Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier: cwHaYZdpEZZg72HvpkGNST1YueaW34Hq6YhhAeKu3fU=
Subject key identifier: 93:3E:E9:7F:95:B6:8E:BF:C2:1F:FB:E1:7E:96:58:C7:E2:AF:A5:A7
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial: 3448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 15:19:40 +0000
Manifest this update: Fri 31 Jan 2025 15:19:39 +0000
Manifest next update: Fri 07 Feb 2025 15:19:39 +0000
Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: EqMuYPC6tcIXrLfTmbRF3kvFjyDNAFjmynuO5CQE4Gw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13384 (0x3448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Validity
Not Before: Jan 31 15:19:39 2025 GMT
Not After : Feb 7 15:19:39 2025 GMT
Subject: CN=679cea0c-91be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:a6:d4:90:1b:16:d9:1c:c6:46:32:c7:b4:
de:83:9f:a6:1f:f3:ac:4c:0f:e4:d9:15:37:92:c1:
3a:89:11:57:63:97:e0:cb:b0:24:01:6c:8a:f1:15:
0b:fc:08:4a:c1:c5:f4:12:af:8c:aa:b0:05:7c:21:
13:5d:e6:18:00:b6:7c:18:cc:fd:f8:70:c6:6a:a2:
d3:7f:b2:50:d9:90:5b:27:33:f8:25:58:8f:b1:5c:
ae:6c:d5:15:fd:09:a5:4a:1e:fa:c6:d4:01:2a:a7:
1f:eb:47:26:01:0f:b1:8f:97:72:73:6f:c4:08:b6:
9d:05:01:be:d0:da:8d:54:73:a2:a0:d6:35:25:cd:
05:97:2d:e9:33:fb:57:ff:8c:c6:26:46:74:10:22:
db:36:f9:f3:b9:4d:b2:2d:83:d5:a9:ce:9c:50:20:
9d:84:66:1e:b7:f1:e9:b0:7f:91:b1:ee:3d:1d:4d:
77:cf:6e:29:b2:3e:55:4a:0f:81:21:47:cc:34:34:
ae:fe:60:66:a7:a6:60:df:9f:f8:9e:c0:39:b1:4a:
5a:95:e0:bf:9c:46:34:97:7d:94:a4:ec:f6:df:35:
fd:6b:ee:3d:eb:ff:3b:10:65:85:28:cf:8b:0d:00:
a5:7a:f9:9b:a7:35:71:35:42:9b:fa:0b:c2:ce:4b:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:E9:7F:95:B6:8E:BF:C2:1F:FB:E1:7E:96:58:C7:E2:AF:A5:A7
X509v3 Authority Key Identifier:
keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:2c:ac:77:44:29:16:d4:6c:2c:a0:f3:11:a0:9b:47:b6:
19:6e:7a:e8:91:25:09:55:c7:26:af:fc:a2:eb:19:f9:62:12:
a3:8f:82:2f:96:ba:4e:e7:d9:7c:f3:f0:fd:4d:b0:e1:d3:ed:
2e:ac:48:33:74:1f:dd:92:58:1b:85:57:55:76:e6:e7:14:83:
1b:e1:ed:5a:0f:5c:e7:29:e5:f2:6f:e9:88:f4:d6:b6:2d:6a:
d4:b5:3a:af:31:99:ef:c6:96:c2:49:67:c7:22:14:a1:4e:e0:
b0:53:b5:7d:f7:d2:4b:18:23:7a:9f:75:40:55:23:d1:41:54:
92:4d:72:78:80:82:d7:25:ec:51:11:42:25:9c:37:94:0d:a9:
88:f2:81:bd:6a:04:ce:35:cf:3a:ff:eb:f2:0e:80:79:5b:65:
45:62:e7:97:74:28:24:e2:b3:c3:e4:50:96:35:9c:76:19:87:
97:05:52:03:7a:a9:ea:34:b8:99:24:43:e7:f5:37:29:3b:61:
50:ec:b4:fa:f7:c9:bc:74:e2:68:73:7d:ee:55:d7:31:29:d2:
19:df:3e:b4:0e:4d:c0:c1:6a:75:b2:ce:68:d9:da:3e:bf:4c:
2b:0a:a9:14:0e:6d:73:83:27:be:26:00:f4:93:a2:32:6c:72:
eb:b1:e0:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB
REM0OEQ2QUQwHhcNMjUwMTMxMTUxOTM5WhcNMjUwMjA3MTUxOTM5WjAYMRYwFAYD
VQQDEw02NzljZWEwYy05MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsim1JAbFtkcxkYyx7Teg5+mH/OsTA/k2RU3ksE6iRFXY5fgy7AkAWyK8RUL
/AhKwcX0Eq+MqrAFfCETXeYYALZ8GMz9+HDGaqLTf7JQ2ZBbJzP4JViPsVyubNUV
/QmlSh76xtQBKqcf60cmAQ+xj5dyc2/ECLadBQG+0NqNVHOioNY1Jc0Fly3pM/tX
/4zGJkZ0ECLbNvnzuU2yLYPVqc6cUCCdhGYet/HpsH+Rse49HU13z24psj5VSg+B
IUfMNDSu/mBmp6Zg35/4nsA5sUpaleC/nEY0l32UpOz23zX9a+496/87EGWFKM+L
DQClevmbpzVxNUKb+gvCzkszNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM+6X+V
to6/wh/74X6WWMfir6WnMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE
QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC
RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuHCysd0QpFtRsLKDzEaCbR7YZbnrokSUJVccmr/yi6xn5YhKjj4Iv
lrpO59l88/D9TbDh0+0urEgzdB/dklgbhVdVdubnFIMb4e1aD1znKeXyb+mI9Na2
LWrUtTqvMZnvxpbCSWfHIhShTuCwU7V999JLGCN6n3VAVSPRQVSSTXJ4gILXJexR
EUIlnDeUDamI8oG9agTONc86/+vyDoB5W2VFYueXdCgk4rPD5FCWNZx2GYeXBVID
eqnqNLiZJEPn9TcpO2FQ7LT698m8dOJoc33uVdcxKdIZ3z60Dk3AwWp1ss5o2do+
v0wrCqkUDm1zgye+JgD0k6IybHLrseC4
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:51 2025 by rpki-client