Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier: 5JoBtEXVWlF1TON2fycG2kjQ1KCaDWtZnoxYEl4ANqM=
Subject key identifier: E7:1F:00:7C:69:BE:C8:67:36:59:99:DD:B3:80:10:B4:4D:79:D3:E9
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number: 62
Signing time: Fri 31 Jan 2025 06:04:39 +0000
Manifest this update: Fri 31 Jan 2025 06:04:38 +0000
Manifest next update: Fri 07 Feb 2025 06:04:38 +0000
Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: NXwkZ5JRkhaZNfhp26BLzt3QvqRcAnznrXIywk3qzSQ=)
2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: vCihCbD/IiwkyJf/jAh1StFRRAhfwTCEK4+ACvnlgHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Jan 31 06:04:38 2025 GMT
Not After : Feb 7 06:04:38 2025 GMT
Subject: CN=679c67f7-17d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:79:af:d2:d8:1b:40:ab:1c:59:d8:a9:24:
83:d2:3f:20:a3:78:67:b6:d6:88:63:0c:49:43:72:
cf:15:fe:67:e8:1a:e9:89:85:b4:41:3d:51:62:59:
b8:49:48:51:3e:2f:12:db:6c:57:87:a7:0f:f8:87:
b0:e6:ac:5e:87:23:0c:d4:db:b6:ed:bf:e4:2d:74:
71:56:14:b0:e3:f6:d9:d1:41:50:8f:6b:6b:c2:ef:
c9:67:e8:5c:33:82:25:77:6c:bd:e0:96:e2:80:43:
a2:75:37:31:96:36:8b:5c:d4:e2:35:ea:ba:56:a5:
5f:a0:b9:c7:ca:42:5d:cb:49:70:cd:91:e2:35:4a:
9c:33:68:d6:f4:02:db:0f:57:65:7b:e9:76:75:f7:
fe:5f:ad:1e:85:06:8d:b9:63:90:cd:8d:8f:fd:56:
0f:28:dd:71:aa:70:25:20:a2:c8:3e:d9:94:7a:1d:
cf:b3:69:1b:ac:03:9c:cb:d2:61:46:94:92:4b:b1:
7e:ed:17:f6:41:95:53:fe:ee:68:28:d4:3f:cc:aa:
50:64:11:0e:0d:4a:93:cd:6a:2c:cb:99:a6:5e:80:
dc:fe:83:08:1c:5e:13:a6:ac:74:c7:d3:76:fc:0c:
c1:91:4c:19:33:89:66:8e:4c:24:38:aa:51:11:1c:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:00:7C:69:BE:C8:67:36:59:99:DD:B3:80:10:B4:4D:79:D3:E9
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:04:34:3e:96:35:c7:46:f2:e9:dc:a2:5c:57:07:63:47:9d:
fe:b1:ab:f7:00:3c:07:3e:70:71:c8:d4:a4:72:93:8b:0a:8b:
47:c7:75:f4:ef:0a:4f:6d:2e:01:93:fe:9b:0a:1e:16:0e:f5:
71:da:85:a8:f7:fa:5a:61:05:4c:06:b4:da:7b:3c:c7:f8:40:
36:11:f8:89:71:14:2a:79:72:da:ca:b3:26:ab:70:11:41:fd:
f6:94:86:7f:5a:1f:85:35:27:a9:99:35:43:5c:5e:cd:1a:59:
3a:bc:34:b5:a9:a9:de:94:8c:b4:30:d6:45:6c:be:5a:ee:1d:
b4:06:fb:c9:9b:e9:24:55:9d:15:04:7f:9c:91:3b:1a:27:a6:
6e:5a:55:58:21:65:fc:02:36:14:59:cb:ab:c1:d3:92:a3:98:
35:4c:0b:c9:40:af:f9:21:72:70:f3:80:77:47:a4:6d:6b:b6:
40:9d:d3:dc:b2:ea:26:30:42:4c:87:dd:62:0b:e0:c9:ed:3e:
cd:5c:4a:a7:bb:66:97:be:62:f4:2a:d7:b9:10:5d:6a:7c:ad:
14:e1:9c:d2:f0:17:96:68:8f:7a:d2:2c:3f:af:c0:b7:a3:df:
9f:dd:d8:ac:85:f3:7f:0a:be:b3:1f:a7:a8:c0:a8:33:71:05:
8b:00:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:45 2025 by rpki-client