Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier: 9blYkC37hLxOr1RLf7etmfLfhS2z6GvY5XeJXHyfgZI=
Subject key identifier: C5:E5:4C:08:C6:0C:56:43:7D:14:E2:9B:45:02:1D:30:B3:35:06:B9
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial: 0485
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 00:05:00 +0000
Manifest this update: Fri 31 Jan 2025 00:04:59 +0000
Manifest next update: Fri 07 Feb 2025 00:04:59 +0000
Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: IDup1ATuskQqDogagfhMfChqSnqSwaWoXwBC2SDOObA=)
2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: vTlreixIyByEZB7kEISmHGr1RyT4p8lVkdEoUi0bgqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157 (0x485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Validity
Not Before: Jan 31 00:04:59 2025 GMT
Not After : Feb 7 00:04:59 2025 GMT
Subject: CN=679c13ac-b2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:76:38:7e:d6:8f:2f:e6:d8:63:ee:a6:99:
e5:9e:0f:4c:13:30:25:50:f8:4a:23:83:90:21:5d:
5c:31:3c:bf:d2:8c:46:51:a5:89:32:a9:ff:61:97:
07:f2:ef:4a:5c:b5:b2:8c:a6:1f:41:60:08:2d:45:
d3:bc:db:41:e6:23:3d:e2:cf:f1:9a:b5:de:b1:0f:
18:5f:17:9b:d2:3c:c2:6e:62:cd:25:73:90:6b:7e:
39:6b:2b:c0:a0:9b:04:d4:73:42:cd:71:7f:eb:86:
49:62:7b:90:c2:88:f9:c5:f5:d5:9f:95:c9:cb:69:
2b:ef:71:5d:ab:ca:42:76:11:3a:83:12:3d:63:75:
31:7f:5e:db:38:c9:02:75:45:3c:df:e2:51:e7:11:
f2:4d:93:61:d6:72:d8:bb:29:96:aa:8d:9a:87:e7:
4c:b0:68:81:8d:0b:fc:b5:fd:19:f1:ff:d6:27:aa:
cb:a1:da:0a:0c:6f:b0:cb:60:98:d9:61:ed:e9:3b:
0b:69:15:e8:d5:97:9a:7d:ea:0c:34:cc:8a:2e:98:
e0:9b:f8:ae:63:71:f8:d5:e4:c7:67:e1:ea:51:bb:
03:4c:bf:c0:c8:28:8a:5b:a3:40:f3:e4:c3:c6:c7:
60:fc:eb:48:a0:cb:1c:42:1e:66:1c:c4:94:34:23:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E5:4C:08:C6:0C:56:43:7D:14:E2:9B:45:02:1D:30:B3:35:06:B9
X509v3 Authority Key Identifier:
keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:82:81:fd:4a:b5:da:3d:46:e3:b7:eb:4a:f9:27:9f:82:9f:
f9:03:5b:d7:e9:6e:25:c7:00:82:bf:a0:36:3d:de:9f:67:74:
83:1c:bc:35:51:6f:26:5c:da:c7:38:ce:3a:d3:3e:2e:34:1d:
e1:ca:87:79:0b:04:a0:23:62:c4:37:bc:31:93:ac:0c:a1:e9:
ff:02:42:f5:73:b6:07:4b:75:35:68:7d:73:7d:65:0f:c5:6d:
a7:04:d7:2e:26:0c:a5:89:25:f4:4e:91:9d:ea:01:74:83:13:
05:43:5d:bf:5c:3b:5c:98:fe:a0:9f:c1:05:c2:9c:34:7b:70:
8c:0e:b8:0a:5a:5c:af:fa:d3:e6:4b:82:03:b2:78:c2:b5:bf:
10:62:82:15:51:2e:34:c2:3e:10:35:a0:4e:6b:02:9f:91:ed:
3a:89:ad:42:e4:07:19:d6:3a:ab:fd:18:9d:7e:7c:45:d7:78:
08:14:d0:86:9d:ff:7e:3e:70:f7:42:9c:95:ee:7f:f3:d5:a0:
e6:d6:95:22:27:f5:97:d4:32:f7:26:f2:ad:c6:8c:c4:e8:75:
29:f7:35:07:c8:be:52:7e:91:c0:cb:db:58:a4:1d:93:fa:c2:
18:c3:41:69:f2:49:ec:28:ff:6d:ad:35:b7:7c:e9:51:cf:64:
fa:58:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:40 2025 by rpki-client