Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json)
Hash identifier: 7wbdMtp6oa4eGHCShvYrmcz6QpgL8goPbwJAD7b4RfA=
Subject key identifier: 03:0C:92:04:43:E0:DB:E0:81:80:6B:5F:8F:79:6E:62:C4:C6:CD:26
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 07:00:21 +0000
Manifest this update: Fri 31 Jan 2025 07:00:21 +0000
Manifest next update: Fri 07 Feb 2025 07:00:21 +0000
Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: kZZ3RF9BBsYDvRmq0us2GA0/ARX4RNON/0eRGOQGEA0=)
2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Validity
Not Before: Jan 31 07:00:21 2025 GMT
Not After : Feb 7 07:00:21 2025 GMT
Subject: CN=679c7505-8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:39:b3:b8:2b:50:22:7f:49:6c:5f:92:85:
76:fe:c4:90:04:0e:fa:57:0f:e3:94:fc:af:fe:51:
f0:b5:53:2a:2b:e3:25:94:db:01:39:1d:9b:f0:d5:
22:b9:a0:d1:38:01:28:c5:6f:2e:6c:ed:5d:33:77:
af:25:29:e0:28:99:f9:ed:0e:55:4b:bc:04:07:f0:
e2:b9:8b:c0:6b:15:22:c4:90:b0:8e:10:cd:d6:ef:
46:eb:31:83:b2:34:2a:0d:c4:7f:06:63:2f:ab:4d:
54:a2:0c:f2:45:d3:42:c8:69:bc:87:47:9a:53:3b:
44:d7:a1:dd:14:ba:7a:ab:9d:7e:92:29:b5:96:b4:
04:a3:ee:82:c5:51:03:18:51:6a:e6:0a:cb:a8:84:
40:12:60:39:13:69:d8:24:b6:f0:17:d7:db:c8:78:
85:c1:97:d7:cb:1c:91:f5:e0:2c:7d:9c:3e:29:8a:
7c:5f:12:42:94:1c:3c:8c:7c:67:eb:a6:ba:ff:a5:
8c:4d:dc:11:c7:24:10:9d:b9:6e:44:cc:63:f4:c2:
bd:94:6a:b0:03:d3:ea:1e:17:66:a5:d0:34:65:43:
34:d5:06:41:c5:0e:ce:0a:43:d2:64:fa:bd:5e:fb:
a8:cd:2b:a3:66:8d:e7:4e:19:d8:6c:e3:f7:56:91:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:92:04:43:E0:DB:E0:81:80:6B:5F:8F:79:6E:62:C4:C6:CD:26
X509v3 Authority Key Identifier:
keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:81:7c:31:0f:38:7d:ed:f5:9a:7e:0e:69:65:40:a0:05:eb:
bd:a8:96:f4:a3:bc:22:52:fa:cf:5f:0c:dc:15:1f:cf:3c:49:
86:1e:df:76:d8:0d:09:4a:82:a5:94:96:55:47:86:93:dd:43:
a5:0d:7c:26:76:9f:e5:0a:12:bc:ef:61:3e:27:23:44:52:6c:
eb:2a:b0:b9:f5:f9:fb:3d:d4:1b:3d:d4:5e:ad:5d:eb:fc:17:
56:2e:07:a2:f3:61:4c:5a:61:93:94:9e:3b:a0:ee:4b:8a:84:
af:ca:8b:f2:d6:3b:5a:6c:9e:86:68:d6:27:2e:26:3d:0c:65:
94:93:c5:ca:51:36:ae:48:82:44:d4:6c:b8:78:1b:7d:06:5f:
c7:b7:e2:33:f0:f3:e5:8c:11:d2:ae:bc:e5:99:34:39:81:6f:
89:ea:48:49:a4:3c:1d:59:02:c4:cf:9f:4e:b1:d1:49:92:b3:
45:e3:97:ab:a0:a1:07:02:68:e5:0e:4d:7a:96:d0:1a:b1:ee:
ff:c3:27:48:65:83:9a:bc:b3:f1:01:44:18:6f:a6:8d:37:c2:
7e:9c:82:6e:38:65:d6:9b:d8:c8:5b:79:2b:15:52:52:ca:74:
a1:00:c8:41:40:0d:02:18:49:a0:3d:a9:8d:a2:26:7b:b2:ca:
b6:c0:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:31:54 2025 by rpki-client