Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier: Gc4TrFWsBDCabWfCuBEdWQ+ijhnemnlrZL1f5vGWmM4=
Subject key identifier: 26:BD:3F:FA:54:7A:6F:28:49:89:BC:AC:0E:75:65:71:4C:79:F0:EA
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 0407
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number: 0404
Signing time: Fri 31 Jan 2025 00:31:09 +0000
Manifest this update: Fri 31 Jan 2025 00:31:08 +0000
Manifest next update: Fri 07 Feb 2025 00:31:08 +0000
Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: /psiBcTMaIeIeq1YwtjG/2yszYuZPgKOlzxPYGUH1JY=)
2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: R0Eg5VTlGn4g/E+8sB7ehm+T8ICQ6nRwL2adzlDHX6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Jan 31 00:31:08 2025 GMT
Not After : Feb 7 00:31:08 2025 GMT
Subject: CN=679c19cd-5ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:02:e8:19:af:da:5a:55:a5:d4:98:0a:4f:
57:dc:61:15:41:d7:20:b4:3b:82:12:ee:5b:45:4f:
64:28:b9:c2:32:66:aa:23:0f:72:af:1d:aa:1a:54:
d7:a7:3e:6b:83:cc:c3:da:42:4a:64:d6:e2:2a:c9:
04:e6:7e:ec:a5:52:4b:d6:dd:55:5d:aa:e0:43:f5:
89:c4:50:68:37:69:cc:66:a9:52:4a:9d:18:3d:fa:
19:e6:0c:18:13:0a:bc:57:ed:af:48:02:d4:9b:ae:
15:3b:e6:f3:70:af:c1:8e:31:b9:61:9d:fc:86:36:
6d:5f:e9:02:18:d3:3b:1b:3d:e2:31:61:19:11:18:
2f:0b:70:ff:c2:36:d2:28:a3:a0:b0:52:5f:ef:30:
7a:b5:00:24:3d:f9:88:99:e2:62:e1:7b:9a:f4:08:
62:b2:37:ea:41:fb:74:30:01:a1:b4:a8:fe:dd:97:
36:05:86:9e:3c:81:53:3c:b6:44:c7:5c:43:ad:a1:
4c:08:a3:c5:bb:f4:ec:ea:81:e9:f7:c8:31:d9:44:
d2:fd:a2:58:c4:fc:e0:81:9b:bc:10:3e:e8:41:cf:
49:30:51:05:2c:cd:88:92:d9:51:b4:1f:e2:1c:95:
48:21:e9:23:f6:30:44:70:02:30:a4:81:bb:17:ff:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:3F:FA:54:7A:6F:28:49:89:BC:AC:0E:75:65:71:4C:79:F0:EA
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:10:cf:db:3d:a7:2d:45:6c:28:ff:d0:3d:49:b7:d2:ae:
dd:13:72:eb:af:bc:2a:62:7f:60:d7:36:52:1c:32:b9:6b:6a:
c3:49:d3:3d:a2:21:9a:ed:3c:c0:56:c1:b1:63:12:fd:26:d1:
9a:92:d0:e8:9f:3a:2b:16:e9:1d:7a:5a:9c:02:1f:38:62:d7:
4e:e8:0e:8d:a3:7a:11:2b:05:66:14:f6:5e:ea:f6:d4:7b:b4:
f0:f6:0b:95:79:0d:29:34:44:14:c2:4d:23:47:c9:5f:48:0f:
ab:d6:4e:bf:74:e8:4f:86:46:06:1a:e5:a4:d1:8a:cd:1e:fb:
19:5e:92:7c:ae:ae:a1:00:19:c9:2b:3d:8e:dd:b2:8d:2d:1b:
b9:cf:74:90:6c:24:1c:29:b4:a0:83:1f:ad:51:38:e7:86:6c:
0e:d5:a5:27:3b:a7:40:96:4a:cb:91:04:85:69:88:02:06:bc:
c7:d5:23:4c:e0:5c:2f:ed:1b:48:c1:47:4a:99:b7:76:8b:21:
d7:b0:bf:5b:bd:d8:c2:8a:a4:df:d3:e0:a3:2e:46:fb:16:33:
70:1c:1c:b1:d2:57:53:f5:25:d9:f3:da:9e:3d:d9:a3:1b:08:
a8:7e:6c:77:7f:d5:70:69:9a:7b:8d:66:25:82:3b:10:dd:a6:
22:ac:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:05 2025 by rpki-client