Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json)
Hash identifier: NqsIJA9s+3ZcMQY7iuMtg/vEEsFOmj28LnFAyzyv3sw=
Subject key identifier: FF:03:0D:D7:68:2E:A9:EF:7E:72:D8:4F:6A:4A:A3:32:C6:D3:F0:35
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial: 068A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
Manifest number: 0686
Signing time: Thu 30 Jan 2025 22:18:43 +0000
Manifest this update: Thu 30 Jan 2025 22:18:42 +0000
Manifest next update: Thu 06 Feb 2025 22:18:42 +0000
Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: M0Z57jtq4rtbzGxyXsJaGyBS1R3kFFYuy5tQl5S0pmc=)
2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: T2RcQUH8KtNgbj8nCU5DcM4WF5c1Qu/0XcpVPW8mvhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Validity
Not Before: Jan 30 22:18:42 2025 GMT
Not After : Feb 6 22:18:42 2025 GMT
Subject: CN=679bfac2-080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:83:29:a2:00:0c:10:00:ff:8d:54:ba:e6:
6b:80:d4:2a:de:7b:bd:94:78:91:fd:81:e3:d1:9b:
de:8e:b8:46:91:f4:af:1b:a0:5b:6d:34:f1:0c:bf:
a2:34:8f:71:42:90:b0:6c:c5:a8:3b:7f:89:34:d2:
9d:65:d8:6b:80:63:94:90:4f:3e:91:7d:40:80:72:
9f:04:1f:0e:5b:bf:8c:dd:36:16:d0:28:43:fc:dc:
44:24:50:05:1e:8d:84:7a:72:a9:f9:e5:b4:4d:a0:
de:09:2d:11:64:a0:fa:bf:47:8b:35:1c:29:19:55:
3f:d1:c9:fa:76:5d:7a:0f:d7:60:7b:77:32:48:91:
0c:83:63:c4:35:e7:58:e6:07:08:30:80:9e:a5:a5:
c0:80:98:ce:e8:e3:d0:9e:e4:f6:60:83:01:e0:10:
e4:e4:51:9d:f9:24:34:3b:db:46:a2:68:33:1f:31:
2f:64:42:c3:f3:d0:05:2f:fa:8f:4c:46:67:61:09:
15:5f:60:37:8e:01:df:06:30:64:35:f6:10:ab:72:
9c:61:ba:ae:bd:dd:4b:43:b0:43:42:b7:9f:b7:6e:
21:15:ff:a6:fc:9f:2f:45:bd:e8:3b:62:8c:d7:7d:
f0:8f:8f:1b:23:b0:8c:02:d1:61:74:b7:0f:10:f4:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:0D:D7:68:2E:A9:EF:7E:72:D8:4F:6A:4A:A3:32:C6:D3:F0:35
X509v3 Authority Key Identifier:
keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:f9:07:f9:3b:b0:33:67:6e:b4:81:11:a5:77:b3:da:e7:32:
2f:e4:af:17:27:22:23:b9:55:6c:6b:9a:9f:25:d2:c1:d8:32:
cb:ee:79:3b:59:c4:23:07:b2:77:01:1b:55:70:83:96:07:3d:
12:a1:ae:e3:5d:ce:60:26:76:07:6d:e1:70:aa:58:85:c6:ff:
b3:ce:c6:b1:45:b5:dc:e4:ab:f1:02:99:2d:68:9f:e0:97:6e:
04:7d:f3:f6:4b:12:81:1b:ff:0d:a4:ca:d7:f3:a1:e3:9d:1f:
38:ed:3e:ff:d8:96:c4:02:cc:fb:02:47:5d:29:d1:05:6e:62:
4a:23:b2:1f:9d:a5:dc:55:92:43:eb:02:df:15:35:bc:ce:93:
5f:cd:21:aa:36:7c:38:0a:81:88:9f:e3:4b:3e:48:4d:8c:ea:
26:cf:3f:90:6d:ec:08:2e:4a:6f:b8:1f:20:49:96:48:42:eb:
c4:85:1b:5f:21:62:4f:f7:4a:9e:e9:54:6f:18:d0:8a:5a:c7:
42:e2:bf:dd:0f:0a:18:f1:c1:b3:06:65:93:e0:23:b8:3b:db:
38:2f:28:4b:2a:3e:19:bc:e4:ca:08:04:ad:34:19:cc:58:ff:
00:b3:18:30:fd:a5:b2:8a:ce:f6:47:b2:ff:c4:18:d4:0d:bb:
06:62:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:34 2025 by rpki-client