Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier: VWChsG95W9r4WPOW/63BrH97iGUv5rtkPh88lzJs20A=
Subject key identifier: 1D:15:96:FC:AC:75:DE:12:85:1E:72:94:8B:9E:DE:C1:E1:D3:E3:37
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer: /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial: 0789
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number: 0782
Signing time: Thu 30 Jan 2025 21:17:22 +0000
Manifest this update: Thu 30 Jan 2025 21:17:21 +0000
Manifest next update: Thu 06 Feb 2025 21:17:21 +0000
Files and hashes: 1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: GPc6lvnScRWkcxO/b0dV8pWVZiAdbKIeoWNXt+uZaqk=)
2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: fZBIeDUKsdRpTczFyA/tRXZpgobXbgClU9BqXFuQJMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Validity
Not Before: Jan 30 21:17:21 2025 GMT
Not After : Feb 6 21:17:21 2025 GMT
Subject: CN=679bec62-f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:e4:45:d0:9c:9f:a8:b1:ce:6d:7b:e8:23:
a8:02:64:80:7b:53:bb:63:dc:bb:d7:e5:b4:ea:13:
98:55:09:52:78:46:c8:e8:76:40:4b:30:90:97:fa:
7b:03:b2:aa:81:af:8c:e2:13:a5:d1:75:d9:e6:70:
37:8e:5e:3b:aa:ee:79:bc:cb:95:fa:98:81:f8:ac:
ee:be:8c:b8:1b:ed:51:4d:72:ed:17:4a:90:de:84:
f2:df:f1:9c:b1:f4:b2:7e:3f:e7:5f:a5:a5:19:9c:
96:66:10:0b:72:54:56:19:bb:9e:49:ea:bd:5d:66:
a4:d0:ff:fb:1b:f9:66:98:52:64:c5:c3:1b:6f:be:
b7:8f:5a:01:89:9a:53:67:96:ee:25:65:b4:ac:6a:
e8:f1:b2:60:29:ba:85:60:47:92:04:e5:86:f8:a8:
91:cb:e9:7c:f0:1a:2d:4f:49:e3:fd:d4:07:f6:f2:
c1:7e:7d:c0:4b:db:c5:e2:bf:14:37:e7:0e:53:de:
18:96:a0:84:a1:ea:9f:43:52:9e:0b:15:2e:96:be:
97:54:d3:68:a8:2d:75:00:51:4d:c7:93:71:3d:b2:
7c:f4:02:f8:db:08:2d:08:8b:f6:bb:cc:cd:e7:29:
3e:1c:01:34:52:2c:a9:4a:19:26:44:c1:93:99:90:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:15:96:FC:AC:75:DE:12:85:1E:72:94:8B:9E:DE:C1:E1:D3:E3:37
X509v3 Authority Key Identifier:
keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:06:47:d2:6f:a8:b7:95:7a:2d:9b:9d:e8:58:0f:6e:4a:
a4:1c:12:4e:43:68:b3:e7:04:44:2e:72:79:0c:bf:f3:f3:c3:
5a:86:9a:9d:80:ba:3e:57:f4:52:78:4d:95:a4:92:ec:46:09:
1e:69:d8:5d:c1:fb:50:ed:a9:fc:9e:d5:0d:70:be:10:8d:f9:
75:8e:be:95:b2:f9:f1:0c:80:2a:c8:bc:e8:63:3a:d9:7c:bd:
e8:4c:17:b0:90:a1:17:f4:a9:1d:2d:5f:bc:a8:6b:d3:66:11:
ab:5f:c7:89:46:76:d5:38:e8:0b:a7:13:59:3f:8f:e0:9b:97:
88:93:3e:75:af:98:52:77:41:83:e3:60:f7:c8:29:bb:5b:e8:
78:cc:9d:0c:7c:e7:16:fd:9e:18:7b:79:c6:8b:8c:89:35:b7:
98:45:42:14:4f:a4:da:28:b3:c4:c6:2b:59:1a:49:bb:7c:eb:
3b:5e:8c:da:a3:69:31:d2:cf:44:fb:30:23:fa:9e:e6:22:56:
11:60:76:0b:f4:01:45:84:7e:82:6b:28:85:aa:6d:1d:8f:fb:
14:a3:43:07:ab:7b:19:16:f5:78:43:c3:1e:c3:e5:84:76:38:
ac:65:db:a0:e9:c7:17:af:96:f9:66:6e:ce:40:cc:a3:90:0c:
84:76:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:14 2025 by rpki-client