Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
File: QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json)
Hash identifier: sCrStjP+NCrnjhiaKFzLrGQw5tnNmI9/PAgowYXaN3A=
Subject key identifier: 9D:2C:3B:D2:3C:04:AB:4E:AA:6B:E6:BE:3A:1F:35:82:AD:CB:5D:E1
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 06:50:33 +0000
Manifest this update: Fri 31 Jan 2025 06:50:32 +0000
Manifest next update: Fri 07 Feb 2025 06:50:32 +0000
Files and hashes: 1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: eREgI1X5O+jkKpE8eH/fyoW5JxfWk6i5FqHLeh4F3KM=)
2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: 5VAXQpUtw8xIvHUo10IcjgkVVxX2TxpUjbL3TgQaqhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Validity
Not Before: Jan 31 06:50:32 2025 GMT
Not After : Feb 7 06:50:32 2025 GMT
Subject: CN=679c72b8-fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:da:a9:fa:22:ca:41:13:3d:37:73:38:be:
f3:e7:53:5d:48:56:bb:47:25:17:e0:8a:1b:a9:ff:
7d:58:94:4e:e1:0b:2d:62:a8:5a:97:ad:80:62:d0:
61:c0:7c:29:f3:05:3a:dc:39:b5:36:bd:8e:25:1c:
9b:d6:2f:a6:e9:05:f0:3b:75:e2:6b:5f:a1:27:a8:
b8:f6:60:6d:4a:01:14:7a:05:1f:90:7c:13:cd:02:
2b:12:48:14:2c:df:27:69:c9:cc:c6:2c:2d:2e:02:
03:8b:8b:06:b2:85:c2:90:45:22:c8:f1:47:a9:b0:
4c:e0:f0:aa:ab:02:d2:d4:4a:2a:0e:6e:74:06:b8:
ef:51:f9:9d:46:f2:4b:9f:62:8c:17:38:5e:24:6d:
48:da:c2:7d:9a:1b:4b:4e:68:77:61:3d:7d:d2:e2:
79:f4:94:ba:29:41:04:36:fa:98:6d:e6:dc:3f:7c:
dd:39:2f:e2:bf:64:3c:aa:44:ed:7a:99:fc:9d:3e:
50:6b:c0:eb:2a:16:7f:13:f9:64:3e:3a:ef:1f:99:
59:03:5d:fa:ff:76:e7:c5:db:a5:02:66:23:5a:d4:
09:ff:2c:fa:27:23:3b:75:74:35:b3:84:fc:8a:82:
7a:14:48:72:fd:f4:a7:36:79:52:33:dd:d8:bc:e4:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:3B:D2:3C:04:AB:4E:AA:6B:E6:BE:3A:1F:35:82:AD:CB:5D:E1
X509v3 Authority Key Identifier:
keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0c:2f:7f:52:c1:21:ba:22:a9:01:85:df:d1:d5:2e:64:41:
82:ee:f8:b7:79:cb:e5:61:63:7c:42:cf:3e:f0:83:a7:56:5a:
02:f0:33:26:f9:82:64:93:cf:84:ce:e8:cf:fc:ce:7a:2d:83:
2a:54:dc:88:98:59:10:b7:02:ef:f1:e5:3e:36:9d:5c:73:0d:
5c:6b:8d:c4:d0:ab:a7:fe:80:52:96:84:e3:67:e2:18:82:51:
1f:b0:2e:81:6f:84:9d:95:16:99:6f:57:ca:d8:fb:55:97:07:
32:1e:8a:c8:8b:4c:9b:33:28:bc:c5:a9:b3:87:73:ac:2a:8a:
27:80:e5:da:81:4e:71:81:d7:5e:f3:da:bd:32:ad:df:2f:fb:
88:10:2e:39:8f:a1:08:38:5a:15:12:01:37:52:e8:1f:30:12:
c3:31:a9:5d:46:d6:7e:43:36:2d:d4:9e:50:c6:d8:5d:e6:d8:
78:f4:2c:a7:ec:e8:87:2f:98:cc:c0:c8:24:15:47:1f:1b:57:
22:80:3e:76:d0:1b:7c:c9:95:18:ab:fa:4b:3d:f3:50:a2:9b:
6d:67:ad:f6:0f:7d:a6:08:ce:41:bf:03:6f:9b:51:12:a7:43:
c9:ab:8e:14:ae:c0:9c:8c:bb:f7:f3:02:79:86:7e:dd:75:12:
54:70:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:28 2025 by rpki-client