
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier: 8gAo0dv2rw7LD2Yzg8w2bdDXCQ1SQYHVLeC8nVWXJrk=
Subject key identifier: 6F:D2:A9:C6:74:B5:55:6A:3B:C9:67:CD:94:B2:1D:0E:D4:6C:BF:4C
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0D96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number: 0D75
Signing time: Fri 31 Jan 2025 17:57:28 +0000
Manifest this update: Fri 31 Jan 2025 17:57:27 +0000
Manifest next update: Fri 07 Feb 2025 17:57:27 +0000
Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: yY2WQrjZEBhOGVoAMjuy3HWj6JJ4DUUqbwEjxfe51Wg=)
2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: fGrUYT1O2dItK4fIwYgIfLvCsJmlCIF/jYJCGwsc26A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Validity
Not Before: Jan 31 17:57:27 2025 GMT
Not After : Feb 7 17:57:27 2025 GMT
Subject: CN=679d0f08-7e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:0a:b3:13:ef:e9:20:12:88:92:47:b2:d0:
aa:f0:f8:97:0d:55:4b:cb:20:71:b2:2f:eb:8f:f9:
a9:dc:91:c1:34:72:b3:cc:85:39:0d:fb:61:3a:dd:
0f:cc:85:3e:5a:32:a4:42:68:a1:b3:65:f9:b8:56:
15:9b:63:e7:b2:99:b0:ad:f3:26:aa:75:44:83:cf:
34:f2:a6:d1:3a:a9:56:bb:71:40:0a:8d:6e:98:35:
50:f8:f3:de:5b:40:27:11:51:cd:33:40:cc:77:77:
55:b4:bb:1f:63:b1:49:eb:49:2e:79:24:13:d5:a5:
c3:8b:b7:cd:6f:a7:45:d8:00:06:7e:0c:62:52:a4:
5b:00:d3:c3:31:29:bf:12:13:30:27:71:66:66:88:
62:b2:f2:49:ed:33:4a:2b:fe:36:7d:f5:c1:4e:c5:
86:ee:b3:df:eb:f3:c1:d9:1e:53:c8:32:11:d8:44:
d8:e6:b6:f4:44:e4:38:eb:89:1b:c6:b9:66:9d:2c:
0c:fa:b0:64:22:78:9e:c1:f4:71:55:d0:c7:91:b4:
cd:d5:e1:df:61:dc:cb:ad:b0:f8:26:7d:78:9f:c3:
c0:f6:a6:62:c7:70:aa:cf:f0:0f:6f:f3:28:6a:72:
f1:c4:20:9e:cf:b5:e4:ad:40:9b:7f:80:56:08:2a:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:A9:C6:74:B5:55:6A:3B:C9:67:CD:94:B2:1D:0E:D4:6C:BF:4C
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:44:dd:1f:bb:7d:6e:6a:f1:6e:73:5d:cf:24:18:e7:01:
bb:1f:b3:68:77:48:0f:c1:1b:07:88:3e:fb:0f:dc:71:24:e5:
77:0b:25:0f:cf:57:d9:0c:4a:b7:10:13:07:bc:64:1a:fd:cb:
21:d2:0b:5a:3c:06:5f:ea:6d:9d:0f:a6:a7:26:1c:33:40:21:
19:33:d9:32:60:48:24:78:52:1b:47:e7:bd:15:09:cc:9c:fd:
7e:8c:e6:70:69:4e:5b:a6:a5:2d:66:14:ae:4d:9f:8a:e3:bb:
62:07:a2:88:fa:fd:bc:6d:33:6a:ea:21:6c:16:c5:fe:f0:63:
4f:7b:f8:8c:31:26:95:c0:01:64:92:17:7a:44:9f:89:5c:ff:
91:6b:48:c6:82:dc:a9:cd:06:a4:d3:df:f1:1a:48:f7:28:91:
cf:c9:41:91:52:22:4d:74:68:a1:ba:9f:e9:1a:c3:e5:c9:8f:
1d:b3:1e:e0:82:dc:4c:bb:e4:37:8e:cc:f9:ec:a1:c1:b9:5c:
57:a9:1b:fb:d3:a5:60:15:8f:8e:f5:12:43:31:68:aa:ac:3f:
24:41:05:32:4f:f9:b9:d2:69:be:5b:01:9c:80:0f:2c:ae:e0:
ac:d8:88:2a:a1:ef:9c:1f:e9:10:e8:2d:93:f5:b2:f6:ae:1f:
13:59:b2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:05 2025 by rpki-client