Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier: K+yGPeriizSs1VNdZ5Ym8manXcbofxbU6CCB++Tmp3g=
Subject key identifier: 53:44:8A:EC:96:60:CC:89:03:C3:11:A5:FF:19:4B:F1:BB:B3:FE:04
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number: 01F9
Signing time: Fri 31 Jan 2025 02:16:50 +0000
Manifest this update: Fri 31 Jan 2025 02:16:49 +0000
Manifest next update: Fri 07 Feb 2025 02:16:49 +0000
Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: uYmNZK4M/pyKhJZP3oUPWx3i4cJbPMhdW6wyhN4ylXs=)
2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: DvV5HozP+sR1ACB5NUpTfiC/G52OiXFRlLclsmTMjHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Validity
Not Before: Jan 31 02:16:49 2025 GMT
Not After : Feb 7 02:16:49 2025 GMT
Subject: CN=679c3291-eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:83:77:3e:cc:2d:da:24:45:77:dd:c8:a5:
e5:fa:1a:f1:b1:42:33:39:31:d8:ed:98:4f:17:44:
89:02:01:1f:17:1a:f2:4f:09:f7:3b:14:27:fc:c3:
f9:96:80:a2:2a:6e:f3:0d:1c:01:b9:cf:2c:94:40:
17:03:26:7a:ab:58:14:5e:6b:20:ee:27:46:0c:90:
34:b0:d5:d0:d2:b5:4d:24:2e:09:c4:3b:65:d3:65:
ef:9c:a8:5a:2c:f0:83:11:3a:be:bc:56:f0:23:22:
44:ae:6f:a5:88:f6:3f:ef:1d:b8:5a:f6:13:64:b0:
9b:b6:7d:99:f5:43:04:69:12:a5:58:fe:21:06:a9:
7b:b3:32:66:49:d2:8d:bc:7f:e3:f3:9f:7c:1a:9d:
17:32:ce:21:07:24:ef:e1:c5:41:cf:13:96:67:4d:
93:8d:c5:4e:bc:46:91:fd:e3:a4:9f:60:2e:0d:b6:
a7:84:73:54:c7:70:96:ff:15:94:65:28:f1:e0:04:
b8:77:82:fe:fb:c2:1a:65:ef:7d:c4:fb:95:2f:bc:
a8:10:5d:73:7c:59:05:6a:1c:7b:59:57:02:06:c0:
7e:1e:7a:3f:bb:f7:2e:95:8e:d0:81:42:49:36:03:
82:4a:93:0e:9a:07:bd:68:b5:82:05:20:37:34:a9:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:8A:EC:96:60:CC:89:03:C3:11:A5:FF:19:4B:F1:BB:B3:FE:04
X509v3 Authority Key Identifier:
keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d7:7c:3e:dc:07:c7:38:4a:de:e0:fc:b5:6f:41:d5:e9:d0:
a9:63:31:d5:eb:c5:30:23:62:69:31:fd:e2:b6:60:8c:b5:92:
36:f2:2e:8b:33:14:c5:49:6d:81:44:59:85:36:a0:8b:70:9d:
f4:5c:a6:4e:5b:a5:1a:1a:5c:be:95:38:72:9d:c3:1c:f5:bb:
33:b7:c6:c2:1f:b5:74:41:51:19:a5:e6:f2:31:07:42:25:96:
a8:30:1a:39:97:dc:f9:ae:c9:dc:78:2f:c1:c9:34:29:fe:c6:
59:73:fb:f7:9a:85:15:96:59:f2:7d:a6:de:1c:bc:3b:b6:50:
5c:41:2d:1e:93:db:57:b2:f0:d7:ab:6b:0c:45:9a:c2:47:34:
01:e1:20:7b:b9:55:bb:07:ef:74:71:1a:e8:2f:f7:b0:6a:7c:
e6:1d:8a:a4:cf:84:02:94:a2:92:20:70:e0:7e:03:01:ee:ea:
d0:99:0d:35:02:63:c6:78:2a:b6:f3:76:57:b5:48:e1:ba:7e:
76:23:12:dd:d9:2b:63:ee:e6:02:5e:bb:34:ff:9d:2c:8b:0d:
d2:cb:f2:8e:6f:c2:8d:b5:b9:ed:21:d1:6f:53:02:5a:80:f1:
c4:5e:69:ad:6f:98:e3:51:58:be:e4:e6:f6:bf:28:a7:25:7d:
81:ff:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:23 2025 by rpki-client