Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: /M4mig0hMfX+lScbaGQpkAnkBo2SHGbPCo2cBhaQepc=
Subject key identifier: C6:D8:88:F9:DA:6C:F1:D5:51:EE:DF:34:90:75:78:73:BC:C0:A7:0E
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 04C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 04BE
Signing time: Thu 30 Jan 2025 23:55:58 +0000
Manifest this update: Thu 30 Jan 2025 23:55:58 +0000
Manifest next update: Thu 06 Feb 2025 23:55:58 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: /c3tmrB3J0fCMuAg3si5osiJbiFjidkkttLtQSGirzU=)
2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk=)
3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: iYMv0Y2btiNQDsASykiNYZLlnHo5rRZ4eb3rA88k1B0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Jan 30 23:55:58 2025 GMT
Not After : Feb 6 23:55:58 2025 GMT
Subject: CN=679c118e-f4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:70:23:fe:ba:c0:96:e2:7e:36:a6:95:c0:
bd:e9:12:35:9b:f7:8d:cc:6f:d8:27:f4:31:53:6d:
78:e1:58:47:7c:5f:80:80:1c:1b:22:59:01:28:45:
93:d2:e2:b2:22:ee:a3:90:f7:4e:9c:ac:51:0d:9e:
4c:e9:be:72:b9:64:af:e4:13:b0:0c:34:8c:fc:b5:
5f:bf:3b:10:52:60:d9:65:45:99:4d:60:72:27:b1:
e2:70:bd:ac:68:9e:39:ad:cc:af:8b:1a:85:f1:82:
12:9c:70:22:3e:92:d3:66:2f:bd:d8:ac:4c:5e:e2:
8d:c0:44:e9:4a:84:5f:21:8e:1f:eb:3e:b3:e0:55:
23:36:6c:95:89:be:09:cd:e2:d9:86:b0:55:66:56:
d2:6d:fb:27:b0:87:07:51:96:a9:3c:4c:5a:f2:96:
0e:4b:63:b8:e6:3b:e7:f3:29:b3:a3:3f:62:f7:5c:
98:c2:d8:54:0e:e1:2a:5e:fd:57:3c:a3:0d:10:04:
61:06:ad:7c:15:ef:f7:e1:d9:a6:66:47:88:d0:39:
4e:9b:7b:43:f5:09:6e:09:cc:8b:fa:c0:41:27:e2:
b5:a1:c9:6c:9b:79:1f:8d:e0:f2:62:58:dc:3b:4d:
bf:bc:ce:28:1d:dd:f1:e5:58:ea:32:2d:b4:01:0c:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:88:F9:DA:6C:F1:D5:51:EE:DF:34:90:75:78:73:BC:C0:A7:0E
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4f:4b:e5:bf:7d:49:1d:de:10:0a:c5:35:16:95:6e:23:c9:
26:ee:89:e0:83:70:64:20:b9:88:5e:ee:b8:b1:e7:00:7d:f5:
23:27:06:15:0d:70:26:88:b9:fe:78:ca:43:14:19:a2:08:e0:
72:1a:b7:a6:d6:a1:20:c8:4b:8c:b0:3f:1d:97:bd:6f:a5:5a:
03:21:c3:54:81:25:8b:e6:b7:e5:c3:47:69:e6:ab:8c:20:28:
b4:f9:0a:e0:dc:ea:6e:f9:3f:43:32:51:1c:ac:57:29:54:5e:
9e:82:80:34:e8:fe:a1:dc:e2:44:b8:dc:99:90:85:db:ea:6f:
fd:8b:09:b2:00:4f:85:7b:43:9c:a4:40:cf:b1:7b:5d:11:0c:
bf:05:98:54:65:9e:e6:85:57:05:96:08:b3:71:f9:21:1b:5a:
3d:0f:4b:cc:a4:60:51:cc:b0:48:ca:0b:c3:7b:67:fd:9e:26:
77:2c:03:88:08:d0:a7:06:0e:2a:a4:6d:a3:ae:dd:c1:35:27:
7a:1b:d5:5d:eb:3c:61:26:42:75:9a:f9:fa:02:63:51:11:43:
06:2d:90:8d:4d:d3:02:75:6b:fa:6b:e9:73:28:cd:7e:a8:9d:
32:66:ed:cf:a7:45:3f:94:d4:a0:30:94:79:5a:f6:4e:02:dd:
fc:20:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:28 2025 by rpki-client