Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json)
Hash identifier: iduL9oL+LfZEINra1aJ4Lj87vNYuGVIX20+gFCte1P8=
Subject key identifier: 39:F6:3B:87:C4:83:37:15:17:A8:7B:BF:C8:4E:CB:A5:DE:1D:6E:DB
Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Certificate serial: 02C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
Manifest number: 02BD
Signing time: Fri 31 Jan 2025 01:33:05 +0000
Manifest this update: Fri 31 Jan 2025 01:33:04 +0000
Manifest next update: Fri 07 Feb 2025 01:33:04 +0000
Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: /pHARWXbVgezpV2AELhLF9ZC5gqF60mtSQYwZAIc+y0=)
2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: vSji2PW77227MPuRms4fNHOSHefJ2bW6akHMJ/kFIj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Validity
Not Before: Jan 31 01:33:04 2025 GMT
Not After : Feb 7 01:33:04 2025 GMT
Subject: CN=679c2851-a462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:6b:41:c6:a2:e2:33:9c:b5:38:d2:f2:41:
42:8e:13:8b:ef:80:fe:e0:46:91:9a:02:68:21:f2:
32:95:a2:5d:cf:44:a6:b1:7f:71:72:49:90:17:24:
eb:3c:00:06:a2:7d:5a:69:3b:85:8f:ef:02:bd:98:
9c:d0:b7:e8:f0:4b:86:a2:9d:32:3f:a2:1c:29:fc:
76:a8:f1:66:71:44:38:93:a2:74:b2:ab:a3:3f:ff:
8f:da:d1:43:a5:53:28:91:bf:54:1a:f6:a9:f0:a1:
a6:58:f7:ba:15:32:e4:cd:c0:77:c3:d3:25:86:b2:
45:ed:57:08:f1:cb:70:63:04:cf:16:1e:df:ef:1c:
0f:e1:2c:ec:2b:b2:33:b5:0e:97:99:32:5c:28:fc:
f3:fb:5c:2e:b6:17:db:0e:12:29:3b:6b:ee:4f:02:
82:f2:c2:f0:1c:39:b4:41:a9:07:56:84:a7:3c:23:
7f:b8:8d:c7:c6:fa:7e:45:52:dd:b8:a1:4b:7f:92:
0b:ef:ad:a9:f1:9d:97:c3:f8:e8:c5:1c:0a:df:c7:
6c:2c:19:97:de:6f:63:e1:44:62:48:83:1c:fa:d7:
ab:4e:5e:41:4e:7b:03:d0:9c:ed:0e:4a:d9:f3:6f:
20:4d:94:e2:86:ff:50:a8:22:1b:ed:7f:19:23:62:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:3B:87:C4:83:37:15:17:A8:7B:BF:C8:4E:CB:A5:DE:1D:6E:DB
X509v3 Authority Key Identifier:
keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:09:b8:10:d1:53:6d:23:07:b0:51:5c:cc:ba:0f:e4:a6:
ca:0a:fd:26:12:d7:41:a1:2f:29:2d:b9:73:94:c9:9d:f0:4d:
26:b3:08:66:4c:0b:5d:ba:d9:5a:3e:e3:e5:4a:d7:77:64:9e:
50:2a:b4:48:77:df:b2:6b:27:49:5a:87:36:a0:32:85:08:61:
6b:4f:9f:1d:2e:d5:e2:6a:4a:94:48:8d:14:8b:6e:70:f7:d2:
c7:10:40:3b:0c:06:e4:3f:09:5c:52:79:53:cc:41:17:9c:d4:
d0:eb:f3:07:23:c2:53:e3:1a:12:22:67:e2:d0:66:d5:d0:50:
8c:a8:0a:d8:d3:30:43:b3:a5:db:ca:ca:8b:66:d4:fe:ce:0f:
ae:c7:fb:1c:1f:15:86:67:78:5e:cb:2a:08:3c:42:da:5f:94:
9f:da:a0:66:66:da:47:e4:40:1f:03:2f:ab:dc:a9:e6:cc:bb:
8c:d5:13:ee:23:4a:b5:3d:ad:eb:6e:1d:57:b8:a7:48:b4:6f:
36:71:93:bd:a4:ad:69:62:59:c8:2a:4e:ef:84:fb:c4:5c:41:
00:cd:ee:e1:46:ee:79:3e:93:d7:75:1e:bb:17:6d:24:08:f1:
25:b2:f5:4d:c1:55:b4:6f:c7:3e:2a:ac:4a:72:f0:0c:fd:f6:
8b:8e:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:30:53 2025 by rpki-client