Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File: qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier: P+rn5cbXAiDjseozqEiSMvVxGbPyGG7ehiZAaxqGwOg=
Subject key identifier: 06:FB:B5:68:C5:B0:AD:1D:C5:C5:72:B7:71:72:32:44:35:60:C4:A4
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer: /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number: 0160
Signing time: Fri 31 Jan 2025 03:14:51 +0000
Manifest this update: Fri 31 Jan 2025 03:14:50 +0000
Manifest next update: Fri 07 Feb 2025 03:14:50 +0000
Files and hashes: 1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: NP+RsAispvo6o7sfbblZLX/4v09WTb4zcngcDU9JcoA=)
2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: kNqmZ3FjK582qLYE+Ju01BtqotCDz4PwGxpxzQp9l4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Validity
Not Before: Jan 31 03:14:50 2025 GMT
Not After : Feb 7 03:14:50 2025 GMT
Subject: CN=679c402b-59fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:48:2a:dd:eb:9e:26:3e:15:db:10:ea:e1:
48:32:1a:10:87:97:fc:80:3d:c5:9e:a7:a8:af:b0:
f6:5b:d7:08:7c:d3:9c:e7:ba:ba:a0:1f:93:54:1c:
a7:00:94:bd:da:98:e6:3e:f6:15:98:14:e4:0d:33:
58:eb:93:16:15:f1:ae:4a:33:92:ec:44:4c:85:5c:
d2:67:e1:09:8f:39:06:25:d0:86:99:6f:40:94:68:
1b:1b:85:be:0a:be:74:f2:1a:be:43:a8:00:3f:2b:
a5:b9:96:36:ef:1c:ee:b7:25:4d:c7:f4:79:76:68:
99:2c:1e:07:29:5f:39:38:f7:b8:60:1e:a2:15:69:
8f:7c:ec:fd:93:16:d9:ce:17:ee:6d:81:9e:eb:a7:
43:75:0b:bf:3c:26:e8:61:97:8a:0f:8f:33:19:11:
49:97:76:71:f9:ee:01:98:f3:21:ad:44:57:84:7c:
42:39:a6:85:98:5e:bd:33:69:1c:cc:54:98:93:40:
eb:21:f5:77:d0:38:f5:97:33:9b:c3:cf:c6:d0:20:
ef:55:40:ec:42:60:71:51:24:4e:04:80:98:d1:bc:
f8:f9:f4:12:4d:28:42:a9:1d:d1:c5:7a:7c:76:79:
b8:80:ca:5d:70:4c:cc:e2:6a:c1:90:c9:8e:a9:9d:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:B5:68:C5:B0:AD:1D:C5:C5:72:B7:71:72:32:44:35:60:C4:A4
X509v3 Authority Key Identifier:
keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:93:70:2c:42:d3:58:66:de:9d:5f:92:99:57:2e:9a:4c:1c:
ba:3d:23:a9:f7:d3:dd:c4:ec:91:07:9c:12:ff:2a:1c:33:47:
81:97:07:01:35:54:9f:46:cc:47:04:1f:38:a6:89:d5:54:e7:
e0:be:58:aa:80:01:36:c8:a0:2e:b4:14:cc:72:40:d3:58:5a:
76:25:3c:8b:89:92:12:f3:34:3b:0e:38:41:91:be:ae:35:19:
0c:43:80:0f:8e:d6:1a:84:65:57:ae:5f:2c:24:e2:f8:41:dd:
75:95:69:92:cf:f3:2f:69:5b:6d:29:94:c3:92:e9:0a:88:95:
c0:3b:f9:3c:15:3d:bf:ab:56:24:6e:87:f2:02:1d:8a:d3:fa:
79:8d:07:7a:f6:f2:f3:a1:a3:ac:b7:8e:e2:bf:3b:c7:df:8e:
7c:20:6c:68:80:18:ee:05:7b:20:61:00:fd:c5:74:28:d7:86:
61:05:b8:12:dc:d6:e2:2b:3e:30:60:4c:fd:fa:34:0d:01:37:
61:93:d4:3d:74:ef:32:a4:6a:e2:b2:50:8f:37:13:09:2c:0d:
d8:60:77:86:0c:5c:4f:64:2c:29:0c:ef:90:bd:34:e7:10:48:
a4:ae:bc:02:69:11:1b:55:e6:ba:4d:ee:ce:10:ee:b2:20:f5:
d8:be:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:42 2025 by rpki-client