Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier: sSh+zd3YfH3h/usGI6TYoi4I+hIPCKSIEVEY+BsZJ8g=
Subject key identifier: 98:DD:12:A7:3D:0A:AC:4A:CB:CC:A7:3E:5B:5D:BA:F6:BF:B1:F0:2C
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial: 1D8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number: 1D85
Signing time: Fri 31 Jan 2025 16:07:51 +0000
Manifest this update: Fri 31 Jan 2025 16:07:51 +0000
Manifest next update: Fri 07 Feb 2025 16:07:51 +0000
Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: zLSUVej3++74fH/UNXiC9X2Inv4jpstHzmfKwzm1xo4=)
2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7566 (0x1d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Validity
Not Before: Jan 31 16:07:51 2025 GMT
Not After : Feb 7 16:07:51 2025 GMT
Subject: CN=679cf557-ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:7c:31:c9:40:d4:20:85:bf:d8:35:d4:c5:
24:95:f9:97:d4:8c:02:37:a7:8f:e5:05:65:44:2b:
e5:f8:a6:57:b5:a3:2e:ae:8d:ab:95:3e:e9:21:00:
10:ce:69:af:16:e3:a4:b3:77:62:e4:4a:0c:5a:67:
3e:0d:14:a1:68:35:b2:82:9e:29:03:4b:78:14:06:
8d:a9:e0:14:5a:93:72:0b:c2:6c:ec:39:d4:78:10:
55:5b:9a:49:bf:ee:43:44:41:4a:c1:08:19:92:8c:
3f:ad:d3:ae:e7:68:53:37:8e:60:41:cc:3e:7a:0d:
49:9b:a0:a7:5c:2a:2f:43:96:84:b3:6d:8f:8d:26:
f8:ca:45:6e:62:54:eb:93:ea:22:f3:4a:44:38:0a:
b9:6f:57:f3:a9:70:18:ee:0d:62:00:55:2c:53:06:
21:67:11:f8:07:81:8f:60:12:06:37:f7:9f:54:b1:
fe:e7:64:21:9d:82:bd:5b:9b:b7:05:4f:a7:9d:f5:
5e:cc:ac:6a:d8:dc:fa:70:33:33:5c:21:14:c2:b0:
91:ab:2e:b9:f2:c5:9f:a1:5a:2f:64:ac:63:3f:b1:
7d:79:3b:41:cb:50:ee:e6:e0:97:6d:0a:0b:3e:c3:
f7:d9:ca:ef:b3:69:8e:1a:0b:af:b1:28:db:62:12:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:12:A7:3D:0A:AC:4A:CB:CC:A7:3E:5B:5D:BA:F6:BF:B1:F0:2C
X509v3 Authority Key Identifier:
keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:10:7c:8d:64:78:95:18:f4:a8:f0:ca:91:02:c9:45:e2:
b2:ee:b3:b3:f8:11:5d:8f:f3:b6:37:22:c7:34:b1:88:0a:a9:
d3:84:89:fd:61:b4:06:6b:03:6b:86:fb:ed:b7:e2:6c:ac:31:
0f:23:6b:f4:7a:9e:9f:1a:71:78:72:47:97:29:9d:f5:62:78:
2b:bc:8a:13:b4:80:a1:97:59:1c:2a:db:3d:25:89:7d:6b:76:
c0:1c:8a:10:4e:8b:c8:ff:57:c3:ac:fe:d0:43:14:8c:82:d6:
c9:6a:89:0c:40:9f:0a:fd:01:4c:c3:ac:60:33:ac:89:db:01:
ce:fb:ed:fe:8b:ba:a4:c2:71:04:f0:8a:6a:65:e1:e6:3c:d9:
9c:ee:8c:47:c0:a0:61:60:22:44:18:9f:39:fe:8c:c4:fc:03:
ca:f4:5c:ad:5e:9f:00:14:d7:29:5b:2c:dc:57:52:f6:7c:f6:
19:c5:98:db:45:4f:ef:91:da:09:b5:3b:8d:9c:91:70:90:15:
85:8e:af:4e:7d:f4:0a:98:3f:48:d2:4a:8f:78:1f:34:64:f3:
64:cb:ff:98:02:10:4c:5c:53:12:12:e5:af:78:06:1d:6b:18:
d3:ef:00:99:9a:d8:b5:2a:30:64:64:ad:12:33:44:36:5e:a6:
43:12:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:53 2025 by rpki-client