Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier: YU0pQCM+ikt8OTmBedqEB+fswBbLrWwsb3ym7ZB7TgE=
Subject key identifier: AF:0C:EA:85:85:51:10:DC:50:02:28:79:1D:5F:B8:6E:B4:DD:79:97
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number: F4
Signing time: Fri 31 Jan 2025 04:49:49 +0000
Manifest this update: Fri 31 Jan 2025 04:49:49 +0000
Manifest next update: Fri 07 Feb 2025 04:49:49 +0000
Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: M2xLTIC3dqh42arXCvpHF0dx1nqjvt+cFeOeS4GKHhU=)
2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: UXlrlWrOxReW5G8Eu3eEFovhfHXZti6fTTd2hbFPI6I=)
3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: O26c6wLagQ9qfbQyVWMs1PVLVrq/7icg5WARdsMc39o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Validity
Not Before: Jan 31 04:49:49 2025 GMT
Not After : Feb 7 04:49:49 2025 GMT
Subject: CN=679c566d-49ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:39:e5:a9:99:ee:3e:0e:ad:24:95:27:0e:
bd:fe:90:ad:14:72:9d:cf:4d:37:49:c8:9b:f3:a4:
12:05:4a:39:0e:ce:aa:bf:0c:72:72:b2:bf:e5:9c:
97:01:c6:63:cc:4f:85:6f:af:af:1f:0c:e6:8f:ca:
d5:95:2e:0e:d9:6f:ed:1b:0f:95:bc:2e:ef:ff:0b:
a6:d3:59:8d:b6:09:fa:32:2e:25:86:16:a6:2e:08:
14:75:b3:78:e8:f0:26:4a:9a:9c:f6:c2:a0:c5:9d:
74:b9:1c:9e:20:ba:71:e3:1e:bb:f0:78:c4:71:7f:
00:95:47:f4:2a:75:d5:65:7e:79:5a:12:78:38:04:
a5:1d:1e:e6:a7:96:50:66:a4:2d:b2:0a:07:9a:94:
ca:9b:fd:9c:5f:8e:b9:97:2c:1e:ee:9d:47:d9:f4:
fe:86:13:dc:5e:9f:5f:c6:8a:7e:66:7a:fe:12:af:
4d:95:13:d7:3c:80:10:43:95:ad:17:ec:85:ad:7a:
a1:e0:6d:39:b7:bd:f1:75:26:93:16:74:de:ee:15:
16:e3:b0:68:be:97:ef:5c:6d:21:e9:bb:8e:11:e5:
54:7a:0c:10:5e:4d:ab:c8:13:9a:b6:d8:4f:e1:73:
bb:ce:f8:e8:2f:58:fc:6b:bd:24:e4:c7:87:bb:61:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0C:EA:85:85:51:10:DC:50:02:28:79:1D:5F:B8:6E:B4:DD:79:97
X509v3 Authority Key Identifier:
keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1c:5e:e1:ab:36:6b:da:67:64:bc:3c:31:18:2e:a0:e3:ef:
c7:d2:b9:39:c0:5e:a1:f8:6b:fc:db:f4:10:60:e5:4c:07:5f:
ab:e4:1e:65:3a:83:5f:10:cf:b3:a4:05:86:68:9a:2f:6a:b1:
d8:b4:e9:99:39:d0:27:f7:0b:e9:7b:63:05:e0:a1:db:c2:5a:
87:26:68:ec:4d:c6:da:3c:9f:b1:86:cb:06:71:f2:7d:e2:08:
90:4e:00:ac:0a:d1:bc:52:5e:8a:00:7b:42:a3:fd:bd:ed:b8:
7a:0b:7b:c2:93:28:4b:12:68:01:c1:55:b0:61:aa:3c:f7:37:
54:43:1e:b3:79:54:91:e1:85:6f:f5:6f:ab:94:2e:06:22:47:
29:5c:b6:5b:9e:67:c7:c5:c9:ba:b5:f3:74:67:b6:b6:56:eb:
25:f4:8e:4f:08:17:26:1f:2a:54:38:59:35:0d:c1:45:88:23:
df:e2:ba:bb:dc:3a:35:8d:b9:5c:36:65:ba:0f:2f:27:4a:c7:
e1:e5:e2:fa:09:31:4c:22:9e:25:3a:f1:99:40:05:05:72:38:
45:fd:87:f0:ae:38:35:fc:e7:45:25:d7:ca:0c:fd:8a:f4:42:
49:b7:30:54:11:6d:97:cd:56:ca:9e:d8:0d:18:2c:52:a0:b5:
20:fb:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:46 2025 by rpki-client