Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json)
Hash identifier: YgoisL0dPnpJd1YwyOKMwpD0biSnoUKYT2fZxWeM4bQ=
Subject key identifier: 97:CD:85:BD:5C:44:0E:C3:0D:BB:7E:DF:82:6F:B6:60:20:73:CB:87
Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37
Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
Manifest number: 4C
Signing time: Fri 31 Jan 2025 06:21:48 +0000
Manifest this update: Fri 31 Jan 2025 06:21:48 +0000
Manifest next update: Fri 07 Feb 2025 06:21:47 +0000
Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: 4BQhxrlxilfeEUNMnXPrZjrRD9v5robq9scNUGvLO1M=)
2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: vZeR0lcw46VwexcvwfLFeQsC9FFvQP0E+PgN5RwjHko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137
Validity
Not Before: Jan 31 06:21:48 2025 GMT
Not After : Feb 7 06:21:47 2025 GMT
Subject: CN=679c6bfc-51fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:3f:0e:dd:0f:be:ef:da:de:f7:05:36:21:
89:fb:6e:25:4d:1c:2b:c8:0b:f6:d5:61:db:fe:bf:
55:90:6f:09:70:34:ae:f0:a1:4f:69:f3:50:28:b1:
d0:2c:5f:41:7e:6f:d2:4d:59:d2:53:1e:93:ce:fb:
8f:c7:ac:a4:9c:3e:d3:ad:21:7d:8f:2d:95:6f:cb:
2b:5d:cf:33:91:49:98:4f:cd:d6:fe:94:dc:68:74:
31:a0:4d:f0:bb:a0:ce:36:a2:47:3d:be:a0:92:4d:
94:14:e0:aa:bf:fa:43:56:a0:5e:30:e2:d5:03:19:
b6:5a:40:2b:5c:c6:b6:b1:cb:fd:14:9e:d2:38:c2:
26:51:7d:ff:50:81:6e:d9:c7:8b:9f:28:45:17:a7:
f4:c7:69:33:01:9e:2f:eb:bf:a2:3d:d8:e3:ed:d3:
4b:cb:de:28:e1:ce:20:e1:2d:78:42:d4:65:fb:d0:
db:b6:e3:91:2f:59:c2:24:fd:cb:1d:73:c9:e8:9d:
cb:a7:38:8b:32:99:a1:f6:87:5a:2a:94:13:e1:08:
7c:a5:c5:47:5b:e8:25:09:ad:1f:ac:17:63:00:e9:
87:62:fa:81:c6:0d:ef:30:53:aa:24:3a:3e:d8:ec:
b2:26:71:c8:15:63:32:44:6a:18:b3:3d:c8:f3:f1:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CD:85:BD:5C:44:0E:C3:0D:BB:7E:DF:82:6F:B6:60:20:73:CB:87
X509v3 Authority Key Identifier:
keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:54:ad:40:1a:ed:96:d5:97:c4:9f:9d:3d:f4:ae:78:ae:
71:81:71:db:ed:fd:5e:f5:8f:8b:61:2f:4f:10:81:de:b2:65:
a3:71:99:58:ff:53:45:89:e4:83:d8:fd:e9:f2:c4:05:31:a6:
11:3c:20:21:97:f4:41:2c:64:b3:46:44:11:f4:50:8b:29:0b:
da:d2:32:48:c8:90:c4:12:04:f0:d4:30:1a:be:9b:16:07:5f:
a3:17:f1:a3:47:b8:87:c7:da:04:6f:ac:72:85:96:57:72:a2:
c5:3c:74:29:9b:ef:0e:5c:e4:16:24:11:2e:cc:c1:50:ec:6f:
5e:9f:48:e1:d4:0a:8f:e2:92:b5:5a:5d:d6:57:7a:d1:19:bb:
b9:13:a4:64:9b:75:8f:f3:4d:c6:71:ba:65:b7:f7:c5:86:69:
77:08:c8:03:00:84:ab:4a:55:b8:82:f3:d9:ca:fa:7c:4e:29:
93:11:51:e1:82:3f:f8:4e:0d:f8:55:da:d0:ec:62:f4:cc:fa:
65:2c:6b:af:a4:03:74:15:83:1b:64:bf:4a:33:46:26:33:14:
e1:25:5b:c5:d4:d7:a0:a8:81:69:2f:de:f8:f0:70:61:6a:dc:
7d:17:18:fb:72:23:18:14:12:42:eb:52:9f:0c:3e:75:f4:87:
41:f5:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:02 2025 by rpki-client