Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
File: QidVkJNLMeOdgd28nAmFa39OWIQ.mft (raw, json)
Hash identifier: ZWnBrnKw6jwf6Ub39JlMOAzA8jhnAwFz2tWqQ5OAM/k=
Subject key identifier: A4:A7:0C:54:8E:01:CD:7A:C5:38:5B:66:E1:28:53:77:64:62:44:C9
Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Certificate issuer: /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
Manifest number: 01B0
Signing time: Fri 31 Jan 2025 02:23:39 +0000
Manifest this update: Fri 31 Jan 2025 02:23:39 +0000
Manifest next update: Fri 07 Feb 2025 02:23:39 +0000
Files and hashes: 1: QidVkJNLMeOdgd28nAmFa39OWIQ.crl (hash: Lw1/rvBzImUCHjfjk1HxeMmRivcIYtt0mKoRFeYcRMU=)
2: 754A1888490D11ED95C7C86EC4F9AE02.roa (hash: CSIt/M+JZX1zt8oTEtouM1TXpeh5gYbtlEsnigR0HLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Validity
Not Before: Jan 31 02:23:39 2025 GMT
Not After : Feb 7 02:23:39 2025 GMT
Subject: CN=679c342b-aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:26:df:41:64:90:bf:cc:dc:98:3e:10:4f:
df:e6:53:18:5f:52:be:d4:f0:e1:8e:8a:ea:c6:b1:
4e:91:0d:cc:a8:9b:64:d1:f8:cb:39:1c:ac:e3:6b:
d2:02:ce:ce:92:8a:76:29:dc:88:34:88:a4:c1:ff:
35:db:6b:43:3b:b3:ff:31:f5:3c:97:cb:2c:07:a5:
ca:d5:db:d0:ca:04:8d:e0:22:bd:97:cc:32:08:ef:
39:e7:c6:bd:9f:4d:43:d1:bf:e2:e0:3c:da:9d:69:
94:1f:d0:04:f5:4c:44:cf:a2:d3:dd:54:63:f2:41:
d1:3c:f0:5f:e7:6f:f7:5b:a4:f9:13:93:7f:bf:7c:
b8:37:a1:59:32:89:29:4a:c8:a6:b2:23:e6:b6:d4:
e4:96:61:46:c6:2f:f1:df:25:64:d0:6e:ca:dc:24:
56:a5:93:1d:7e:71:8b:20:03:51:09:2d:dd:88:ac:
a6:c3:56:38:7c:f0:c4:fe:7f:00:25:37:90:35:d5:
e0:82:1a:c7:0a:60:78:88:93:d6:e6:b5:27:10:2d:
16:77:d6:cd:6b:4b:24:c4:2e:d1:1c:c0:9a:53:66:
e4:eb:e8:63:13:51:4e:d7:63:5c:db:3b:81:a5:cb:
43:37:8b:8d:f3:c6:ba:66:10:e7:fa:0f:07:72:d5:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:0C:54:8E:01:CD:7A:C5:38:5B:66:E1:28:53:77:64:62:44:C9
X509v3 Authority Key Identifier:
keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:3b:34:c5:6b:66:74:74:79:56:bb:ee:b9:ab:ae:dd:09:a3:
e3:92:0c:44:a1:e2:21:46:da:07:f7:ac:50:74:ab:a3:59:7e:
aa:e2:a8:79:70:69:41:20:ff:9f:69:42:13:cd:3e:b7:aa:50:
af:2c:87:a2:7c:b0:e3:ba:f9:57:18:9f:00:03:25:99:d7:c7:
8a:04:4f:d9:43:39:d9:0c:8d:44:d4:89:53:44:23:9d:d2:1a:
5f:44:d0:ba:68:99:5d:a1:36:e0:59:25:a2:3b:db:25:25:f8:
47:32:e1:f1:8a:c9:37:28:65:04:f0:a4:c0:35:db:d0:0f:32:
86:5b:0e:fd:88:00:78:3c:db:6c:13:10:17:dc:1c:71:a7:26:
2d:5c:f9:2c:a6:cc:b6:aa:e5:d2:7b:2d:cf:a5:af:b6:c4:9c:
70:a1:81:e2:a8:78:d2:c1:93:5a:d7:96:03:0f:14:2a:e0:fb:
1f:2b:30:49:6a:29:78:57:25:62:07:70:da:58:1c:4e:67:ef:
78:31:9b:c9:7f:a6:ca:26:bd:71:ab:3e:2b:19:eb:11:ce:53:
88:bf:b2:11:60:44:fe:d3:3f:57:bd:f2:49:a4:66:c2:2b:a6:
68:17:6a:74:53:26:1d:ac:7c:66:d1:99:0f:0e:4c:d5:b3:03:
97:d9:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:01 2025 by rpki-client