Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier: IiDQarWRDDCOzp94346joqat5tw4kBerneEcxn8n+8g=
Subject key identifier: EA:71:0F:68:01:80:D4:D6:EF:8E:56:0C:D5:8F:6D:18:CD:D0:C4:49
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number: 06C5
Signing time: Thu 30 Jan 2025 22:04:51 +0000
Manifest this update: Thu 30 Jan 2025 22:04:51 +0000
Manifest next update: Thu 06 Feb 2025 22:04:51 +0000
Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: dYmIZ7LiCKWuM/iIOD/Ezit0ozW4TWTRUtwl1jhlRFI=)
2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Validity
Not Before: Jan 30 22:04:51 2025 GMT
Not After : Feb 6 22:04:51 2025 GMT
Subject: CN=679bf783-2b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:dc:89:30:dc:77:bf:fa:9d:6f:86:3a:dc:
c9:fc:ad:be:9b:ef:4c:e4:81:c9:33:cf:99:bc:8f:
54:b0:d3:7b:1d:98:47:f9:14:10:6a:33:25:19:9a:
d2:67:d9:d2:f0:56:43:8d:4c:7e:a3:38:df:f2:79:
f9:41:7c:2e:da:0a:fd:d7:d4:04:82:85:40:ab:5c:
d0:93:f4:61:cd:be:81:db:5e:5a:58:fc:f9:97:37:
3e:3d:fd:a2:09:eb:68:f2:5d:85:ab:bf:e7:0e:e8:
ea:f5:bd:be:55:3a:cd:03:af:66:85:0a:4c:be:5d:
9e:be:24:96:a2:05:c0:9e:cc:f1:af:c7:4c:40:d6:
02:24:8c:e7:55:8e:26:7f:16:4b:32:de:bc:27:c3:
ab:09:ba:b7:0c:2c:e3:19:99:99:e4:16:11:67:e2:
c0:4b:b0:3e:9b:2c:83:ef:59:41:f0:3f:23:bd:c7:
bc:54:ca:3d:f8:f0:b3:de:d5:14:8c:85:ae:2f:db:
5d:21:20:1b:6a:0c:91:c9:75:5d:8e:7a:4e:0c:90:
bc:c2:9b:4c:2b:d7:23:49:0f:cf:ef:88:5d:3f:ba:
c2:2f:e7:03:1a:b0:ce:45:73:3f:5d:0d:c0:00:18:
81:e9:2e:1e:4b:a8:6f:86:1e:a1:3d:dd:5d:c8:d2:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:0F:68:01:80:D4:D6:EF:8E:56:0C:D5:8F:6D:18:CD:D0:C4:49
X509v3 Authority Key Identifier:
keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:88:e8:1c:9f:8a:95:ee:6c:f9:d9:c0:f5:1d:31:19:f3:05:
55:da:d0:0d:55:a9:8a:34:95:29:ff:40:b9:e1:e1:4d:46:71:
c6:83:ae:82:da:07:e3:b3:83:73:d4:42:ab:38:e3:56:be:d5:
3c:9a:6d:d6:43:61:59:4e:da:36:4f:7f:ff:9f:d8:d9:86:23:
fa:d9:7c:aa:2c:e7:b7:fd:42:47:e7:2a:fb:8a:a2:b0:b0:6f:
47:d7:5e:42:12:e0:07:1b:3b:19:ea:26:3f:ab:d6:c6:4a:3a:
86:6d:cd:1d:0f:ac:29:46:18:f4:3c:93:2d:d5:ca:3c:22:59:
68:a8:95:19:a6:50:6c:66:cb:4d:84:82:4a:c1:2f:5f:57:23:
9c:87:d6:f1:e1:29:17:f8:3e:b3:51:86:5b:9b:24:17:37:9d:
3b:61:a9:df:96:0a:cd:38:03:b9:09:35:a5:8f:cd:5a:3e:b3:
21:ae:57:71:ef:e0:5a:25:b4:82:26:c7:00:a5:c8:f8:e6:a0:
f8:0c:d6:e9:99:11:9b:b6:dc:b2:84:ed:3c:70:35:35:5f:f0:
1c:8d:6b:a3:64:31:b8:1a:e3:08:7d:1a:02:90:e5:5c:f7:4a:
83:ef:50:79:32:5c:74:7c:19:3c:c7:5a:96:78:e1:e8:65:b3:
c9:f1:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:20 2025 by rpki-client