Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier: OCvMNJtmeiqeyZ3jNH+eUccHTGefA0T7IVMLRE6GjEc=
Subject key identifier: 50:B3:D7:8A:75:24:1D:B7:F7:88:48:59:96:B5:A3:1F:9B:1E:B5:FE
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number: F4
Signing time: Fri 31 Jan 2025 04:25:51 +0000
Manifest this update: Fri 31 Jan 2025 04:25:50 +0000
Manifest next update: Fri 07 Feb 2025 04:25:50 +0000
Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: //0pwTnn+erYiV6TjaQc7my4Gtyc4i5WPw7uPNdr8tU=)
2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Validity
Not Before: Jan 31 04:25:50 2025 GMT
Not After : Feb 7 04:25:50 2025 GMT
Subject: CN=679c50cf-9856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:08:74:28:3d:ea:b7:b4:7b:f8:69:1e:4c:
c0:0d:11:cd:17:91:57:44:22:72:f3:df:f2:be:2a:
55:fb:c0:b4:ee:27:a4:9c:20:f7:8a:1f:00:ca:d3:
57:4a:66:97:e3:be:9c:40:ce:ca:7d:9f:45:6a:62:
0c:e9:3a:b3:fc:c6:18:4e:e6:e0:e2:69:9b:6b:cf:
c9:1c:30:c2:b4:d4:c9:ec:bb:78:68:69:19:51:25:
a3:11:39:33:9d:2e:86:7a:b8:cb:7f:4b:fb:be:ed:
89:9c:af:4d:b6:1e:7a:ea:d5:3d:5e:c7:e2:fa:18:
d8:97:a7:ae:a7:ab:70:9f:55:22:26:f7:32:cb:f2:
c9:11:12:1b:69:f1:7a:c5:8a:f5:f8:7c:09:40:5f:
de:ff:9f:05:96:d7:ba:3f:cc:79:ff:91:07:6d:d2:
28:5f:e2:36:9c:6e:cb:31:96:3d:da:38:b9:cf:b6:
5d:bb:a1:2f:2a:f6:3d:3a:2a:57:77:22:b0:55:cb:
b3:94:89:0d:29:d4:04:00:9e:44:01:04:ac:6f:cd:
c4:89:c7:2d:af:87:61:68:3c:4b:28:23:91:7a:d1:
25:f1:72:40:dd:f0:a0:26:ad:7c:23:30:2b:3a:15:
5a:cb:26:24:09:c3:30:76:9d:86:92:f5:dd:a2:29:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B3:D7:8A:75:24:1D:B7:F7:88:48:59:96:B5:A3:1F:9B:1E:B5:FE
X509v3 Authority Key Identifier:
keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ce:e1:8d:36:03:c3:2f:54:8b:17:31:a6:cf:51:f1:b5:cf:
f6:3b:46:4b:86:35:e0:f1:b5:dc:56:c8:22:07:a2:a8:23:e8:
90:fb:b7:a2:24:dd:9e:1b:07:d6:d2:8d:8f:24:d8:f5:b5:50:
d4:1a:11:61:d6:0c:4a:d6:52:ad:7f:2d:f6:c2:ec:14:0c:c2:
10:cc:3d:3b:1e:e1:e0:28:2b:51:ea:d4:db:0d:e6:41:9f:8b:
16:5a:5a:18:b1:7d:46:91:2c:70:a0:62:c6:4f:cb:27:48:f1:
22:05:12:48:0b:2a:a3:51:67:54:a8:11:22:43:fa:e9:06:53:
b7:18:44:0b:c2:ec:28:78:a3:3c:27:24:62:0f:0d:fb:18:6b:
35:9b:7f:26:0e:14:de:5c:2c:68:cd:5c:75:a8:c9:f9:dd:77:
a4:07:af:41:3b:48:ac:46:93:a0:99:df:82:89:5f:d3:d3:ab:
57:80:66:e3:81:87:e0:2a:ef:c7:85:31:fa:58:b2:3a:d1:c2:
bd:fd:b6:3f:97:79:f6:4d:cc:ff:8a:ff:f1:0c:2f:80:d0:82:
2a:bf:a3:bd:e7:36:af:6b:44:ef:0a:18:e5:78:c6:21:c3:bd:
79:68:6e:39:d5:b2:63:91:20:45:bd:05:b4:dd:a3:d8:9b:d9:
df:62:e5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:04 2025 by rpki-client