Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: 2AA+hA4vOMaYPaj2OKy9H6YHfjITa5dEk3BBmZuRcEU=
Subject key identifier: 65:E5:D1:8D:93:45:8E:D2:23:24:77:B7:05:FE:84:DB:AB:1A:FB:88
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 096E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0960
Signing time: Thu 30 Jan 2025 20:17:33 +0000
Manifest this update: Thu 30 Jan 2025 20:17:33 +0000
Manifest next update: Thu 06 Feb 2025 20:17:33 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: IIJC6xl0G9g6RfzDtSPcdmAH5dCV4dMZXH/63KlzgVA=)
2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: tLBsV4g2bMzhVFiX/6V4C27n2kArFIEOkUcBuZutWVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Jan 30 20:17:33 2025 GMT
Not After : Feb 6 20:17:33 2025 GMT
Subject: CN=679bde5d-5d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:07:40:5c:62:34:0f:01:14:51:6f:09:05:
6b:23:c6:02:d4:16:f2:7a:03:4f:95:29:4d:0d:94:
ae:23:a3:3d:09:82:39:9a:ae:f0:36:d7:d4:ba:64:
98:f4:d2:4c:99:1a:48:dd:6c:4e:8d:2d:e2:89:6c:
4d:c4:c7:9f:6a:51:0a:9f:1f:9f:6b:7f:68:1e:ef:
56:e3:48:39:c4:d7:ef:73:aa:12:e7:72:82:da:65:
d4:fb:9a:c5:2c:81:93:e3:bf:0f:9b:42:4f:c7:4a:
81:d2:c9:7e:00:19:04:ee:26:95:6f:93:32:8f:ca:
43:fe:47:a2:f7:33:18:d4:df:5c:56:be:31:9f:65:
b5:65:93:c1:1a:2e:43:a1:80:22:66:e9:bf:d0:23:
c2:f3:47:cb:05:67:77:24:10:e5:12:8f:59:3a:5e:
0b:0d:42:d7:10:0a:58:d3:e4:23:10:32:6f:ad:3c:
59:e5:a5:50:71:f7:05:79:d3:62:5d:48:17:2a:aa:
74:04:8c:4a:5e:72:cd:15:fe:9a:51:da:71:07:b0:
a2:8b:24:2d:29:7c:46:8e:65:e3:b2:36:55:21:02:
f7:3e:2b:db:71:42:bc:ed:d4:be:65:83:16:85:47:
0f:10:4c:db:e6:d1:85:31:96:21:ce:67:94:30:c0:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:D1:8D:93:45:8E:D2:23:24:77:B7:05:FE:84:DB:AB:1A:FB:88
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c3:d9:ea:dd:b2:b1:66:d8:bf:99:16:43:18:06:ab:59:08:
18:73:fb:70:e1:36:4b:6c:f6:82:f7:6c:d6:a5:ca:f0:b5:a4:
b2:3a:fd:9b:80:eb:21:ed:0b:af:ab:db:b2:cc:da:08:c9:8f:
3c:32:10:e2:6f:90:16:25:c8:1e:a1:25:c5:15:19:89:d6:7b:
01:12:4e:ad:97:99:7d:ee:15:a8:cc:c1:b2:d6:6c:e9:82:98:
a9:62:be:12:e2:4c:43:79:7f:d4:49:6a:28:64:2b:a1:3d:48:
cf:a0:fc:ee:0b:e3:71:96:a2:f8:4c:31:25:f9:15:fc:26:c8:
31:e5:c0:f6:63:0f:07:bb:01:68:ac:d4:75:cf:74:d1:e4:1d:
f1:25:ba:ec:d0:5d:1b:1b:71:11:c5:cc:b9:8d:cf:04:11:47:
3a:18:eb:37:60:a9:5d:b0:89:3e:4f:18:1f:46:6d:ff:0b:26:
a9:83:d4:7a:3a:1e:e3:b8:6e:d1:58:5d:34:8f:43:44:d5:83:
85:33:70:98:3e:09:13:b7:78:78:a9:f5:04:02:ea:74:a4:7d:
6e:28:a6:6c:46:8f:0f:b5:08:3a:33:32:dd:a6:94:21:b9:8e:
b7:7b:ae:5b:46:c3:ca:ff:48:19:2a:71:79:22:37:4b:85:ff:
ac:2d:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:42 2025 by rpki-client