Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: pOoT1yCNj2zxDbkTA0e6EM7Y/j+XmtOkTyF6E7qmf0A=
Subject key identifier: B1:15:C0:E0:AE:54:0C:B6:BE:2E:15:13:6F:4A:84:EC:8C:4E:BC:5A
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 05:38:34 +0000
Manifest this update: Fri 31 Jan 2025 05:38:32 +0000
Manifest next update: Fri 07 Feb 2025 05:38:32 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: n0y4YATn7h0Yk76LKtdFqGwmiW+hUevZkWH62o1QJrQ=)
2: 691C2F48169211EFBBB5BD6CC4F9AE02.roa (hash: JFnoGlMQvx0rfghWguqYEQOafVm5KcUTywblwtb1T0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Jan 31 05:38:32 2025 GMT
Not After : Feb 7 05:38:32 2025 GMT
Subject: CN=679c61d9-4b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:67:ac:3c:db:27:db:68:ab:f2:2c:10:d3:
20:95:0e:8f:29:8c:ba:9e:91:6b:01:b2:b4:6d:9e:
c9:ae:44:21:aa:c3:94:ac:15:0e:13:e3:5e:a0:7c:
7e:c1:98:97:2b:4f:92:e2:f4:34:fd:4c:5a:97:5b:
50:4d:23:8e:02:be:04:ec:1a:c9:fa:d8:9d:02:58:
27:8c:a8:a3:e7:93:bd:2e:1d:c8:6b:9a:81:0e:b9:
3b:51:e1:b3:5e:c6:84:ae:b9:1f:ba:e9:49:8a:ae:
bb:c1:62:a1:1c:96:42:f1:ae:92:d8:f0:ae:0a:a1:
26:a8:f9:87:3d:d9:f0:7d:4a:c5:97:8b:4d:5b:6b:
bb:41:1e:d7:52:24:af:db:21:8c:f0:a2:08:67:68:
91:4b:f6:27:f6:59:04:a6:3e:b5:ec:a2:10:d1:44:
2f:a9:69:ec:09:df:df:85:16:df:a5:ca:ce:cb:15:
e2:88:76:c1:e4:dd:9e:0b:d4:98:b1:aa:75:de:f6:
0b:ee:ed:67:f7:52:5a:54:c4:f9:7f:0e:b0:ab:fb:
e5:74:f9:11:8b:9d:05:d5:3f:11:21:ad:7c:ac:45:
38:0a:af:ed:fd:6f:78:3d:26:4a:33:a4:52:89:61:
e5:7f:6c:45:70:ca:58:46:6e:47:f7:39:9b:20:92:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:C0:E0:AE:54:0C:B6:BE:2E:15:13:6F:4A:84:EC:8C:4E:BC:5A
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:92:5c:14:21:7c:95:1c:3e:1b:5b:11:8c:6c:48:bd:e4:96:
a4:79:3b:35:35:0a:fd:fc:eb:8a:ef:11:9b:0b:7a:f1:4e:0c:
3e:59:05:bb:63:cb:4d:cb:e0:cc:d0:77:62:23:c6:9a:5d:2e:
38:6d:a4:f5:76:47:90:5d:8a:bb:ae:e8:9d:05:88:eb:6f:da:
9e:24:ee:9b:03:f4:3c:67:ee:b6:31:d9:d8:cc:4a:8b:ac:a0:
11:7d:10:31:45:7b:31:ca:98:b9:ee:23:42:b5:e7:4b:9e:02:
81:a0:b0:32:93:21:14:ed:9f:da:91:b1:10:c7:ab:41:49:42:
5c:64:8e:d4:54:c6:55:f1:db:45:5d:9a:16:bd:e1:d4:ae:d4:
35:a4:e2:27:76:98:40:9a:b7:24:98:89:9e:42:76:c2:d3:2b:
63:87:d4:79:b0:92:c8:4f:b7:49:99:6e:bf:08:9b:02:85:09:
28:d0:e3:24:bc:d3:6e:12:a1:97:e0:a2:72:af:20:4d:4f:3f:
32:f4:f0:2d:cf:a1:db:d6:93:fd:d1:d1:11:e0:ba:82:00:3e:
e0:56:39:dd:e8:04:0f:2f:e5:b9:9d:52:9d:18:a2:af:1b:ce:
4d:ae:57:08:fc:1a:63:64:9c:6f:e6:18:fc:4f:da:a7:06:c0:
b2:d6:40:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:39 2025 by rpki-client