Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier: GczGFfQpeUXBPTfE75SJN2jTF32loHm9DKGPrtwUAwc=
Subject key identifier: 2B:66:3A:B9:34:7D:B9:C9:84:97:7D:47:79:5E:A3:6A:76:BB:88:74
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial: 1681
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number: 1671
Signing time: Fri 31 Jan 2025 16:41:33 +0000
Manifest this update: Fri 31 Jan 2025 16:41:32 +0000
Manifest next update: Fri 07 Feb 2025 16:41:32 +0000
Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: lXZPKsuSJ9O1l8cojhX3flHd/IKMzQenRJdd+p+z5iU=)
2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: ZwNXUOwbbGwEvsT0YYSZl1NqDpf0fkjGMPzYp65wdFE=)
3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: fI6pWEKhcfnz5T7b0Qu0ji5oi9dMvf4xCNtRiu+OZoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5761 (0x1681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Validity
Not Before: Jan 31 16:41:32 2025 GMT
Not After : Feb 7 16:41:32 2025 GMT
Subject: CN=679cfd3d-8a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8f:ec:1d:eb:df:9e:74:72:4b:f4:3b:fb:4d:
3b:10:18:1d:97:17:3f:ff:c8:b0:04:f7:76:4e:10:
49:ef:ec:9f:06:0c:1b:78:43:1f:25:48:7f:07:3e:
fc:6e:20:ff:29:d8:d4:47:2c:0a:d3:08:8b:18:01:
45:26:78:91:50:c2:25:55:e3:f4:37:04:1a:95:ff:
23:32:1d:6f:62:80:9f:c3:4b:fd:c0:de:6e:b4:30:
f7:f9:82:81:74:42:2c:ae:f7:88:31:5f:11:fc:20:
1c:92:f2:c6:3f:f0:d5:7e:5a:2a:79:a4:09:3c:33:
fb:38:30:99:bd:e7:f8:0d:e6:61:e8:38:c2:44:a1:
3a:13:65:72:84:26:81:79:94:fc:92:6e:84:2d:ea:
e0:62:e7:02:b8:bb:2c:f2:0b:5a:12:61:32:71:f6:
84:32:14:8f:b4:97:3f:9b:76:9d:e8:0c:fa:1b:c8:
82:c4:3e:72:52:3b:20:77:e1:91:58:57:82:5b:ec:
3b:22:da:c1:dd:b8:cb:f3:04:4c:59:0f:70:84:53:
57:56:78:e8:14:09:2e:9f:55:1c:d8:cb:60:b5:54:
f0:34:29:2c:bb:0c:45:5b:3e:bb:5c:ef:54:31:08:
3a:e7:cc:10:48:e5:db:11:d2:de:7d:01:14:7d:4b:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:3A:B9:34:7D:B9:C9:84:97:7D:47:79:5E:A3:6A:76:BB:88:74
X509v3 Authority Key Identifier:
keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:9c:e9:38:47:22:c7:b8:5a:64:65:73:1d:1c:6a:2b:14:e0:
67:55:b4:7c:65:57:e8:d6:fe:34:8f:f7:7c:94:a7:f0:42:12:
0e:94:ed:10:d9:a9:45:5d:7c:f2:5c:16:7a:51:5d:9d:f4:11:
7b:74:98:5e:22:4c:b1:18:f4:93:05:42:d6:8e:7d:ea:cc:6e:
60:5a:89:8e:cc:9d:15:39:94:aa:d2:67:d3:6f:66:28:58:d6:
15:fa:d0:c4:87:55:04:3f:31:a6:f5:a2:78:53:ba:c3:50:3e:
d7:88:4e:30:ed:ff:95:16:b3:45:ce:9a:3b:a8:68:78:aa:a5:
e1:27:1a:10:8d:a5:64:ee:74:97:3b:37:66:11:32:5c:20:25:
e6:b7:a2:bb:1f:32:80:94:13:5e:7d:9a:3f:af:ef:a6:96:1f:
ad:4d:a7:23:a0:b7:69:a7:2f:ed:83:1f:50:6d:d4:8b:15:11:
75:67:53:2e:7a:2f:cf:89:b7:52:27:34:8e:f7:70:8a:c0:58:
51:8c:eb:b4:22:97:3e:f2:22:a6:44:2d:e8:3a:16:73:4d:f0:
39:d0:da:8e:81:5a:ed:cc:54:68:32:23:70:fb:de:6b:79:ce:
68:ae:45:dc:7f:a9:d6:fc:7d:5a:22:dd:ae:dd:e2:7b:f5:56:
17:bf:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:00:59 2025 by rpki-client