Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier: zykpn4RFXgVnGJlxMQ7GrGBuzxFPO8nFae9d+lTALzc=
Subject key identifier: 4D:36:44:F8:3E:C2:61:84:CC:69:43:A6:E6:11:02:EE:BC:C7:1D:96
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number: 0178
Signing time: Fri 31 Jan 2025 03:00:26 +0000
Manifest this update: Fri 31 Jan 2025 03:00:25 +0000
Manifest next update: Fri 07 Feb 2025 03:00:25 +0000
Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: KkpQpOaz7bv171xWzltuJ6Za45BffptEMqBy6rdI1qM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Validity
Not Before: Jan 31 03:00:25 2025 GMT
Not After : Feb 7 03:00:25 2025 GMT
Subject: CN=679c3cca-9c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:fc:3c:56:8a:8f:48:8f:7c:1d:25:52:04:
61:36:26:ba:bf:0c:69:7d:86:56:34:5e:f5:92:ea:
0c:42:69:75:73:20:88:2b:de:86:e5:45:63:16:46:
3f:46:24:f0:aa:c0:4f:41:15:5c:06:af:9a:fa:aa:
e9:13:67:b6:26:18:97:61:df:a6:12:e1:3c:0f:c7:
d4:1f:57:54:e8:1d:7f:76:58:e8:63:df:46:b0:2c:
3e:a2:86:22:5c:29:e4:e1:d4:9a:56:26:e7:98:b7:
4c:3c:8b:07:05:3a:de:26:81:58:6f:9f:d8:97:a4:
48:86:5c:db:b4:a5:d5:2b:37:d4:b3:ec:38:09:ec:
cb:fa:32:3c:80:71:7f:d2:4f:cd:82:fb:98:2a:a9:
67:8f:7a:ca:aa:fe:f1:73:7b:11:14:c1:b1:64:2f:
2b:7c:b3:07:22:c9:98:2a:c0:31:64:f8:dc:4f:aa:
52:4c:85:fc:b7:30:70:21:0e:22:de:eb:92:f7:3d:
3a:b4:d0:f4:14:9e:79:90:7d:d2:55:00:47:c5:ce:
d4:3d:3f:59:20:4e:69:33:38:2c:bc:62:33:d5:b6:
e6:07:b6:71:d9:60:9c:a7:41:8f:d0:4b:50:d3:b8:
b5:ae:9f:c7:b1:dc:18:a0:a9:1f:b0:5d:e6:20:c7:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:44:F8:3E:C2:61:84:CC:69:43:A6:E6:11:02:EE:BC:C7:1D:96
X509v3 Authority Key Identifier:
keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:23:3e:5f:6c:f5:2d:32:46:6a:ed:01:8b:ed:fd:2d:0d:fb:
a9:9c:3e:0c:11:26:a3:e3:43:11:ed:76:49:be:de:0f:68:87:
d8:e7:c7:e6:57:b8:7a:d5:f0:46:23:10:2f:4b:f7:f4:be:63:
53:4b:ac:b4:8f:dd:75:c3:6b:a0:7b:57:c3:66:fc:ca:ee:e7:
40:b4:2e:92:69:46:fe:02:15:ce:a5:8a:c6:2d:31:ef:8f:c6:
e7:82:a5:be:6d:79:2b:ae:46:15:38:eb:ab:0d:34:5b:f6:a9:
92:02:84:eb:b5:c0:07:6d:f4:21:d2:de:16:cd:d1:d6:5b:68:
1a:4b:8d:bb:b6:c2:21:26:bf:66:68:b7:84:56:6c:2e:63:0c:
4f:fd:e1:ac:1a:24:9a:71:2e:2c:22:18:5b:2d:01:ad:20:0f:
32:13:98:3f:d6:e9:d2:10:f9:9e:aa:35:ec:41:97:b3:3b:e6:
e6:67:9f:14:50:bb:bf:81:a8:dc:00:27:26:b0:61:c2:34:38:
39:24:f3:40:d9:21:9e:2f:57:19:2e:07:cb:b6:b6:f9:43:86:
db:a7:ae:70:ba:84:ee:2f:66:54:31:fa:53:07:ca:2c:d7:27:
64:4d:26:23:a0:f1:e8:19:62:84:59:66:97:a2:9e:a2:f0:3b:
fd:10:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:41:30 2025 by rpki-client