Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json)
Hash identifier: sMWVYX11Zo/0MVxQJe7ec/IlKhsFmZjteoM75zToSjY=
Subject key identifier: BF:38:35:9C:BA:E8:88:1A:F6:34:54:E8:2B:FB:78:DD:A5:A2:82:69
Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
Manifest number: 022B
Signing time: Fri 31 Jan 2025 02:02:37 +0000
Manifest this update: Fri 31 Jan 2025 02:02:37 +0000
Manifest next update: Fri 07 Feb 2025 02:02:37 +0000
Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: cRbpFK35yWaAcshHXcVdDCUQf3TWG+6xWXT0IDbn9tA=)
2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Validity
Not Before: Jan 31 02:02:37 2025 GMT
Not After : Feb 7 02:02:37 2025 GMT
Subject: CN=679c2f3d-ccc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:cd:30:d8:2d:67:ec:78:04:4a:a2:4d:76:
06:71:91:a1:6b:a8:8b:fe:07:1d:69:ab:cc:0d:73:
be:cf:2b:00:d9:d1:74:8f:de:03:1f:2d:9e:c2:16:
0a:3e:f7:79:2b:b7:06:6a:37:cc:84:0b:46:6b:78:
14:4d:e7:67:d3:8e:78:48:75:8d:a7:1c:6f:f6:30:
12:ca:a9:87:18:7d:62:47:45:a1:be:24:70:3c:fb:
68:ff:23:f4:2f:c2:a5:e7:ea:0c:eb:3c:a8:22:96:
d7:31:c7:1e:1c:75:4f:8b:a0:20:00:ca:61:df:8e:
eb:79:42:93:1f:29:ef:3d:5a:ab:1e:ba:8b:7a:2f:
be:55:58:39:ba:1e:56:dd:7c:d0:21:50:09:52:68:
6f:d7:90:54:b3:42:bf:93:c7:7a:e0:79:5c:a2:79:
85:b3:2c:eb:af:be:34:1e:bc:ee:f0:95:06:94:c9:
1e:4d:5e:f0:c2:00:06:5a:8e:f5:64:ff:bd:b2:db:
94:26:d8:bb:f9:11:bd:0d:fa:cc:0e:5e:5b:d3:db:
ed:2b:13:51:24:e9:7e:0a:cd:4e:4f:b4:46:96:de:
63:da:e8:41:ae:97:2c:ac:52:77:61:f3:24:c9:88:
ad:af:01:5d:b6:ca:f9:4b:2a:c3:83:9b:39:44:59:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:35:9C:BA:E8:88:1A:F6:34:54:E8:2B:FB:78:DD:A5:A2:82:69
X509v3 Authority Key Identifier:
keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:8b:1c:76:ee:fb:65:60:6e:95:65:18:7b:07:c7:47:45:4f:
89:cf:4f:68:6d:91:38:30:3e:83:0b:ec:6f:38:d3:55:3f:f5:
a1:80:87:c9:a8:88:51:ea:c9:7f:75:f3:2c:2b:36:7c:16:fb:
8e:0e:b2:e1:87:c3:46:63:ee:c0:78:62:d7:5f:86:02:ae:5e:
a6:df:bc:ba:a9:cc:d7:6e:08:13:a2:97:f0:0a:ea:09:60:89:
45:c8:0a:9b:1f:c0:c3:91:f8:e0:15:05:85:b9:67:1a:7f:43:
b0:e6:96:97:39:3d:27:84:5a:10:f8:a8:78:f7:33:1f:6b:e3:
48:7b:18:a4:b5:b8:90:ce:53:b3:8d:a1:8b:8d:9b:c4:e7:d3:
95:45:23:f9:fb:e6:cc:a6:2c:d2:1d:dc:b4:72:6f:0f:db:73:
ef:78:28:f8:59:74:df:59:4d:f5:29:ec:f5:8e:59:2a:80:10:
77:0a:0b:9c:8b:d4:cf:4f:df:9f:9c:12:68:df:37:5c:e1:9b:
90:60:f6:9a:f5:92:91:cc:99:91:30:2d:00:f9:ba:d4:f5:21:
01:f1:55:5c:93:e9:eb:0b:e7:b2:c3:1b:f0:29:bc:29:6a:79:
68:03:d7:dd:e1:7b:4f:e8:20:79:da:24:af:d7:d0:73:60:63:
17:f2:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:08:09 2025 by rpki-client