:95:ae:d0:d7:ea:c1:b8:f6:71:d1:60:
d4:8f:51:82:4f:1a:f3:22:91:58:cb:a5:ad:e9:15:
99:18:ce:85:bc:55:cd:56:84:cc:88:7b:8b:53:d0:
60:2d:ff:50:61:0b:30:ec:e0:1d:cf:82:d4:45:a9:
33:4f:a4:cf:e0:d5:fc:73:2b:02:b2:2d:ae:3a:64:
f3:48:87:2a:0e:53:3a:15:a9:69:5a:7a:aa:76:60:
a2:a6:08:87:1d:7f:cc:ec:c5:5a:e7:3c:41:0f:f5:
4b:29:34:b1:fc:dc:e3:fc:d2:e5:c7:1b:d9:2c:9b:
0a:da:a9:3d:88:e3:8e:1d:05:1c:39:a2:68:87:c5:
7b:74:f2:36:22:d7:d2:31:51:b7:6f:66:35:65:53:
da:78:cf:e6:19:26:fd:6f:cd:4c:6e:f3:f8:3f:cb:
f5:48:21:54:bb:f5:d2:56:44:3d:ad:07:4d:ce:eb:
29:3f:f6:bf:44:4e:55:e1:a0:cd:e4:f5:25:14:cb:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:C9:7D:D6:7C:52:E0:48:C3:DB:8A:21:8C:63:F5:C3:28:66:8B
X509v3 Authority Key Identifier:
keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:09:43:aa:4f:55:f4:d6:c2:80:d6:ab:94:83:90:a1:d7:56:
2f:fc:b3:24:6a:ec:e3:fb:bc:24:72:79:73:cc:ed:17:04:b9:
72:12:f3:3f:60:50:41:5b:d7:03:9f:fd:3f:a2:10:eb:29:3c:
92:d1:4b:1e:4a:f5:34:03:5a:dd:b2:cc:5b:48:41:7d:fc:f2:
a9:68:35:c6:bc:49:0a:36:5c:c5:bd:a0:b6:33:4d:21:fb:39:
2d:ca:5d:76:50:b2:dc:14:db:ab:c5:20:fb:5a:97:d4:b5:18:
9d:00:a6:6b:2c:12:b8:3b:51:d5:a6:fa:ca:03:cf:6e:e6:02:
1e:2f:d0:50:91:f1:d7:3a:a3:83:46:4b:e7:0a:41:4f:53:2a:
f9:40:02:f2:f7:d8:9f:ff:5b:c5:4e:0d:e2:4c:e3:b8:1c:c9:
e9:86:2c:bc:d9:f0:cb:56:2e:0f:e8:d6:51:db:79:64:eb:38:
35:e5:f1:4e:df:e3:b0:67:e8:b1:91:e5:bd:4f:2a:cc:8c:b0:
39:43:e3:c8:3f:55:a4:21:27:65:d2:57:6c:16:50:e1:c4:f7:
c4:b8:9f:0a:0c:39:80:c8:52:a5:78:1c:04:56:7b:fa:2a:40:
a1:e6:a0:3d:f7:2c:b0:17:f4:c8:15:02:1d:e9:a0:e7:7f:79:
a4:23:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:43 2025 by rpki-client