Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json)
Hash identifier: 17P4fZElhFV27pZWL1zeDC+EOP/qUgwaFs3Z/VFBGcE=
Subject key identifier: 8E:EA:1F:47:D4:2D:4E:ED:31:17:B8:0B:40:15:23:F2:51:E9:D4:8E
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
Manifest number: 0A7D
Signing time: Thu 30 Jan 2025 21:00:13 +0000
Manifest this update: Thu 30 Jan 2025 21:00:12 +0000
Manifest next update: Thu 06 Feb 2025 21:00:12 +0000
Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: fDdOJ8Jxc6PMrzW5VLok/JDHNcEbW0JgYob+yz0g4J4=)
2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=)
3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Validity
Not Before: Jan 30 21:00:12 2025 GMT
Not After : Feb 6 21:00:12 2025 GMT
Subject: CN=679be85c-05d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:dd:b9:88:70:f2:d3:3d:70:c8:25:eb:50:
f0:73:3a:9d:b5:72:79:a5:60:d8:34:5f:df:2a:79:
e7:47:23:5e:e1:bb:4f:f4:84:bf:1b:d4:e3:75:ea:
88:82:fe:d2:d3:65:aa:81:69:cb:ff:8c:58:5a:94:
12:8d:27:97:0f:97:83:3f:96:02:c5:df:4d:67:c0:
e5:67:f1:24:46:f9:59:e3:43:1c:b1:c7:03:4b:18:
d5:d5:22:c8:a4:fb:d1:a2:aa:f4:fb:e6:56:93:ad:
45:b6:55:88:41:f1:c0:c8:49:ee:24:72:db:eb:34:
53:31:21:e6:68:ff:c1:43:05:e0:0a:e0:32:9a:40:
7a:17:ee:ce:6c:44:ee:56:b8:10:2f:11:25:23:e5:
ac:97:80:42:d0:3f:53:2f:b4:3e:99:1f:8c:fd:c0:
ba:d4:58:4e:3c:48:ec:fd:65:62:02:7c:fa:29:f9:
b0:63:bc:60:ae:32:4f:6a:ec:8d:7f:fa:7b:08:b6:
6d:35:ae:59:f0:52:8c:02:49:7e:31:8b:34:d2:e4:
f3:6a:3b:c1:4a:0d:25:62:19:2a:d9:8c:c7:cb:b1:
93:8d:df:24:9f:31:34:25:07:f1:93:b9:15:89:49:
1e:66:b2:38:c9:a0:91:61:26:90:ad:f2:70:67:cb:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:1F:47:D4:2D:4E:ED:31:17:B8:0B:40:15:23:F2:51:E9:D4:8E
X509v3 Authority Key Identifier:
keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:81:63:97:ac:12:47:a3:9b:9d:a2:d2:3a:7a:d6:97:ac:
73:bc:13:e8:d2:26:e2:75:86:3e:98:6b:e9:02:1b:b1:5f:fa:
0f:52:c2:34:5e:ed:a4:ce:80:9b:6c:a7:96:8c:4a:21:20:24:
6e:99:63:5f:62:24:40:3f:85:f5:ad:91:e3:1d:79:5e:c2:10:
81:e9:3e:f1:99:01:58:3a:2e:67:4d:d7:90:dd:44:66:09:19:
00:35:57:3f:f6:91:ac:e2:f7:5c:dd:b9:5f:dc:14:72:9f:8d:
e8:73:36:66:44:ee:55:7c:9e:eb:02:cf:51:a8:60:ff:27:cf:
65:19:66:54:7e:f9:0b:49:45:f5:81:01:fe:a6:69:fa:5f:8c:
56:fa:69:76:fc:26:6c:ff:1a:1f:62:0c:51:af:5a:a9:8b:4b:
09:d8:b3:ba:36:c1:76:32:1f:56:27:23:f8:0c:9f:10:0e:d5:
a7:13:62:96:8a:26:fb:8b:b9:4a:fd:f6:eb:ff:fd:d5:a5:db:
cd:59:e7:15:3e:fb:fe:0c:f7:dd:2e:27:81:a5:17:a1:ce:43:
64:ce:a7:db:e3:e2:92:be:d4:72:01:0e:c4:b4:5f:06:ae:b6:
7b:2e:eb:cc:7e:ad:6f:7c:ec:27:9e:db:22:a9:8a:e3:38:30:
a3:88:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:44 2025 by rpki-client