Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier: c42zwpWV+0hHMHSWuDhGbOAL00BPY1MK7n0q60trKho=
Subject key identifier: 28:36:11:19:E9:9C:6F:29:59:C6:55:CB:43:1B:31:BF:D6:09:95:0C
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial: 0A19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number: 0A12
Signing time: Thu 30 Jan 2025 19:55:08 +0000
Manifest this update: Thu 30 Jan 2025 19:55:07 +0000
Manifest next update: Thu 06 Feb 2025 19:55:07 +0000
Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: Xre/d70PNDSAlv4bpRF83rraTmQor3YIFj1G1NAk2J4=)
2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: 4mBRRFSurq9u1qc6yu0dB3QyOtQ0PVX6IwMZPoAkvaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Validity
Not Before: Jan 30 19:55:07 2025 GMT
Not After : Feb 6 19:55:07 2025 GMT
Subject: CN=679bd91c-b84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:24:35:c8:a2:9d:d6:c4:a8:61:db:9e:cb:
64:a0:f2:36:8f:61:f3:c4:d8:22:b9:e4:76:f3:87:
37:51:36:d5:f2:e8:93:43:20:c3:a8:4c:83:b6:21:
d3:04:1a:c9:81:4c:38:5c:57:64:5a:6a:be:a9:2f:
64:04:3f:46:de:89:57:ae:a0:50:46:a0:fa:4a:4c:
65:5e:40:f2:4d:72:2a:c6:a5:9c:ce:d3:aa:d9:d2:
1c:5f:fa:59:9e:c4:32:75:4f:21:3f:c7:82:51:0c:
6c:7e:e4:1c:a8:03:5c:2e:62:6b:46:19:f5:80:84:
82:a4:19:f9:28:c0:3d:30:58:e1:f5:5a:78:2d:11:
8b:db:e3:3c:a0:fa:d6:e2:71:34:03:9b:af:fb:1b:
75:82:55:ad:e3:67:0a:94:64:64:66:50:8c:95:3c:
af:6d:5e:d0:92:c8:4f:1d:12:2e:60:4c:66:05:e3:
8a:1a:d2:a6:6d:8a:d9:fa:f3:63:eb:4a:93:dc:5c:
f9:d5:e7:0c:79:f4:db:c2:9b:de:69:e0:0e:0b:cb:
69:f3:47:f4:86:01:00:f4:c7:2e:18:c3:a8:53:7a:
32:42:92:9d:83:b2:81:1e:ca:3d:c5:55:80:c1:58:
d5:63:c9:f1:92:ca:5c:03:e4:a9:82:1a:c0:38:c4:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:11:19:E9:9C:6F:29:59:C6:55:CB:43:1B:31:BF:D6:09:95:0C
X509v3 Authority Key Identifier:
keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e9:92:6d:3b:d6:f0:a0:17:61:e5:c6:62:43:68:3d:2f:50:
d3:d4:7f:89:64:46:b3:66:fa:8a:5b:75:5e:7b:8b:0f:d6:81:
f2:c9:95:23:b2:df:bb:81:4f:3c:53:70:2e:c3:9c:a8:a1:8e:
3e:96:cd:ba:fb:99:b6:c0:3d:21:0e:c7:d8:6b:cf:12:d8:b4:
cd:74:63:86:36:0b:a4:8d:71:7d:db:71:f6:45:a0:db:fc:c0:
9d:39:34:19:03:ff:bc:55:ad:e6:1f:b0:d4:53:80:4a:27:5c:
0d:f7:36:c9:55:5f:45:9e:31:10:77:43:c2:f9:ea:d3:d9:0d:
8a:bf:7b:37:97:d1:d4:19:06:cb:aa:8b:86:7d:e5:b8:27:d1:
d5:0f:f7:3d:ca:fc:8b:34:6b:59:8b:21:74:8a:46:67:2f:7e:
dc:d8:98:71:b8:6e:9b:bf:f0:b0:f5:4d:66:bb:ca:1a:1f:38:
11:7b:f1:51:26:0a:79:2b:b8:37:77:1c:f0:c1:e3:94:1f:1d:
87:8c:19:ad:b5:80:fc:60:f1:23:cf:71:22:fd:a6:b6:50:fe:
e5:ff:60:05:5b:83:69:44:7d:ca:37:4c:43:9d:5a:9d:83:fd:
d9:a5:73:d0:f5:56:aa:92:77:cf:c4:22:6b:aa:1f:c1:e6:c8:
9c:f5:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:40:22 2025 by rpki-client