Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json)
Hash identifier: 1qJXv5+mfnHHAgrfygbZBT31J8W5OiLvHjMS7QUE7g8=
Subject key identifier: 62:D9:BF:CC:15:27:50:B6:9B:99:6B:B4:2F:99:BF:50:8C:D2:9C:3A
Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
Manifest number: 088F
Signing time: Thu 30 Jan 2025 20:37:05 +0000
Manifest this update: Thu 30 Jan 2025 20:37:05 +0000
Manifest next update: Thu 06 Feb 2025 20:37:05 +0000
Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: F3NpsjDtbXotMwYK9ZkF7t4RLsPBaFscsXxM1n5lfGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Validity
Not Before: Jan 30 20:37:05 2025 GMT
Not After : Feb 6 20:37:05 2025 GMT
Subject: CN=679be2f1-d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:0f:06:97:dd:d0:81:2e:6b:4d:ed:43:e3:
29:a2:81:42:30:3b:c9:33:98:cd:fa:dc:4b:ce:02:
73:2b:c0:aa:26:74:cc:f8:0c:7d:29:6c:41:87:ca:
78:7e:52:46:cb:99:ec:63:34:75:3b:05:b7:ba:26:
7b:ed:f8:48:fa:92:fa:83:b1:bc:9e:9a:46:de:db:
71:f1:c7:d4:e4:00:ba:6e:86:09:48:ab:11:c1:5a:
cd:b7:81:b6:44:f5:84:75:c2:77:64:8a:97:39:65:
49:0c:71:43:86:b7:f7:44:3d:7f:5f:8c:b3:f1:b9:
62:e1:69:9e:31:5a:8f:90:b3:8d:8e:5b:21:0d:e0:
96:cb:fc:c2:61:d0:59:6f:cb:dc:fd:07:e9:d9:53:
6f:3c:4d:e0:f8:4d:bb:24:61:a8:2d:da:15:96:f9:
0b:33:d4:ce:14:e1:d0:eb:f2:8b:b4:32:ca:d2:b3:
a4:9f:43:af:e1:2d:87:7e:a1:01:7c:ab:de:fe:85:
62:5e:da:84:50:9f:1e:2c:0e:07:bc:4f:33:ab:d3:
6c:fe:37:e9:56:3a:69:7d:94:44:01:07:ea:b1:9e:
33:bd:f5:e0:a8:ef:d4:61:1b:0e:25:70:00:2c:e4:
c8:0a:0a:ff:5f:3c:ae:16:ff:78:65:2d:bc:75:bd:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:BF:CC:15:27:50:B6:9B:99:6B:B4:2F:99:BF:50:8C:D2:9C:3A
X509v3 Authority Key Identifier:
keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:80:1d:d4:67:4c:d2:50:b1:6a:b2:02:f3:dc:15:54:77:
e5:48:7a:93:21:60:23:cc:48:db:b7:15:33:a9:a6:21:00:61:
61:b9:1b:b8:a6:95:d7:dc:5d:99:96:e1:97:76:50:6d:5b:dd:
1f:46:b5:30:f6:62:72:b9:99:b9:e4:7d:1a:87:25:70:72:4d:
61:57:ba:0d:71:fe:a9:e9:76:81:0d:f2:5b:ee:23:9a:46:39:
13:68:66:bc:f1:15:d4:ce:8c:90:f3:51:7a:75:51:d2:34:b1:
8b:05:d5:c0:a3:a8:9f:31:1b:ab:cc:c4:44:8a:81:e7:a6:cb:
0d:16:11:37:50:c4:d3:01:80:12:f7:c5:38:f1:35:f3:35:d5:
56:c0:d1:53:b2:0b:ba:61:b2:a7:03:cb:48:40:35:d9:3c:f7:
ac:cc:2a:31:c5:8f:de:54:93:52:f7:64:98:fd:13:8f:09:0b:
94:0a:c5:08:27:49:75:e8:6b:e6:94:99:9e:74:b9:d7:07:c4:
23:12:be:93:d2:6c:50:38:f0:08:12:c8:6b:28:4a:7b:63:e7:
c6:92:b9:9e:58:b4:eb:19:22:26:72:9c:36:e0:4c:69:7b:ac:
c0:77:e8:b7:07:2c:6a:2a:6c:cd:3f:db:a7:d9:cf:40:3e:88:
21:22:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:37 2025 by rpki-client