Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json)
Hash identifier: FdN960PVv8tmjci1wovDqQrSOlFaSmUFfqDIgKyZo1c=
Subject key identifier: 9C:4C:1F:E9:8C:A0:BA:D2:DD:91:81:53:A9:0A:26:7B:E0:49:E8:E5
Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03
Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003
Certificate serial: 0C07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
Manifest number: 0C02
Signing time: Fri 31 Jan 2025 18:27:05 +0000
Manifest this update: Fri 31 Jan 2025 18:27:05 +0000
Manifest next update: Fri 07 Feb 2025 18:27:05 +0000
Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: i4SeMW8JFmB9rPNL5CqqnDX5VmHqk8HHo87tyhZZoZY=)
2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: l5CGLlauMb+Ni/lNc+v9jsE4+D1HZp9e9rAFpWt3fHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003
Validity
Not Before: Jan 31 18:27:05 2025 GMT
Not After : Feb 7 18:27:05 2025 GMT
Subject: CN=679d15f9-c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:17:69:6f:c3:ee:f6:d0:a5:15:59:75:e2:
c5:02:c9:15:c1:23:d3:be:54:6b:f9:b2:2b:e8:97:
22:ff:74:dd:69:22:d9:33:53:51:cf:bb:1f:39:91:
79:58:a8:e2:e7:02:3b:7a:a4:f1:4a:6b:75:b9:38:
97:30:7d:b9:f4:99:f2:61:65:25:c1:4d:73:23:d6:
2f:f2:83:0c:8f:c8:e1:20:d8:82:be:df:eb:2d:b9:
8a:64:ba:68:0a:6e:4d:41:7b:d5:fa:c7:85:e3:ca:
9c:e4:22:81:f5:da:fc:9c:25:fc:bc:c8:3d:67:62:
0d:87:22:f3:be:75:8b:e1:04:e1:dc:52:dd:8c:c5:
ea:98:8a:b4:85:2e:6b:5f:86:e9:1f:5a:b6:fc:c4:
3a:ab:a0:45:ba:80:7c:5a:93:b2:38:0b:fe:66:73:
34:e3:e9:30:69:8e:82:a2:28:53:f2:da:5f:85:f3:
bb:69:01:93:8f:b9:fd:65:7f:65:ae:91:96:5b:e6:
1c:3c:84:b7:50:69:3c:c3:bb:62:be:4f:62:25:37:
ca:ae:be:c7:5e:c1:2f:75:93:99:ea:55:8c:ef:67:
56:5a:1b:33:28:6e:14:3e:fe:57:30:19:f6:0b:57:
a9:08:c6:0c:9c:e3:cb:dc:9d:5b:ba:a6:7d:c0:11:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4C:1F:E9:8C:A0:BA:D2:DD:91:81:53:A9:0A:26:7B:E0:49:E8:E5
X509v3 Authority Key Identifier:
keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0f:c7:f1:09:fd:2a:08:61:df:14:11:f2:28:35:b9:78:bf:
fd:a9:0e:6c:bc:ad:4c:cf:22:be:bd:a2:31:6b:9c:2e:89:cf:
fd:76:7a:97:86:27:c4:fc:ee:ce:f3:77:3f:6e:47:46:08:64:
91:0d:4d:fa:74:d5:6a:b2:67:51:99:0a:4b:67:04:98:1b:95:
1f:cc:8d:d8:28:c3:75:b6:93:77:d7:88:43:5e:5f:f6:5a:b0:
77:15:e9:4a:f1:46:9e:e7:d1:71:63:54:89:4d:fc:0e:2f:e2:
84:a8:9b:6a:b9:8f:a7:b4:ab:ca:41:51:fb:ba:21:e0:08:95:
36:26:cd:71:d7:9d:a0:a9:f3:62:c6:72:26:16:82:ee:9c:ec:
28:e7:63:a4:ea:12:53:92:4c:94:5a:73:76:fc:85:7d:fb:c5:
93:9f:16:12:d7:27:02:a7:67:81:a5:d5:1d:8b:f6:40:4e:5f:
6d:f5:5f:f5:c8:4b:97:14:02:1f:21:a3:38:5c:20:11:b2:e8:
9c:cd:33:2d:00:16:52:15:b0:ed:1d:07:f6:26:a5:31:39:29:
d4:c5:30:46:8d:5a:90:0b:e1:77:25:d2:37:7b:fd:a4:aa:c1:
1d:06:7c:84:d9:53:74:1b:d4:16:cb:d4:46:61:5b:fe:91:ae:
76:34:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:25 2025 by rpki-client