Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier: 5DovqZEDjvHpy1HzMam1RrtjxSnfjtJxHBJFTVbKvuI=
Subject key identifier: 46:4E:7B:E5:CD:A6:01:04:75:07:78:CF:29:F8:96:49:55:60:1B:73
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number: 027A
Signing time: Fri 31 Jan 2025 01:42:48 +0000
Manifest this update: Fri 31 Jan 2025 01:42:47 +0000
Manifest next update: Fri 07 Feb 2025 01:42:47 +0000
Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: dp3E5JFENJNCsogrvEBFt/yAzIjpeBqX4cHu5ZLUrTo=)
2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Validity
Not Before: Jan 31 01:42:47 2025 GMT
Not After : Feb 7 01:42:47 2025 GMT
Subject: CN=679c2a97-3cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:8f:4d:55:48:5b:64:2b:8e:3c:cd:a4:87:
6a:b2:5f:dc:56:7f:fc:14:71:9b:4d:e6:36:64:33:
68:fc:5d:22:7e:52:72:88:1a:11:dd:23:09:2c:2d:
10:e0:e8:35:f5:c4:69:bf:90:61:d9:ca:ae:9f:1e:
48:30:60:75:6b:5f:6b:6c:71:32:52:56:01:2f:e2:
5a:b6:d2:96:df:fb:c2:a7:66:58:63:a1:a6:6a:7c:
d2:1f:5b:e9:0b:84:e2:dc:b9:fe:67:e3:95:91:98:
94:9d:f3:06:b6:60:b9:f4:dc:0b:0e:f7:9e:48:67:
bb:5a:2b:c1:0f:62:6d:d0:6f:31:7f:39:db:6f:96:
de:2d:72:2f:62:41:66:5c:13:96:5f:f7:0f:2d:1e:
02:b5:af:98:20:4a:51:f6:fa:62:06:66:95:3d:cd:
31:3f:1b:17:60:bf:9d:11:11:60:c4:34:09:cd:63:
1c:ae:b7:d6:ca:db:5b:74:f3:25:52:75:47:01:53:
98:5c:4e:4a:9d:c1:93:88:e4:a7:63:6b:1d:7b:c5:
a5:0e:c7:dc:76:87:92:4c:b4:42:7a:e2:6f:a9:c5:
27:46:14:13:7d:91:ab:31:f9:ed:e3:6b:8e:cc:25:
dc:3d:c2:6c:99:f0:6e:ec:bd:7b:31:62:03:ae:b1:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:7B:E5:CD:A6:01:04:75:07:78:CF:29:F8:96:49:55:60:1B:73
X509v3 Authority Key Identifier:
keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:cd:6d:3a:f1:0d:37:ef:94:d3:63:b0:18:f8:b6:1f:11:
6d:c9:fa:5e:b3:8c:dd:96:a7:10:65:53:ea:68:33:b1:2b:27:
6c:84:98:a1:9d:1d:6c:7e:43:d3:e4:33:0b:2b:11:ce:d1:92:
cb:86:62:e5:23:fc:a6:e5:2b:7c:cb:98:63:60:46:1f:db:ce:
3d:3a:46:fd:e8:62:79:19:45:01:0e:f6:2e:8b:e3:3e:1e:da:
1f:21:10:2f:88:e7:59:9b:39:a1:a9:0f:9b:0a:95:af:14:e8:
4b:74:5a:ec:1c:58:3d:cb:88:06:3a:14:f8:73:ba:8d:5a:74:
9b:d7:26:6c:38:cc:fc:c9:f1:2f:d1:1f:12:31:84:dc:b3:71:
5a:c2:d5:e9:a7:31:f8:a1:2b:dc:0e:96:ec:91:44:9e:af:70:
14:57:87:4f:70:7a:42:d3:79:c2:22:68:11:e1:81:88:03:f5:
ff:41:6c:58:35:12:13:68:1c:fc:4f:33:32:be:5f:10:53:34:
73:ed:c9:68:f1:13:1c:e9:b9:0c:b7:29:d6:dc:0c:e2:58:c1:
dd:f6:85:cb:35:29:bf:4f:50:a2:85:46:73:35:46:52:ba:ee:
76:d3:c6:44:33:7a:50:ab:a3:b0:88:e6:2e:07:44:a7:a2:7e:
ec:d6:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:50 2025 by rpki-client