Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier: 2I8+xRqQYXQhEMIrbXRKPXjqCwoTW9HVmjF1HqwHYZE=
Subject key identifier: BF:57:71:3A:34:A2:C7:43:1B:A6:CB:C5:03:FC:0B:27:31:B9:57:60
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial: 0C31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number: 0C23
Signing time: Fri 31 Jan 2025 18:17:45 +0000
Manifest this update: Fri 31 Jan 2025 18:17:44 +0000
Manifest next update: Fri 07 Feb 2025 18:17:44 +0000
Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: MoyNSNTlpfRG9QxQ7xDss6qXoFCN/Jl4AA7iR8XXRfk=)
2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=)
3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Validity
Not Before: Jan 31 18:17:44 2025 GMT
Not After : Feb 7 18:17:44 2025 GMT
Subject: CN=679d13c9-4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:0c:bb:78:fb:d2:1c:a3:35:86:3a:9d:1d:
18:59:cd:38:ac:6b:94:38:29:d1:c8:da:0f:d0:29:
e8:25:ae:33:1e:1c:16:a1:b6:36:87:e1:e9:98:4b:
eb:10:58:30:d9:83:96:7f:b8:36:76:59:47:7e:2b:
0c:15:00:bf:3f:4c:04:83:c7:94:90:97:2d:0f:7e:
fc:95:1b:67:f1:9a:21:7e:b2:ad:b6:92:c4:8d:74:
cb:fd:a2:8a:a5:0a:65:2f:9f:75:f9:f6:29:22:2f:
d7:79:12:cf:2d:a0:7e:8b:04:87:1f:ab:48:d6:aa:
65:60:91:9e:36:4f:7e:ec:64:d1:6f:4a:3f:dc:b5:
f8:93:82:0c:85:a6:2d:26:6e:c7:9b:9a:f0:c8:ed:
ad:42:0c:7a:53:c5:54:db:4e:69:df:42:33:fb:b4:
3c:23:21:23:9e:ef:82:1d:2c:59:42:48:d0:2c:8a:
b6:86:a8:ae:50:7d:48:07:0b:09:22:2d:ac:06:b6:
0a:b7:eb:12:84:5c:2d:bd:2e:18:21:8c:57:89:2e:
d7:82:55:00:c3:d0:9e:6a:85:39:de:e9:9f:2d:09:
d2:f0:e5:a6:43:bc:a3:a1:7c:a0:12:7c:7d:2e:0c:
fc:03:16:b7:4b:54:4a:dc:90:95:83:85:e8:df:a7:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:71:3A:34:A2:C7:43:1B:A6:CB:C5:03:FC:0B:27:31:B9:57:60
X509v3 Authority Key Identifier:
keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:01:58:7f:87:70:60:b4:48:13:60:df:a4:5a:32:32:71:
b3:1c:5c:da:1b:e0:55:f8:39:d3:29:52:1d:43:5c:ae:02:d0:
7d:5d:52:ac:ac:67:51:7d:16:ce:25:47:9e:22:06:25:25:8b:
d2:5f:d0:1f:2e:c3:40:f3:7a:4d:06:89:68:74:70:5c:05:aa:
71:b0:52:6c:60:6f:24:8d:6d:95:f8:ae:b5:fc:b2:2f:14:fb:
aa:57:61:da:89:d9:e0:e6:20:e4:4d:dd:b0:1d:94:c5:a0:8f:
ea:c0:56:f7:eb:9b:c1:21:c8:37:68:95:3d:bb:99:00:29:41:
32:f4:10:19:10:46:af:9f:da:90:2a:e9:ff:0c:92:17:e4:d1:
da:22:02:2a:0d:b7:b2:55:f7:fb:52:84:7a:48:b3:79:ca:70:
1e:c3:e9:fa:07:78:53:87:3e:6f:80:b4:25:a6:a1:bd:08:e8:
e2:e2:75:43:89:5c:c7:81:43:39:4c:87:0c:c8:e6:8c:53:79:
86:cd:14:de:26:fa:b6:17:0f:ad:44:11:6b:2e:35:7a:1e:df:
bf:92:1e:5a:f6:ef:a9:67:4f:7b:d3:c3:d6:b9:a5:25:c4:0c:
e6:0b:23:7e:91:57:b3:b3:05:d6:48:e8:76:5a:68:f9:c1:00:
53:ec:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:51 2025 by rpki-client