Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier: r1fVpQRESTssq6i3hpwn6GuXOT1Rv9ayjs4/QBeJ6I0=
Subject key identifier: EB:BF:8F:C5:A4:39:9B:88:63:23:56:5F:42:75:4F:EA:E7:CE:A3:5F
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number: 01E6
Signing time: Fri 31 Jan 2025 02:15:38 +0000
Manifest this update: Fri 31 Jan 2025 02:15:38 +0000
Manifest next update: Fri 07 Feb 2025 02:15:38 +0000
Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: EdwRx0REmcZZmxdiIIpS9pxrc7NsyLp/1qqifO16ru4=)
2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=)
3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: MlSWr+baoX0iIeudBnt/7RnQIgEalzKtR7VxANOwdB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: Jan 31 02:15:38 2025 GMT
Not After : Feb 7 02:15:38 2025 GMT
Subject: CN=679c324a-5677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:7d:e1:0b:f6:f3:ce:fd:1a:eb:75:fe:d0:
68:50:cb:42:b2:bb:5e:c7:67:89:05:a7:18:68:8a:
e3:2a:84:82:bb:cd:7d:f5:e8:97:b0:2e:75:0d:6a:
ed:2f:74:df:82:f6:d4:d8:27:47:84:f2:e1:4d:26:
89:dd:ab:aa:9d:cd:f8:64:11:7e:b7:36:0e:e6:ca:
89:22:43:b5:d2:69:c0:9a:73:74:4f:c5:53:69:0a:
bb:d3:d0:fc:41:67:0c:f7:e7:3f:b7:27:b0:6a:df:
f1:ba:80:e4:fd:4e:93:70:df:b8:ca:c7:fd:b6:88:
16:d9:12:1c:a1:d0:fc:ec:48:40:4c:0b:fd:4e:1a:
d6:86:11:a3:e7:9c:40:18:14:99:f4:9a:71:17:01:
1d:e2:1b:5e:7b:a0:81:57:d3:37:ef:d1:df:93:78:
24:a0:a4:4f:a9:0e:04:1d:c0:37:3e:70:73:3a:81:
44:fa:1e:71:f0:5f:82:51:d6:cd:34:1d:41:49:93:
6f:96:06:78:0d:0f:32:6e:70:e2:cb:67:fe:29:53:
35:50:d3:54:be:10:81:25:25:15:8e:fa:bc:e7:72:
f1:da:73:b9:ab:91:74:56:4d:c4:61:bc:28:6a:72:
4e:5d:ad:d3:ee:c7:1f:7d:0e:68:1e:f6:0f:6c:d3:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:8F:C5:A4:39:9B:88:63:23:56:5F:42:75:4F:EA:E7:CE:A3:5F
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bf:84:91:7e:9b:c7:6e:01:85:cd:bf:f9:11:e9:6d:4b:c4:
7f:48:80:bf:90:cd:a1:ce:fb:76:a0:97:4f:ec:b8:cd:2e:dc:
a4:f4:37:22:80:6a:d2:0f:5a:3a:89:3a:cb:b7:bb:61:78:e2:
d9:39:c4:f8:28:7d:74:e7:78:79:22:00:43:92:69:78:3e:5d:
dd:09:cd:21:da:53:f9:1a:be:68:ae:d6:2d:cd:4d:3d:87:98:
48:52:2e:9b:b5:cd:e0:4a:cb:2e:93:c0:b2:98:55:8c:30:0b:
ba:17:3b:4b:8a:71:ce:0f:90:46:c6:aa:e4:95:12:63:34:ee:
a1:91:8b:6f:98:7e:45:b7:d4:19:8a:91:e7:d3:30:f0:fc:e7:
ed:43:77:62:b5:ab:44:73:d0:50:7e:f4:dd:58:bb:ed:cc:26:
cd:76:74:80:fd:d1:82:89:94:f7:ed:07:4c:21:a7:e5:dc:57:
84:ab:7e:28:8f:72:95:fd:23:b9:2a:2f:f9:6b:fc:29:be:ba:
39:8b:4c:2f:72:e9:e6:b4:1e:8c:a8:f8:67:78:79:c7:a8:c9:
64:e2:2d:6a:32:7f:e7:cf:92:c9:36:06:03:f7:60:83:36:8d:
68:8b:ef:d6:1c:b2:3e:f5:12:93:ba:01:01:86:f3:13:ca:aa:
36:36:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:27 2025 by rpki-client