Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier: gvAYCtT/nftayx61wmftPs7XDVouuQ4NSJAaRjwgluw=
Subject key identifier: 57:73:2E:5A:C1:99:47:3E:9D:E2:8A:E5:B3:78:3F:DE:5B:1C:5F:2C
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number: 0186
Signing time: Fri 31 Jan 2025 02:55:42 +0000
Manifest this update: Fri 31 Jan 2025 02:55:41 +0000
Manifest next update: Fri 07 Feb 2025 02:55:41 +0000
Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: T76l1tMV4LbwrXxpCMIxDPVh5lL6Dst+oJ0N96GrMdg=)
2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: fFAFWp3SGDiligAO05H4p9el//2m+rPWPKenlyAVezU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Validity
Not Before: Jan 31 02:55:41 2025 GMT
Not After : Feb 7 02:55:41 2025 GMT
Subject: CN=679c3bae-91e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:90:75:41:90:8a:01:3b:59:98:38:3c:19:
ca:99:e0:75:57:fe:ff:12:01:f8:71:68:13:73:03:
4d:70:e0:ae:13:b3:15:3c:22:1d:7c:22:97:7f:ff:
90:92:4a:bd:62:7c:1d:57:88:41:9b:50:70:a0:75:
4f:38:b1:98:a9:24:47:a9:0d:1f:0a:21:55:d8:fb:
cf:fc:c0:7d:a3:ec:4c:38:50:ab:6b:b0:ae:61:1d:
e8:6e:88:a9:a3:35:c6:ce:be:77:13:d1:bc:c4:b0:
0f:eb:50:2e:84:b3:dc:08:4c:bf:eb:05:bc:86:1d:
e8:43:db:1b:54:97:e9:ca:aa:aa:d2:75:ad:b3:ee:
e4:45:c0:48:a4:c8:d8:44:1e:04:80:45:4d:77:7c:
94:27:73:f9:a4:56:49:8c:ee:06:1d:c9:27:99:a5:
e4:7e:2a:be:88:7e:f8:4b:e2:65:d1:db:3f:89:56:
7c:f4:53:29:da:96:2b:23:66:b6:d2:91:1b:9f:37:
73:88:9b:b1:4c:0b:c8:51:c7:1b:e6:5d:22:03:3d:
bd:dd:24:98:67:00:1f:dd:be:6c:71:56:5a:c9:0c:
9a:22:f3:7b:2f:08:cf:91:7c:e9:0b:1e:24:27:ee:
d6:ef:9c:61:b3:46:3d:08:87:23:9f:8d:fb:87:32:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:2E:5A:C1:99:47:3E:9D:E2:8A:E5:B3:78:3F:DE:5B:1C:5F:2C
X509v3 Authority Key Identifier:
keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:ca:8c:9c:91:65:92:c8:e8:19:c8:79:83:ba:ed:90:c9:
60:da:7c:53:20:93:1e:13:bf:a9:7b:f6:e2:9d:9e:5f:7c:9a:
31:62:02:15:05:55:d7:72:63:a0:28:c5:1d:3b:00:09:6a:39:
cd:c8:8b:e4:5c:da:a8:27:5b:b3:79:60:69:4a:da:b7:45:04:
e5:c2:2c:b0:79:67:46:11:33:9a:9b:fe:9c:d5:73:8c:29:3b:
a9:3d:19:7c:02:6d:ee:b2:d3:78:80:51:34:8f:64:d9:4f:e6:
eb:65:96:2e:35:86:c0:d8:29:7a:eb:fe:ea:b9:c5:8a:dd:d2:
c9:6e:dd:fd:1f:02:31:83:ef:9e:4c:c7:f2:ed:d3:1f:b6:4e:
55:26:8d:d9:62:0b:44:0e:96:91:55:03:34:7a:cf:6c:46:51:
69:ab:26:71:03:4f:2c:62:08:cb:81:85:86:ce:2a:44:2d:75:
e2:36:1d:74:d4:55:dd:c8:0a:a9:f0:c8:8a:4e:90:35:1e:1d:
99:57:9c:0e:75:a3:c1:07:6c:a1:59:08:80:a3:84:bb:b0:52:
53:af:85:41:b0:86:01:27:1b:9c:75:f2:26:9d:fc:b2:a8:46:
78:ea:21:5f:59:7f:f5:9b:59:32:d8:b1:88:46:81:06:c8:5c:
5c:c3:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:45 2025 by rpki-client