Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: PWpnsO3KKRyR7py/FB0F06LlNQylDaI+IHVLrix2VhQ=
Subject key identifier: F4:BE:18:EC:7F:12:5E:BC:2A:62:67:5F:AC:E2:B3:B9:3A:37:8D:8F
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 344F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 344B
Signing time: Fri 31 Jan 2025 15:05:23 +0000
Manifest this update: Fri 31 Jan 2025 15:05:23 +0000
Manifest next update: Fri 07 Feb 2025 15:05:23 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: wO5bNibVinm1L4y07n1r/b5D9K1GaVQCkS5uDg7xWYc=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: wrgTGY4Zg1HcHZCDO+hkBCrj/kSRgwBrHyd97B10p9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13391 (0x344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: Jan 31 15:05:23 2025 GMT
Not After : Feb 7 15:05:23 2025 GMT
Subject: CN=679ce6b3-b60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:de:8b:47:d8:93:19:19:86:11:dd:0b:db:
df:ae:80:ac:54:4a:1c:60:8a:6d:76:52:0b:22:c0:
e4:e1:74:79:91:d0:2c:e9:a4:f6:a2:46:7c:2d:d8:
58:b4:93:c5:1c:aa:ea:70:d9:6a:a1:42:84:50:1c:
b2:48:ea:c7:8f:45:6e:e3:66:f7:7e:2c:da:6f:d9:
2d:4c:5a:0b:a4:2c:e5:06:35:c5:7f:6f:bb:02:eb:
2c:9c:03:74:c7:d2:29:05:ba:88:cc:32:49:cb:d9:
97:f1:8f:7d:1b:01:d5:31:a0:5f:79:88:ef:41:5b:
60:aa:03:fb:e9:58:40:aa:01:1e:5e:3a:5f:00:1b:
79:cf:67:89:14:3f:4c:85:7b:dc:7b:f8:39:e3:53:
e9:1c:18:38:79:46:ed:be:f6:60:b3:d6:58:65:66:
8c:fe:9a:30:64:c0:6f:46:86:ef:a2:65:af:36:74:
a2:b8:32:12:87:47:cd:e5:c1:9d:bf:77:ce:f2:7c:
24:74:de:b3:36:52:0f:01:e0:67:4e:1b:54:d1:5d:
ca:8b:0a:23:b9:ff:dd:0b:f5:66:08:5a:bf:43:fa:
a0:eb:46:cf:74:12:ab:20:d7:b4:d8:5e:93:39:3c:
a4:39:81:5a:42:9f:13:d8:d7:74:40:2b:a1:1c:ab:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:18:EC:7F:12:5E:BC:2A:62:67:5F:AC:E2:B3:B9:3A:37:8D:8F
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:03:ff:08:d2:eb:a3:64:17:09:a5:0a:ef:fe:25:77:16:13:
29:2e:d7:0c:ff:77:23:22:07:8f:2e:c1:59:c1:45:b1:7d:4c:
51:53:6a:15:62:d4:97:56:84:cf:23:5a:5e:3c:41:83:b0:dc:
20:28:bb:b3:2e:0a:ed:db:2d:cd:74:ee:a8:f7:32:f0:a9:de:
2a:14:f2:a6:2d:ee:f6:57:a4:8f:f5:ee:c5:58:39:e9:38:5a:
60:1f:ce:1d:76:cc:02:0c:01:d3:d3:46:4e:82:2c:b9:6d:38:
34:a7:0d:ff:e2:81:f5:3e:fb:f1:f3:0c:bf:66:ec:55:a9:ee:
ee:75:c2:ba:99:e9:49:e1:4e:84:7c:6f:aa:3b:01:77:c6:10:
e3:1b:28:fd:33:00:bf:49:ef:21:39:05:6d:af:6c:cc:dd:46:
5c:13:01:07:b9:2f:c6:80:3c:01:6e:d4:be:c0:ca:ac:2d:a9:
e1:f4:b4:6b:ee:52:a5:8c:3b:11:c3:18:a4:98:2e:ff:af:0a:
13:c1:0b:0d:e2:18:8b:0f:5c:b5:fa:52:af:0b:44:76:3f:4a:
62:30:d6:7e:63:bb:bc:2a:6b:1a:05:57:b1:86:28:b8:76:6b:
82:38:4b:ec:60:ee:ff:27:79:c1:2f:95:2c:e2:0a:0f:a9:5f:
29:7e:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:13 2025 by rpki-client