Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier: KBz0/QZQGjv+QVwKV8EAnlY9runC01q4bOFhuNIi8wQ=
Subject key identifier: 8F:9D:40:B3:57:BC:E2:8E:49:66:EE:BE:89:83:08:6D:CE:B7:B6:28
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial: 0353
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number: 034E
Signing time: Fri 31 Jan 2025 01:05:54 +0000
Manifest this update: Fri 31 Jan 2025 01:05:53 +0000
Manifest next update: Fri 07 Feb 2025 01:05:53 +0000
Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: QJIVkvzm7Oqe1vmYQEm1nlb6fOx7WkQPTttRUYx+u6Y=)
2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: IHCx8iKwFaHNBcD68Fjdjf74kAkM54IECqYXNmF+PP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851 (0x353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Validity
Not Before: Jan 31 01:05:53 2025 GMT
Not After : Feb 7 01:05:53 2025 GMT
Subject: CN=679c21f1-4b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:71:13:c6:9d:5b:4b:d5:06:42:6f:aa:62:
a5:45:b9:93:60:09:dc:38:b9:bf:c6:31:35:a1:6c:
0d:f0:91:2a:35:cf:c0:b4:9a:39:1c:98:89:a9:d9:
6b:93:50:99:2e:f8:59:4e:27:95:d1:7a:99:08:2a:
df:8c:dd:14:f5:81:61:f9:0c:02:85:e1:33:b4:80:
11:b7:90:b6:ca:d7:4e:ac:91:a5:57:60:c1:68:b8:
fc:47:ec:c6:fb:a5:35:22:2f:96:89:d8:d1:0e:58:
aa:8b:a4:d9:c0:7d:42:ee:34:48:12:27:75:2a:d0:
07:4f:b1:c8:27:ff:6b:fa:2f:1b:28:a3:d3:fc:4a:
b5:dc:d6:07:fe:80:4a:77:06:a3:b3:a2:68:99:b2:
70:ac:37:6c:ea:8c:0d:3d:4d:57:a4:10:69:17:6e:
de:d3:d8:13:6f:bc:d4:d3:96:48:28:75:4e:9f:65:
ef:09:aa:e1:03:fd:03:aa:ea:04:3c:40:6a:cd:89:
cf:2e:e7:0e:b9:58:b7:78:5d:55:ba:28:bc:d3:27:
4f:f6:9d:4f:68:bb:b0:b7:eb:b2:6f:1b:77:09:1e:
f8:da:8a:e6:6e:d8:a5:2d:fc:42:40:f6:95:1e:3a:
24:d6:cc:67:44:d5:be:b1:43:fe:ca:f6:d9:1b:0f:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:40:B3:57:BC:E2:8E:49:66:EE:BE:89:83:08:6D:CE:B7:B6:28
X509v3 Authority Key Identifier:
keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b7:2a:b4:0e:b4:d9:7f:42:a3:f4:7f:b3:9c:9e:bf:97:1b:
b1:3d:d0:c6:75:5c:20:fc:54:3f:1f:bb:13:37:cb:4a:10:68:
88:39:6c:3e:5f:a7:ac:e3:39:d4:1d:70:24:62:f2:32:84:be:
07:e0:d4:2a:e1:99:d7:12:b5:cb:29:b3:e4:69:52:96:c0:e0:
b8:45:b7:65:78:ba:6a:c4:f9:99:75:7f:b9:11:a3:f5:2b:32:
64:8a:b1:eb:6c:3a:0f:e1:a2:9f:50:a9:8d:ba:c7:90:c4:a0:
20:b5:31:b5:cc:ce:5e:4b:d1:71:96:06:93:1b:21:ff:05:5d:
a1:70:68:08:92:05:2a:0f:13:63:3c:eb:bf:0e:d2:da:b8:62:
24:f1:3a:28:ce:e6:53:3d:c7:33:91:47:57:69:df:df:b8:9c:
92:72:36:49:ed:33:58:92:87:ba:be:29:ea:50:b0:4b:f0:5a:
9a:c6:2b:03:df:ca:89:8a:45:4a:6f:a0:b2:e7:21:73:ce:37:
22:8d:91:b2:bf:d1:9c:6e:76:39:25:7c:a0:3f:6c:66:ca:e8:
99:1c:76:0b:d8:b8:ed:b7:f9:fc:07:c8:6c:9f:ae:7d:ba:44:
6e:c1:36:15:8e:cd:da:74:0a:22:c0:1e:2c:5b:42:1f:1a:ce:
db:9d:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:55 2025 by rpki-client