Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json)
Hash identifier: Vl406cidgBsdC0QTgUH/Y+fzIjGgbX+/dqXTYjHYs40=
Subject key identifier: 65:AE:33:A2:91:C2:98:99:A6:21:73:7C:7E:26:B9:AF:DD:DF:49:8F
Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3
Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3
Certificate serial: 0605
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
Manifest number: 0600
Signing time: Thu 30 Jan 2025 22:50:26 +0000
Manifest this update: Thu 30 Jan 2025 22:50:25 +0000
Manifest next update: Thu 06 Feb 2025 22:50:25 +0000
Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: bI0rbZu5gqaHfV1jw47XuLtI4FI1Yt0UurU7J/Jg7Pw=)
2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1541 (0x605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3
Validity
Not Before: Jan 30 22:50:25 2025 GMT
Not After : Feb 6 22:50:25 2025 GMT
Subject: CN=679c0231-39a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:80:92:e9:33:33:0c:06:b3:d9:fd:1a:58:
53:29:51:5f:80:68:d6:13:a7:2c:0e:b9:1d:73:98:
c7:5c:39:40:f7:f5:16:12:f7:f3:26:aa:1d:ed:0b:
2c:44:99:ee:9d:2b:da:9e:86:43:6c:f9:64:9e:e3:
97:eb:33:f8:c4:7e:25:f1:b0:26:53:78:36:2b:0e:
3e:12:f1:e4:2f:1f:d2:76:77:16:0f:4a:a3:d6:17:
90:f8:f3:9c:69:62:22:23:c3:53:da:ff:3b:83:00:
3f:22:bb:fc:dc:e8:76:a7:bf:8e:cf:38:d4:97:88:
33:20:80:58:eb:7f:d6:5a:4f:3b:bf:79:b4:f0:a7:
c1:14:c1:ab:fa:78:07:61:3b:b4:51:f9:4b:15:4b:
de:5f:fc:f9:79:05:50:db:91:83:de:60:b5:c0:91:
41:fd:e2:38:9c:c2:40:11:42:37:ce:a6:5e:65:76:
34:cc:28:4c:d0:77:84:6e:0f:0f:08:f9:6f:cf:f9:
94:3a:7b:77:74:b4:55:e4:ac:9b:f6:af:ed:9f:3a:
a8:70:a0:a5:95:56:95:c3:29:1f:d3:e2:50:d2:3d:
06:fb:26:26:4c:ff:98:71:77:3c:61:3d:d3:32:4d:
c5:b0:67:9c:1f:8f:44:61:11:90:e9:bc:a8:c0:14:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:33:A2:91:C2:98:99:A6:21:73:7C:7E:26:B9:AF:DD:DF:49:8F
X509v3 Authority Key Identifier:
keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:68:e4:38:ab:06:b1:d4:d9:5e:15:77:7c:3c:43:5c:ae:
f2:c4:c8:1b:02:91:25:ab:a7:1d:6f:66:a3:3b:ec:03:ff:2e:
9e:12:9d:cc:b8:ca:86:47:18:f8:9d:02:81:2f:b3:5a:b7:0e:
93:0f:55:b5:54:7a:4d:70:09:ed:f4:bf:c7:2d:7a:1f:35:ed:
ca:6f:f7:3c:c4:5d:8b:96:14:55:25:7a:35:01:b1:cb:b4:5b:
83:be:31:da:a7:5e:77:e7:41:93:f5:d8:d1:38:0f:1c:39:41:
ee:79:f4:fb:bf:24:59:d9:c5:fe:e8:50:b7:e4:b7:6a:ac:85:
37:41:23:19:68:ab:80:68:36:bc:bb:ef:f8:61:0a:5b:0a:c2:
43:76:2b:51:7f:32:73:6a:99:c4:64:53:ee:81:95:15:8f:fc:
6d:0b:80:73:05:71:62:d2:38:d9:79:c5:54:f9:64:bd:51:95:
7e:52:e2:1f:b8:6e:d0:bb:59:5a:c4:7f:c6:c1:d5:66:e4:f5:
5d:5f:da:49:a2:7d:37:af:5e:13:a1:fb:01:92:f1:c9:f3:4a:
35:68:97:40:ea:c9:2a:90:53:c3:36:19:33:d2:62:35:90:94:
3e:22:51:9f:07:39:af:77:13:e1:7b:14:a9:12:64:84:93:09:
06:a1:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:02 2025 by rpki-client