Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json)
Hash identifier: NH8de00ynPMl2HucpWBcnhfHdQLfytor4woYnnbob9g=
Subject key identifier: A0:40:AE:64:1C:84:4A:76:4C:FC:ED:21:60:AE:0C:4C:B3:18:3B:D0
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 35D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
Manifest number: 3523
Signing time: Fri 31 Jan 2025 14:28:27 +0000
Manifest this update: Fri 31 Jan 2025 14:28:26 +0000
Manifest next update: Fri 07 Feb 2025 14:28:26 +0000
Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: in1FvL4p5JXtHagOYyvJ3DI4bD5oBPguiApqvd6LC/0=)
2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: qhnG18/aMLm+bgbad5pzVpZ66jdrVbEJIQGuGTdYEbI=)
3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: NTDwpkNkDHYvPlbXgriI89H0onb/SkI96RAfrzWAkp8=)
4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: 20lxG5YaQGKYCeNDIccsMuS2DiiyPh+IbwNarzaaMG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13783 (0x35d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Jan 31 14:28:26 2025 GMT
Not After : Feb 7 14:28:26 2025 GMT
Subject: CN=679cde0b-6c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:1d:1f:a9:0a:a3:80:75:65:94:86:46:bd:
9f:8b:52:39:20:25:d5:39:73:eb:e4:9d:d9:08:26:
f9:5a:c7:2c:db:96:9a:01:a8:ad:e5:4b:9b:0f:b1:
b7:c2:c0:b9:dc:7d:88:fc:df:d8:3b:bb:2a:0b:c2:
c4:56:40:ef:1c:73:1a:81:9b:d5:62:69:eb:85:70:
23:0a:33:75:8e:15:dd:ac:97:e7:fe:fa:51:e4:64:
79:d7:de:7b:46:e6:bc:ff:17:9f:25:0c:3a:3d:13:
1e:07:da:f0:63:f3:b2:e4:b2:1f:48:22:02:f3:19:
ba:6a:1a:a3:e6:6f:f4:30:d9:5b:9c:1b:d2:03:e7:
d5:17:1a:74:c7:20:7d:36:19:88:46:0c:52:66:95:
b6:d8:f5:9b:1f:48:5c:34:af:19:e2:d7:57:66:37:
61:8a:17:ba:ed:a3:2e:86:33:4a:a7:3b:b8:91:3d:
a5:fb:87:76:63:c0:b0:08:5b:64:c5:2f:61:a8:20:
d0:16:49:ad:e3:5f:1f:f4:cc:e1:da:33:15:1d:e2:
82:61:ea:e8:d0:2d:87:11:84:34:c7:05:1e:56:2b:
27:83:61:5c:10:dc:84:0d:b3:ce:93:a6:b2:b3:f2:
ce:ba:fe:5e:23:05:d7:55:f9:34:cd:2d:f5:fc:9c:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:AE:64:1C:84:4A:76:4C:FC:ED:21:60:AE:0C:4C:B3:18:3B:D0
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bc:bf:18:b0:b7:1d:4f:ee:cc:fa:ca:3c:3b:a7:20:c9:92:
da:7c:43:71:70:0d:01:84:ba:f4:30:dc:27:7b:93:a2:07:3f:
cc:30:03:af:e3:05:4d:bb:1e:c8:6f:3e:87:c8:07:9f:d5:0c:
69:d0:84:5a:eb:12:ce:07:0b:ff:43:30:52:eb:d4:c2:d9:75:
2e:9f:31:49:af:95:19:06:b7:cd:77:a2:e9:e6:80:1b:d7:ad:
45:32:be:b2:ed:98:36:d5:4a:06:44:8f:64:7a:67:65:b1:fc:
48:81:0d:59:05:67:ae:f8:61:df:df:49:1c:a2:6e:99:58:8b:
7f:d3:18:cd:2c:de:3e:af:32:c9:1d:ed:d5:8c:72:bb:7f:cb:
c2:60:fc:55:b1:9c:78:3d:35:5b:f5:ca:d4:6d:b5:8b:3c:17:
90:88:ab:58:18:b3:d3:43:f3:97:b7:b8:f7:d2:df:fa:5b:56:
91:06:05:11:1f:e1:eb:4c:ad:d8:22:98:4f:b1:5a:63:09:1f:
57:e1:f5:b0:02:c3:2a:62:c0:52:d4:6d:db:a5:7d:68:a2:dc:
d1:1e:95:ad:66:c3:a7:02:94:5e:42:9b:e5:de:2f:fc:c6:e7:
54:71:6b:e3:16:b5:39:87:4c:c1:cb:21:49:0d:12:87:73:95:
13:9c:70:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:51 2025 by rpki-client