Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier: DFBSkUlxxSjQCW7xqUUTj8pfbPOEvqLmZgygpcU4h/I=
Subject key identifier: 59:26:A9:E0:64:47:FB:51:18:4F:4D:F3:A0:BA:D6:D1:9A:82:D7:28
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 3498
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number: 3473
Signing time: Fri 31 Jan 2025 14:47:34 +0000
Manifest this update: Fri 31 Jan 2025 14:47:34 +0000
Manifest next update: Fri 07 Feb 2025 14:47:34 +0000
Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 4trKc3N8qIM38UvE84EzUiPPZbq/tI05yYd1C003hhQ=)
2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=)
3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=)
4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13464 (0x3498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Jan 31 14:47:34 2025 GMT
Not After : Feb 7 14:47:34 2025 GMT
Subject: CN=679ce286-7b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:52:37:05:10:1b:89:46:d7:d0:e5:d8:27:
70:ec:8a:68:76:09:d9:51:de:40:e7:ac:3f:ec:34:
f8:36:ff:ca:d7:54:34:54:f6:f8:12:e9:20:22:ab:
8c:21:52:07:3f:9c:9e:32:2e:72:cf:54:eb:16:9a:
dc:f5:71:48:17:f5:aa:79:2b:05:97:59:b3:0a:13:
0a:f6:52:64:7f:45:31:a4:6c:90:e9:0f:ba:52:8e:
5c:f8:76:6b:fd:9d:27:fd:b3:f8:8d:ae:29:f7:db:
ae:d8:45:d8:f6:08:b7:08:c1:d1:f9:bc:22:aa:31:
c0:f0:c2:04:9d:4f:ce:e4:83:cd:ae:be:98:76:a8:
94:0d:d8:60:ce:33:b9:05:0a:f5:b7:f4:71:70:d1:
a0:81:c2:82:e4:98:12:be:60:28:14:a3:ea:a4:c0:
7a:44:df:73:42:8a:79:98:73:c9:58:8c:da:3d:cd:
7f:70:7e:65:87:12:9a:c1:a4:cf:40:6f:20:d2:a0:
03:f9:a8:e5:03:2b:6c:b8:71:5a:b6:63:27:ed:b8:
2b:d7:bf:27:ad:47:52:b4:97:8d:b8:26:4a:5e:50:
4c:79:cd:be:1c:60:c6:c5:0b:8f:df:c7:c9:f0:c2:
4f:20:a9:ff:48:87:36:fc:c7:e7:5a:80:b3:9c:34:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:A9:E0:64:47:FB:51:18:4F:4D:F3:A0:BA:D6:D1:9A:82:D7:28
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:ba:6e:28:46:80:11:aa:52:f9:26:6a:e1:b2:fd:2d:ac:
92:5d:13:33:bb:9e:9a:58:fa:33:fa:72:3e:b5:e6:3b:c4:b0:
19:1c:09:58:10:94:a8:4a:2e:43:2d:f3:1b:86:d1:e8:c5:b1:
af:1b:1b:7e:60:0d:90:e2:b3:c2:8f:49:ee:67:a1:6a:63:e4:
f6:63:8e:c7:7d:58:e8:f9:bc:ef:2e:3d:b7:5a:da:67:42:b2:
54:fe:d0:79:87:f7:3b:27:ae:96:85:55:be:0c:bc:76:25:90:
e9:9b:7d:e5:cb:c7:b9:96:18:4c:bb:10:53:67:2c:8a:1c:9c:
a3:b8:2b:3f:3d:3f:0b:42:7b:c9:3f:58:3a:ee:23:7d:58:8f:
f3:3e:aa:39:01:65:83:a3:ab:1a:f1:7c:9d:66:2a:f7:c0:46:
3a:cb:f9:b8:89:e6:98:4f:cc:73:8b:04:f2:52:b2:a1:22:6d:
bd:30:16:5d:5e:44:85:1a:85:23:c0:12:75:c3:3f:43:a0:b8:
69:90:30:df:cf:96:91:c4:9e:7f:8c:d8:3f:03:3c:9a:fd:66:
6e:93:f0:0a:d1:e9:9f:03:91:47:e5:e9:97:d1:21:a0:15:13:
d4:35:c4:eb:c9:8a:12:68:55:cb:05:ee:10:38:a0:1a:92:e8:
40:5a:e6:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF
MjZDNTFBNkMwHhcNMjUwMTMxMTQ0NzM0WhcNMjUwMjA3MTQ0NzM0WjAYMRYwFAYD
VQQDEw02NzljZTI4Ni03YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2KpSNwUQG4lG19Dl2Cdw7IpodgnZUd5A56w/7DT4Nv/K11Q0VPb4EukgIquM
IVIHP5yeMi5yz1TrFprc9XFIF/WqeSsFl1mzChMK9lJkf0UxpGyQ6Q+6Uo5c+HZr
/Z0n/bP4ja4p99uu2EXY9gi3CMHR+bwiqjHA8MIEnU/O5IPNrr6YdqiUDdhgzjO5
BQr1t/RxcNGggcKC5JgSvmAoFKPqpMB6RN9zQop5mHPJWIzaPc1/cH5lhxKawaTP
QG8g0qAD+ajlAytsuHFatmMn7bgr178nrUdStJeNuCZKXlBMec2+HGDGxQuP38fJ
8MJPIKn/SIc2/MfnWoCznDTSoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkmqeBk
R/tRGE9N86C61tGagtcoMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE
OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0
bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAS77puKEaAEapS+SZq4bL9LaySXRMzu56aWPoz+nI+teY7xLAZHAlY
EJSoSi5DLfMbhtHoxbGvGxt+YA2Q4rPCj0nuZ6FqY+T2Y47HfVjo+bzvLj23Wtpn
QrJU/tB5h/c7J66WhVW+DLx2JZDpm33ly8e5lhhMuxBTZyyKHJyjuCs/PT8LQnvJ
P1g67iN9WI/zPqo5AWWDo6sa8XydZir3wEY6y/m4ieaYT8xziwTyUrKhIm29MBZd
XkSFGoUjwBJ1wz9DoLhpkDDfz5aRxJ5/jNg/Azya/WZuk/AK0emfA5FH5emX0SGg
FRPUNcTryYoSaFXLBe4QOKAakuhAWua2
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:06 2025 by rpki-client