Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
File: QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft (raw, json)
Hash identifier: BeUIkYOGK3cH7T4MZ6/k0s1DnS3ZrXuLrQsae6uxvyA=
Subject key identifier: B6:DB:82:09:E9:D0:82:06:B9:F0:7E:81:0F:C9:D0:42:60:14:AE:5A
Authority key identifier: 43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
Certificate issuer: /CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Certificate serial: 0744
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
Manifest number: 073B
Signing time: Thu 30 Jan 2025 21:38:45 +0000
Manifest this update: Thu 30 Jan 2025 21:38:45 +0000
Manifest next update: Thu 06 Feb 2025 21:38:45 +0000
Files and hashes: 1: QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl (hash: ARtKa79DlYY17ul/Ks/0sguFFv0U6ZH10Ittmc7SJ5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1946/serialNumber=4338CE3C06310A7A94F09BB136FACBC28355AFCB
Validity
Not Before: Jan 30 21:38:45 2025 GMT
Not After : Feb 6 21:38:45 2025 GMT
Subject: CN=679bf165-1956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:be:7b:7a:9d:7a:9b:5e:f0:bf:66:06:51:
a1:e8:8c:1c:d1:5c:a6:38:c2:f4:d8:0e:dc:f9:93:
62:c6:c1:3c:53:82:6e:1d:d5:78:37:40:2c:9a:48:
73:14:27:4d:4c:3f:b1:24:a6:24:ac:d9:64:0a:b5:
0d:54:3c:36:95:f1:1f:d6:15:8f:d1:79:ea:49:43:
c2:ec:84:43:d3:f7:5f:cf:04:bd:35:ea:be:78:68:
f1:56:cb:97:1d:01:28:85:3a:c4:ec:81:85:c0:6a:
54:78:45:e1:57:ca:19:86:43:2f:05:b7:0b:6f:a4:
94:02:4f:df:c7:f4:bf:c1:ae:39:fa:5a:52:f9:41:
62:94:9f:ba:00:2a:87:d5:75:b8:7d:73:af:50:a1:
1d:73:42:94:19:73:08:cc:41:bb:a3:75:6c:1f:ee:
e1:3c:7a:62:07:5c:d8:b9:bb:05:4b:52:6c:7e:49:
02:77:3d:30:d3:9a:0c:dd:6b:88:4d:62:c7:0d:a4:
f2:d7:b4:38:c9:35:17:68:7f:90:8f:34:8b:76:c4:
92:09:4f:30:d3:29:d1:59:3f:0b:46:3b:1b:bb:ec:
9c:55:c5:78:5e:87:cc:52:d5:68:a6:43:2d:aa:25:
28:8f:96:87:82:e3:12:20:38:a5:25:76:5a:b1:e0:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DB:82:09:E9:D0:82:06:B9:F0:7E:81:0F:C9:D0:42:60:14:AE:5A
X509v3 Authority Key Identifier:
keyid:43:38:CE:3C:06:31:0A:7A:94:F0:9B:B1:36:FA:CB:C2:83:55:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QzjOPAYxCnqU8JuxNvrLwoNVr8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1946/C67ED1FE17EF11EBA57F5135C4F9AE02/QzjOPAYxCnqU8JuxNvrLwoNVr8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8f:d2:2c:48:3c:7d:28:02:f0:39:40:73:33:0a:95:24:df:
03:5d:46:c1:c5:03:bc:30:2d:49:be:22:b7:c3:75:f8:01:37:
8e:25:92:b5:ed:da:0e:db:51:0e:c9:8c:f2:8e:a5:37:95:09:
36:86:0a:0d:a6:77:b2:fa:d8:d9:00:69:79:d0:36:06:cc:0f:
a3:db:c2:63:51:c5:12:26:8e:96:94:2f:08:17:db:82:2d:8a:
51:b1:c5:8f:ae:f2:76:62:14:1f:d7:14:db:d7:98:93:16:9b:
f6:02:de:1b:96:55:79:bd:1d:78:13:db:d2:d4:c7:4c:01:5d:
ae:62:f4:24:e3:42:9b:df:85:24:c1:2f:1b:c3:41:c7:5c:9a:
0d:3c:f5:93:75:5d:4a:91:9f:25:df:49:64:1e:cd:a4:1d:a7:
6c:ca:8b:06:c5:94:c5:52:bd:b1:2e:9c:1a:fc:03:76:5e:df:
9e:4c:70:28:dd:b7:b4:f2:e2:87:52:d8:ff:1c:2f:86:db:b0:
5a:a9:77:4d:ce:51:34:58:d6:e7:2e:1c:82:9c:23:a5:2d:2a:
2c:af:ae:25:90:71:a1:6d:44:1b:54:2c:04:43:c8:f3:cd:35:
52:69:28:ad:c3:51:21:57:79:be:fb:4f:90:4d:fd:f1:91:d1:
5f:8f:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:54 2025 by rpki-client