Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
File: qq7HHKNN7wjYjud72RwVcXXMPAk.mft (raw, json)
Hash identifier: PPwXPuBgY3Qxmqc+BiQfsefykMkWi9rLu0B+WHIjltQ=
Subject key identifier: 67:57:B6:DB:FD:8F:6E:06:7E:F6:57:E4:27:31:DF:53:1A:FD:6D:14
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 0664
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
Manifest number: 063E
Signing time: Thu 30 Jan 2025 22:43:36 +0000
Manifest this update: Thu 30 Jan 2025 22:43:36 +0000
Manifest next update: Thu 06 Feb 2025 22:43:36 +0000
Files and hashes: 1: qq7HHKNN7wjYjud72RwVcXXMPAk.crl (hash: ODQ1P/mHXt7JhxNs260iHyl/NI4Jj00pilQJK3JyWeg=)
2: 16A9C3D4D18F11EF8C6F8687C4F9AE02.roa (hash: MQ6X1tK9DxK1LxjgedlK6qDnpi4dN/TJ/sJ1SKJNkcA=)
3: 17687AB8D18F11EF8C6F8687C4F9AE02.roa (hash: WWuXoRDgSFC35DFMV3idQp1hR/mdc4d4fur1hKvZ27k=)
4: 94D84328C2BE11EFA78A383CC4F9AE02.roa (hash: ILedb+K4luFgP1u+0Lt3UnlTE9tN7xoj1804tP59xoo=)
5: C7DF2FAEB31C11EF92C86228C4F9AE02.roa (hash: nedZ6CxgF0ng6a51eLIMspuxhTSJIeVR5Q+BtX9A36g=)
6: 7B34351E6C4011EFB07AFE4DC4F9AE02.roa (hash: a8hiZQY4feWw7cGzPQPoFMY0Vgh/L0UfvR1IyLlgJEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Validity
Not Before: Jan 30 22:43:36 2025 GMT
Not After : Feb 6 22:43:36 2025 GMT
Subject: CN=679c0098-6061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:63:fc:fa:0a:f7:cf:43:63:0e:a0:b2:fc:
b5:8f:82:e4:ae:19:f1:02:c4:8e:00:28:e2:06:cd:
8a:67:7b:d7:b1:ae:10:a1:43:f8:6e:e8:9b:cb:db:
66:9c:35:a8:73:34:f9:c8:3d:a0:40:b1:f7:9b:2b:
7c:1d:4b:7d:7c:1d:01:30:a8:8e:3a:ce:ab:d4:7f:
a4:e6:e5:ae:73:10:b8:9a:ca:98:1c:71:c9:12:2c:
1e:8d:23:54:f6:66:cd:ca:16:ed:c0:26:53:4a:fa:
7b:16:71:12:63:6e:4b:c2:df:3c:fd:9a:46:c3:34:
aa:a4:b4:d4:df:a3:e8:54:31:00:64:8e:51:d6:d9:
60:67:8a:69:ba:95:65:dc:23:e4:e4:94:d8:f5:a7:
36:38:be:e3:ff:6c:66:f9:1f:2a:ec:c1:16:71:45:
74:51:77:0c:02:a7:bf:63:3c:82:6e:6e:91:3e:cf:
3e:85:b3:6e:3f:74:b6:03:96:56:f1:8d:bc:f6:b1:
5f:a4:55:6c:bb:3c:d5:37:57:5b:92:6a:e5:10:04:
fc:00:36:ff:01:c1:f0:40:52:be:9d:07:ff:58:ef:
7d:f9:e3:48:5c:ac:65:e8:3b:96:25:33:d0:21:65:
84:88:bf:79:2e:b3:71:95:57:89:b6:4c:10:aa:49:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:57:B6:DB:FD:8F:6E:06:7E:F6:57:E4:27:31:DF:53:1A:FD:6D:14
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:39:4c:99:63:d7:d6:b0:a8:d9:c6:55:c5:3a:30:e8:f6:96:
97:ef:43:b3:45:a6:2f:b3:bd:da:40:cf:a0:e6:c1:a3:7e:13:
41:c8:bf:9f:25:6c:a6:ff:32:38:bb:5f:88:a1:e5:75:d2:0a:
fe:56:d3:6e:95:20:65:41:cb:76:d5:ef:ec:24:c0:28:14:d8:
ec:f4:56:0a:32:18:fe:11:b8:c3:f2:95:74:cf:bc:88:31:dd:
39:cc:c4:f1:a7:a7:09:ae:3a:64:69:ca:50:5a:16:69:66:b0:
b4:00:76:8a:bb:d1:2c:9e:15:14:00:aa:39:03:49:9e:00:ce:
7e:d4:83:0e:c7:a5:87:55:ba:76:91:7e:72:7e:5f:89:96:25:
d0:81:e2:b4:93:29:79:03:66:0c:dd:5f:c8:77:f4:f3:b6:5a:
01:64:78:a3:24:a4:02:0e:57:28:b9:30:3e:7c:fd:cb:cb:06:
7e:36:95:b9:22:d8:23:3f:e6:15:0a:60:cb:ef:8f:4a:b0:25:
25:f0:ad:d6:d6:32:c4:f2:f5:75:76:8d:67:ae:a3:94:f6:9e:
e9:10:37:cf:91:47:93:c4:3f:eb:aa:16:d6:69:aa:05:bf:78:
e8:a3:4c:7e:f3:d6:02:e9:1b:ce:7f:d6:76:af:59:63:39:4c:
e2:a5:23:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx
NzVDQzNDMDkwHhcNMjUwMTMwMjI0MzM2WhcNMjUwMjA2MjI0MzM2WjAYMRYwFAYD
VQQDEw02NzljMDA5OC02MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu81j/PoK989DYw6gsvy1j4LkrhnxAsSOACjiBs2KZ3vXsa4QoUP4buiby9tm
nDWoczT5yD2gQLH3myt8HUt9fB0BMKiOOs6r1H+k5uWucxC4msqYHHHJEiwejSNU
9mbNyhbtwCZTSvp7FnESY25Lwt88/ZpGwzSqpLTU36PoVDEAZI5R1tlgZ4ppupVl
3CPk5JTY9ac2OL7j/2xm+R8q7MEWcUV0UXcMAqe/YzyCbm6RPs8+hbNuP3S2A5ZW
8Y289rFfpFVsuzzVN1dbkmrlEAT8ADb/AcHwQFK+nQf/WO99+eNIXKxl6DuWJTPQ
IWWEiL95LrNxlVeJtkwQqkm7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdXttv9
j24GfvZX5Ccx31Ma/W0UMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2
QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjM1My8zQkZERUQ2NDg2QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3
allqdWQ3MlJ3VmNYWE1QQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0OUyZY9fWsKjZxlXFOjDo9paX70OzRaYvs73aQM+g5sGjfhNByL+f
JWym/zI4u1+IoeV10gr+VtNulSBlQct21e/sJMAoFNjs9FYKMhj+EbjD8pV0z7yI
Md05zMTxp6cJrjpkacpQWhZpZrC0AHaKu9EsnhUUAKo5A0meAM5+1IMOx6WHVbp2
kX5yfl+JliXQgeK0kyl5A2YM3V/Id/TztloBZHijJKQCDlcouTA+fP3LywZ+NpW5
ItgjP+YVCmDL749KsCUl8K3W1jLE8vV1do1nrqOU9p7pEDfPkUeTxD/rqhbWaaoF
v3joo0x+89YC6RvOf9Z2r1ljOUzipSNu
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:55 2025 by rpki-client