Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json)
Hash identifier: KA3zqbwYHkjGvM2+xekbakIE1BjN60FUz/367PHM0Y4=
Subject key identifier: 01:36:6C:4E:28:48:EE:A2:CB:FA:D2:9A:84:5C:46:BA:E1:EE:03:B7
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial: 03F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 00:39:21 +0000
Manifest this update: Fri 31 Jan 2025 00:39:21 +0000
Manifest next update: Fri 07 Feb 2025 00:39:21 +0000
Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: ZZzcNVUajfkKpwDox3fZQXUT1wbIK7hHJElG7FhCgdA=)
2: B45AFD84DE7B11EF8FAD4045C4F9AE02.roa (hash: ZUGXf7vOz3SlKG8VtqJNn64mut2t6/G5QnJZOAepnsU=)
3: 55CD1A722ACC11EE9FF1653AC4F9AE02.roa (hash: M66SkyK4TPOq2V8lBvnKKFj3UvFS815tccQ5yDnDLTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Validity
Not Before: Jan 31 00:39:21 2025 GMT
Not After : Feb 7 00:39:21 2025 GMT
Subject: CN=679c1bb9-ba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:b2:49:66:6f:66:2e:f0:23:8e:ec:9b:3c:
b2:a8:53:f5:28:3f:37:21:29:6f:28:2b:94:ae:d7:
c6:ab:6d:86:86:ef:c0:ad:e9:3a:a2:fd:e4:6d:8b:
fe:55:d5:6e:db:84:a9:e2:18:33:d1:e2:2b:dd:57:
47:87:0c:bd:91:a5:e9:76:30:e5:f2:f8:ad:0a:07:
3b:f8:95:eb:d4:6f:95:df:7a:87:68:3e:8d:14:e9:
e3:98:b1:5e:84:f1:7a:33:d9:12:b3:47:ab:77:aa:
5c:f9:a1:34:c6:d7:a6:a1:fa:cf:a7:49:51:eb:14:
2e:a0:f8:cc:34:59:e7:05:a3:4a:cb:41:88:b1:34:
76:f9:34:6c:22:f4:d5:a8:af:27:69:01:bc:be:1e:
93:cd:5f:81:24:43:36:64:ae:79:3f:79:5c:ea:2c:
2e:81:bf:37:93:9f:ae:2e:65:c2:88:05:a3:b7:00:
47:e3:cf:2b:83:12:06:be:3a:0f:59:1a:33:30:97:
fb:1a:cb:31:af:23:0c:8b:39:67:94:df:a7:51:6b:
30:2c:24:17:ba:ac:64:55:57:9c:d3:f4:22:5a:93:
94:91:b9:f7:fd:ee:99:e9:b7:93:6b:96:8b:67:7e:
3e:61:f9:6a:ce:c3:51:c1:3d:13:66:a5:dc:4a:f7:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:6C:4E:28:48:EE:A2:CB:FA:D2:9A:84:5C:46:BA:E1:EE:03:B7
X509v3 Authority Key Identifier:
keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:1f:ab:0b:cf:8b:b2:a0:33:e3:81:9d:f2:d4:1d:65:09:
7e:f0:07:9b:4b:90:17:78:0a:e0:a7:22:1e:70:f8:be:fc:80:
fe:e3:31:55:e6:05:72:5f:60:68:48:c2:fc:52:89:c0:9b:7c:
bc:2c:9a:d4:b2:b6:1c:6b:b4:aa:fa:c9:00:a3:1d:9c:8b:7e:
85:97:bc:2d:0f:19:16:68:70:1f:3f:7f:38:76:d4:93:f3:ad:
a2:f6:f3:a6:4a:c5:22:4d:f6:81:85:b0:5c:7c:e1:9f:2c:0b:
9c:72:94:21:63:1f:7b:b8:f9:f7:75:82:6a:10:60:c1:dd:75:
d4:2d:b1:e4:83:96:53:e3:53:53:60:2e:c1:7f:e6:03:93:07:
a9:25:7b:bc:63:11:94:00:2e:fb:4b:6d:7d:4e:a3:10:c3:5e:
f9:46:2b:42:b7:7a:37:92:10:bf:ad:ae:5f:19:82:b9:f3:d8:
09:0b:a2:08:e1:c7:01:b2:ab:42:9d:78:0d:bd:5d:76:ff:24:
08:86:26:75:c1:1b:2d:d6:62:ed:40:57:f1:a3:97:13:49:cb:
d9:7d:72:58:b6:99:f7:cb:33:95:7d:cb:2b:07:78:94:ac:ad:
2a:7f:8f:97:de:36:90:52:ea:fb:12:99:22:b6:00:96:b3:da:
20:56:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:24 2025 by rpki-client