Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
File: QSplEc_tz-y1WQyWyMNh4v7USFc.mft (raw, json)
Hash identifier: ztLmE7OcTxmRexya8UySXa098jtj1XF36RVv72x+FAQ=
Subject key identifier: E5:B9:3C:E9:7D:05:39:0E:DF:A0:9F:52:96:A0:70:4C:16:63:3A:D0
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 5F8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
Manifest number: 344C
Signing time: Thu 30 Jan 2025 20:23:29 +0000
Manifest this update: Thu 30 Jan 2025 20:23:28 +0000
Manifest next update: Thu 06 Feb 2025 20:23:28 +0000
Files and hashes: 1: QSplEc_tz-y1WQyWyMNh4v7USFc.crl (hash: hZJrGbafwow377C9ahLuTz+VRjK9V2CQDEAMzmXblII=)
2: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (hash: ZH3Mq/JSGWA6DuI0NcZDqTsE9u1Wv10V6AeYETNaO6o=)
3: 01A59B2EB72111EC9885AF51C4F9AE02.roa (hash: Giv4rcaEM71vd0FJYtYnZ1NZEvI1/oUilndLpAEn83g=)
4: 4E9D3CC61F5511EBAA049D14C4F9AE02.roa (hash: ps/h6G9ZK3Tx0wcyJa3VEs1GoZ3nLFBshAaXDJE7sno=)
5: 8FFA8D36FF0C11EA854DE24CC4F9AE02.roa (hash: tnJ3XOL1qQV4G/mV0ORt0qAipnI6yxGGobtXPhZDv0c=)
6: CADB5E342D2211EE87D1FB10C4F9AE02.roa (hash: 9GuUG9mVckkRQctgNCdCmkXtRR7SNi7u2JK2feaLBfM=)
7: DDBC2904F43811EB996EF71CC4F9AE02.roa (hash: KrCTzS2XbgtLsY6GZt/EHaNU/HloOc9wNHxytXA1aYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24460 (0x5f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Jan 30 20:23:28 2025 GMT
Not After : Feb 6 20:23:28 2025 GMT
Subject: CN=679bdfc0-5716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:21:42:cb:45:f4:26:5d:5c:0b:68:21:0f:
38:0e:77:4e:fd:92:21:74:eb:2d:1b:99:86:97:66:
66:03:04:23:f8:69:64:04:fe:be:84:d4:97:4e:ff:
06:8e:20:ef:ca:6a:ee:f6:b4:7c:6b:62:0c:30:75:
c3:50:a2:a2:04:fa:8c:ec:3c:b2:93:b0:e3:35:21:
44:b9:9c:07:28:c7:df:f5:22:3f:8b:4a:7b:9f:75:
8c:c4:39:b2:6d:5a:3c:80:44:cc:61:47:ef:b6:d3:
bf:41:84:50:e0:df:9f:5e:de:0e:56:2d:dd:91:01:
7f:ab:68:12:41:e9:46:5c:d6:92:88:6f:35:ee:b6:
fc:ee:66:70:ae:5f:a6:b8:87:f0:80:1e:17:63:28:
c8:fd:2d:10:49:1a:eb:54:de:0a:43:bd:b6:74:96:
76:b6:4b:32:f9:86:31:8b:20:d2:fe:1e:d1:8d:de:
04:4d:f5:6b:2a:1f:47:90:d1:b9:98:cb:8f:bd:8c:
c0:da:15:c9:f3:d7:d1:f5:dd:6a:d9:18:8f:aa:33:
9c:97:17:b9:0f:0c:bf:6e:8f:f4:53:0a:e9:25:5b:
cd:85:b1:d3:37:85:7c:80:73:4e:b4:53:67:dd:fa:
d6:21:17:14:5e:5e:92:d4:37:44:19:12:5d:7b:31:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B9:3C:E9:7D:05:39:0E:DF:A0:9F:52:96:A0:70:4C:16:63:3A:D0
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:79:1e:d9:c8:f6:4d:8a:13:b2:09:38:fc:3a:eb:ee:31:a0:
07:b2:1c:a2:fa:b4:b2:52:ce:b9:9d:62:d1:c0:7f:89:ac:b0:
f6:3d:94:32:13:7d:53:47:b9:cb:fd:03:18:4d:b7:7e:23:61:
3a:78:6a:47:25:b5:9f:39:76:c3:cb:64:0a:9f:e4:bb:a8:2a:
c1:3b:8b:53:7d:c6:00:79:b9:35:3d:64:e5:64:2c:0b:99:4d:
6a:71:1c:df:3b:5c:4c:cd:d8:8d:ed:bd:9f:86:18:54:05:cd:
18:7a:fd:67:78:62:72:a6:16:00:a2:41:d1:5c:fb:95:49:3e:
36:19:55:1e:07:62:0c:05:9b:e0:50:3e:9b:d3:6a:44:e9:52:
08:21:bc:3f:00:8c:af:f6:5e:b4:0a:40:07:91:8a:be:b7:62:
0a:c3:2b:2a:ad:12:74:02:32:05:0c:58:99:32:46:c1:db:75:
36:cd:62:a8:4c:df:51:e7:5c:06:44:0e:98:ef:de:1a:30:72:
5b:49:74:76:09:68:9a:f2:e1:cf:f9:08:5f:15:bf:d5:87:99:
6e:17:0a:cf:a2:97:b0:a1:d0:0e:70:33:7c:bb:7c:15:c3:f6:
5a:a4:a8:90:fa:47:df:b6:46:7c:d3:5b:f9:05:60:fd:0b:cb:
4d:49:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:25 2025 by rpki-client