Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json)
Hash identifier: nJSbUQjCjC6574LPYkTVrJ+KYsFUnncNoSiCdzPzdwk=
Subject key identifier: 8F:C9:BC:C9:E4:C8:49:43:A9:55:4A:FB:0A:5F:87:7C:3E:72:D0:4F
Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42
Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
Manifest number: 02C0
Signing time: Fri 31 Jan 2025 01:33:33 +0000
Manifest this update: Fri 31 Jan 2025 01:33:32 +0000
Manifest next update: Fri 07 Feb 2025 01:33:32 +0000
Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: rDcMOjE8XQSceD2QyuCXFYNgqfen29LK/SInbzUxc8o=)
2: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: 9rL5P9zHSC/zuIwV8jLjeMHlPXI3Jer8IGE3VjIcIMA=)
3: EC6483F2A21011ED850DD13CC4F9AE02.roa (hash: 9J81V7sPRRPbYZnOce0KioGOSMZ+23mscJn2CxGQLpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42
Validity
Not Before: Jan 31 01:33:32 2025 GMT
Not After : Feb 7 01:33:32 2025 GMT
Subject: CN=679c286d-f12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:3f:da:6b:18:e7:26:aa:ca:b9:e9:b4:c3:
25:a0:a0:0d:8e:c9:8b:3e:a1:65:5f:27:77:39:ce:
b6:9c:d0:5c:c6:c2:8a:0c:61:dd:0f:24:d3:58:9b:
b9:57:a6:9a:51:be:49:18:58:71:3a:d9:14:eb:8c:
f0:16:74:17:ba:c4:b6:ac:ce:47:b9:fa:1f:be:3a:
17:1f:25:83:3b:be:4f:3e:d3:89:7a:2d:bf:51:fd:
1d:7c:24:22:36:0b:38:83:58:d3:ab:34:fe:a0:15:
8b:e9:52:26:10:08:56:56:d4:14:50:d6:9b:10:92:
f3:72:2e:39:f8:51:c9:3e:01:b3:26:80:de:a9:6e:
e8:cc:39:35:0a:25:05:a4:94:fd:c4:d7:8b:74:5e:
77:a6:72:b2:f1:b4:4c:c6:72:7f:ae:09:d4:09:8b:
a6:b5:3e:e9:c3:34:16:70:7e:77:fb:93:02:86:ac:
dd:a1:01:48:35:59:12:26:1a:01:73:a1:fd:2f:c9:
bd:e8:42:43:d6:6d:64:e6:da:4e:9d:50:89:e3:4f:
2d:bc:93:ea:6a:71:eb:8e:58:cf:b9:d8:9e:df:b4:
eb:d4:43:1d:df:16:07:9f:d2:34:ca:07:38:47:dd:
46:20:e9:16:14:a8:94:26:db:00:c0:2a:6a:c9:30:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C9:BC:C9:E4:C8:49:43:A9:55:4A:FB:0A:5F:87:7C:3E:72:D0:4F
X509v3 Authority Key Identifier:
keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:03:31:a3:c8:0e:a7:ce:76:47:78:da:9b:f8:74:1a:f2:02:
c4:8a:9f:80:ac:94:1c:d2:fb:56:21:1a:03:e2:62:7c:57:be:
e6:62:41:ff:a4:89:a4:04:f0:d1:8d:e9:04:6d:5d:64:e0:50:
ff:e4:2e:f3:af:3b:94:79:b0:07:00:a8:dc:31:b5:1e:89:c3:
25:14:bf:75:79:35:2b:c2:87:e7:bb:8e:1a:85:83:cb:60:71:
10:19:8e:82:db:2f:80:c5:0b:11:49:9d:12:36:8f:de:9f:42:
79:cf:01:f6:01:37:bf:4c:3d:4f:c0:98:15:6e:69:3f:1b:1a:
e5:32:99:2b:f3:62:4e:23:76:01:ca:2d:76:5f:7b:57:0a:27:
ed:29:fb:02:75:a1:4a:76:fd:8b:43:bb:3e:8c:0b:03:b4:d2:
36:04:0f:84:2a:6d:24:79:a1:c2:4a:87:3c:96:16:b6:5e:57:
b6:86:48:3f:bf:66:02:40:41:25:7a:1a:80:94:e9:54:c0:7f:
6d:df:d7:7b:cd:de:16:af:44:fb:d4:b1:87:65:c7:09:96:07:
05:cb:f1:16:4e:cd:3e:ce:70:67:bd:eb:d1:85:93:ae:20:db:
7f:8e:ef:76:d5:17:bd:17:5b:21:9b:48:52:2d:4b:50:05:80:
95:f3:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:51 2025 by rpki-client