Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier: RGbWeisPD8Yh6OG1+3GVv3rz+izii4qSlqsFl9XTrx0=
Subject key identifier: 73:1C:6E:C7:BD:21:8B:D4:E8:8D:A4:05:95:AB:59:97:D8:40:2C:6C
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0A42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number: 0A29
Signing time: Thu 30 Jan 2025 19:54:35 +0000
Manifest this update: Thu 30 Jan 2025 19:54:35 +0000
Manifest next update: Thu 06 Feb 2025 19:54:35 +0000
Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: ynBG7sz/pYFD/d7aqwMRahKM01clfswqSFRVtMAEWOo=)
2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: 7eyQ3NplMfQ7NeH3lqRBvpOppo5UvSFwpAIlHW8sg/M=)
3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: FyzTLc6q4QxjkF8ADy/p1n3nRtCccHutyKoH8IBWzj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Jan 30 19:54:35 2025 GMT
Not After : Feb 6 19:54:35 2025 GMT
Subject: CN=679bd8fb-8d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:17:d5:da:1a:c0:36:5b:69:af:fa:cc:7d:
ef:d1:38:ed:6f:0c:5c:27:5c:b0:3c:90:0d:09:86:
0d:3a:44:37:e4:fd:07:f3:78:84:d0:b8:6d:54:f1:
7b:43:5f:89:79:d3:c6:37:94:c9:28:6c:74:3e:c4:
71:c7:11:76:10:fa:c3:64:9f:77:3d:c4:4c:35:70:
82:6f:1d:01:82:53:d9:ca:d4:13:ab:17:77:76:b8:
a1:54:30:b9:d3:28:17:e0:d0:0d:2d:d2:80:e8:a4:
8a:fa:29:f7:23:81:9f:c4:c9:26:3f:2b:83:23:8f:
57:fa:41:de:9d:d6:aa:75:bc:b7:e9:db:24:4f:68:
27:ad:01:e5:ca:50:77:18:9f:a1:d5:34:a8:8a:58:
6a:e8:94:4b:1d:ac:5b:85:db:21:39:b9:a4:0e:44:
83:23:f2:b4:7f:13:b7:2a:58:dc:2e:33:1f:12:58:
c0:78:b0:5d:d0:a1:20:f7:fc:a4:89:e0:a8:41:56:
b1:f8:7b:3f:39:a6:7a:5c:91:4d:4a:51:c8:f4:1e:
73:e9:cc:be:3f:fd:c2:ef:6e:b1:a5:eb:d6:85:14:
6c:fb:b4:1d:91:b6:de:3e:54:16:41:86:5b:84:3c:
79:49:9f:05:51:1f:28:cb:78:63:41:26:b6:a7:94:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:6E:C7:BD:21:8B:D4:E8:8D:A4:05:95:AB:59:97:D8:40:2C:6C
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:82:89:1e:c1:a5:92:d9:17:8f:bc:16:78:0c:2e:3a:1f:69:
f8:d4:21:c8:3e:80:9c:1a:16:e2:19:76:6c:b5:bd:20:09:64:
3c:d9:77:4d:29:24:e0:74:e1:f4:38:0b:09:b3:7e:d5:b5:ba:
ce:4b:25:79:39:c8:ba:05:fd:2b:92:55:01:6a:bf:0e:d8:11:
43:dd:92:f7:ec:7c:b7:0d:6f:bf:0f:f2:92:d5:4c:94:51:b1:
a6:87:49:99:59:dd:6e:c6:c2:69:4b:98:f3:82:ee:73:1a:ff:
32:24:b0:f4:b0:fc:68:3d:e2:79:7c:db:dc:33:37:4d:ca:31:
ce:d9:00:94:3f:0f:cc:53:fb:f7:9a:f9:a0:6e:14:0f:2e:8b:
5b:e8:3f:45:bb:bf:fe:e7:6c:5a:c0:83:a3:ec:d1:96:c4:68:
ac:80:47:2e:32:9d:f7:b7:fe:8a:34:88:3d:c1:4e:85:06:18:
7f:3a:c3:8d:a9:61:a2:1a:ab:d8:74:22:56:e9:d3:94:b9:cf:
05:e9:bf:03:32:ac:a4:a4:89:3c:eb:fb:cc:ee:df:5a:59:80:
6a:e8:15:fc:05:8d:1f:e5:7c:d9:da:a8:11:06:f8:1a:eb:e8:
4f:b7:b9:aa:b3:a3:43:42:dd:cd:b0:db:91:a0:a6:eb:a7:65:
12:28:a7:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC
MkVCQkUxODgwHhcNMjUwMTMwMTk1NDM1WhcNMjUwMjA2MTk1NDM1WjAYMRYwFAYD
VQQDEw02NzliZDhmYi04ZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4wEX1doawDZbaa/6zH3v0TjtbwxcJ1ywPJANCYYNOkQ35P0H83iE0LhtVPF7
Q1+JedPGN5TJKGx0PsRxxxF2EPrDZJ93PcRMNXCCbx0BglPZytQTqxd3drihVDC5
0ygX4NANLdKA6KSK+in3I4GfxMkmPyuDI49X+kHendaqdby36dskT2gnrQHlylB3
GJ+h1TSoilhq6JRLHaxbhdshObmkDkSDI/K0fxO3KljcLjMfEljAeLBd0KEg9/yk
ieCoQVax+Hs/OaZ6XJFNSlHI9B5z6cy+P/3C726xpevWhRRs+7QdkbbePlQWQYZb
hDx5SZ8FUR8oy3hjQSa2p5QNbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMcbse9
IYvU6I2kBZWrWZfYQCxsMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2
MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V
RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMgokewaWS2RePvBZ4DC46H2n41CHIPoCcGhbiGXZstb0gCWQ82XdN
KSTgdOH0OAsJs37VtbrOSyV5Oci6Bf0rklUBar8O2BFD3ZL37Hy3DW+/D/KS1UyU
UbGmh0mZWd1uxsJpS5jzgu5zGv8yJLD0sPxoPeJ5fNvcMzdNyjHO2QCUPw/MU/v3
mvmgbhQPLotb6D9Fu7/+52xawIOj7NGWxGisgEcuMp33t/6KNIg9wU6FBhh/OsON
qWGiGqvYdCJW6dOUuc8F6b8DMqykpIk86/vM7t9aWYBq6BX8BY0f5XzZ2qgRBvga
6+hPt7mqs6NDQt3NsNuRoKbrp2USKKdY
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:57 2025 by rpki-client