Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier: jzLXwfcIrmKMXe7QoCdKuCGEy4Xs5/u2h5z9OwFRl5A=
Subject key identifier: 72:FB:B9:5C:9B:13:00:39:02:FC:97:24:63:29:5F:A3:F1:C2:AF:AD
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial: 03EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 00:39:06 +0000
Manifest this update: Fri 31 Jan 2025 00:39:06 +0000
Manifest next update: Fri 07 Feb 2025 00:39:06 +0000
Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: fpJ2Ggqx1HWtWjqti61QiIuRqoXzC1gka91YPjPW8RA=)
2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: 5latq2+YRolk+7/RCZ77DIkjarUkzR1toXI6OoV7ng8=)
3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: 06e2Kd9kP50w5XlMiJZ3tSgrZONMMPBPJ5HjMD4Ujzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Validity
Not Before: Jan 31 00:39:06 2025 GMT
Not After : Feb 7 00:39:06 2025 GMT
Subject: CN=679c1baa-5bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:28:4a:bf:ea:65:59:bd:e0:e7:20:80:ad:
ca:c3:12:14:e5:f6:cc:91:1c:5a:db:7c:fc:01:fa:
1e:1f:6d:61:c9:2c:c1:11:71:7d:04:f4:db:30:b9:
bb:f9:11:cf:44:f1:a4:89:3f:66:da:e6:30:a0:4a:
8a:f9:db:93:87:ca:78:b9:57:39:8c:40:a4:99:ad:
83:77:b7:53:b5:4c:72:69:24:0f:96:13:87:ac:f3:
23:c7:7f:bb:ba:88:99:fd:fe:22:e2:93:0e:d8:5d:
3e:64:b2:03:7a:e7:cb:44:e0:c8:87:07:39:8e:e3:
d1:f2:4b:ba:87:a8:b5:4f:01:b4:08:9c:bc:0a:70:
0c:7f:9d:a3:29:f6:b6:f8:3e:e2:a8:69:cb:85:1e:
ea:78:85:23:08:ac:3f:00:2a:11:58:08:f4:48:ca:
6b:17:fe:d9:89:0b:08:20:5b:49:3a:21:fc:fc:73:
54:cc:8d:e2:ef:33:d9:54:88:a8:7d:d0:a2:87:d3:
0a:69:92:05:d9:06:6e:06:b3:13:40:6c:76:7c:bc:
5d:c3:94:42:c4:2c:f8:9b:7b:13:85:8b:ff:45:af:
77:1b:30:fe:c9:89:cd:e1:d7:2d:5b:cb:4e:23:75:
ee:de:36:88:a9:58:f3:7e:35:7d:f4:48:ac:5a:07:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:B9:5C:9B:13:00:39:02:FC:97:24:63:29:5F:A3:F1:C2:AF:AD
X509v3 Authority Key Identifier:
keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:03:e8:54:14:24:18:04:1e:fc:18:6c:53:ec:b9:55:6e:e2:
ab:a4:03:fa:37:a9:a6:b4:4b:eb:a6:88:29:11:c4:be:4c:46:
c7:b0:82:c5:53:90:56:fb:51:14:ba:d4:31:f7:74:30:9b:33:
fb:79:f3:4a:4c:87:e9:42:26:b0:ce:41:ba:bd:da:cc:6d:6f:
39:13:f3:c0:aa:ec:73:19:a2:2c:de:be:45:82:e1:ee:48:3b:
ce:91:28:fe:a2:e0:fd:d9:1d:5e:d4:2b:16:34:02:5d:5e:b3:
a3:11:9b:82:04:3f:c4:43:24:c7:91:7c:0d:ff:75:00:b5:95:
6a:f5:ca:a0:c2:07:01:0c:d4:44:34:be:7b:ca:6b:da:2e:ab:
74:47:aa:3c:cc:34:7d:35:d3:d3:9d:26:90:65:9e:5d:44:fd:
99:41:62:3e:ce:18:d7:7f:bd:1a:92:7f:df:5d:ca:33:22:0e:
10:44:74:d6:e6:2e:cf:35:41:24:e2:e1:18:11:a5:dc:ea:c0:
36:d1:51:64:61:d2:4c:05:f9:83:cc:23:49:0e:89:98:b7:72:
68:fd:12:ce:18:a1:78:f9:ea:b7:af:ef:1b:89:c8:63:cd:e5:
3a:9a:02:b7:62:50:f9:0a:dd:61:eb:75:86:bb:79:72:b9:69:
61:ba:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:55 2025 by rpki-client