Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier: gvMY4v87ZJzxvNbkZtxiUM7KyF0ICAQR+FclRSMdaYI=
Subject key identifier: D0:EA:00:D4:79:5C:3F:C7:F6:27:58:55:23:AF:01:7F:4B:71:56:73
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial: 0403
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number: 03FF
Signing time: Fri 31 Jan 2025 00:32:13 +0000
Manifest this update: Fri 31 Jan 2025 00:32:12 +0000
Manifest next update: Fri 07 Feb 2025 00:32:12 +0000
Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: 6thts6lce4a4J6qrOAxuReHDrp1esGEQtzlLqCVZAZ0=)
2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Validity
Not Before: Jan 31 00:32:12 2025 GMT
Not After : Feb 7 00:32:12 2025 GMT
Subject: CN=679c1a0d-e78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:a9:7a:ee:98:05:b1:39:e6:4a:be:29:6b:
14:fe:1d:4b:d4:85:20:4c:b0:0c:73:55:f9:d6:8b:
54:26:23:f4:e7:a1:ab:a1:72:10:7d:09:6b:dd:cd:
c5:ee:b9:b4:d1:0f:2a:fe:55:ae:cd:bd:aa:ac:fe:
66:37:64:dc:8f:d4:3c:ee:4a:8f:f2:8c:84:9d:b7:
bc:f5:3f:96:34:ff:6b:c1:66:b8:13:1e:4f:de:86:
98:ff:27:15:c6:fe:e6:1b:57:10:0a:3c:b5:74:30:
3f:10:17:5b:07:b4:fc:8b:6a:6b:cb:7d:4d:b2:63:
a1:73:9c:5f:79:b0:05:20:37:fa:d0:cd:61:95:d5:
41:c5:77:de:f1:c7:d2:43:c6:dd:f7:f2:e3:35:9c:
2d:b5:04:22:60:88:ee:52:07:19:9f:9c:8e:1b:f6:
cf:49:e5:3d:04:eb:59:b6:d4:23:a0:69:d4:52:71:
82:de:aa:e2:7a:c6:cc:f4:c5:d9:57:22:80:51:e6:
eb:f3:22:57:bd:c8:94:c0:4d:55:b4:8e:7e:d3:49:
68:20:20:4a:ed:83:ef:43:a7:b4:17:bb:c0:b5:9f:
a2:da:7f:a1:ff:10:49:18:4e:be:b4:07:54:16:b5:
1c:24:12:72:0c:8b:55:9d:68:e2:c5:d3:50:67:90:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:00:D4:79:5C:3F:C7:F6:27:58:55:23:AF:01:7F:4B:71:56:73
X509v3 Authority Key Identifier:
keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:b7:72:a6:85:98:3e:20:6f:8a:90:d9:3b:50:b9:e9:c8:
46:b2:f2:0b:54:4b:32:53:2b:0b:fb:76:48:bd:e6:14:7f:8d:
66:88:4e:d3:98:2a:62:9c:59:60:50:77:28:9c:37:85:b6:e9:
a3:e0:ac:d8:ea:d5:da:4c:17:4f:bc:5d:c9:68:7a:08:37:da:
f1:7a:3a:a9:45:7f:78:5e:a5:50:fe:1a:65:f9:d4:4c:8a:5d:
b7:8b:13:78:61:8a:09:e3:ef:31:44:93:10:1a:d7:41:f5:25:
dd:31:0b:2c:1c:95:06:62:5e:7d:3c:ff:cd:76:ab:ca:ad:06:
c5:ab:a5:92:1b:69:20:b4:ce:eb:12:3d:ee:51:1b:4a:31:f7:
e3:78:64:74:40:5f:dd:e3:cb:85:3e:5e:34:5c:b4:07:23:a4:
dc:37:5c:a2:9e:72:a9:90:0a:e7:61:23:b2:3c:0b:81:0e:41:
e2:af:69:11:f0:b8:5c:99:26:3d:b4:97:18:8e:41:1d:40:ba:
27:43:65:b8:d9:25:54:76:77:85:37:11:15:3f:68:02:25:85:
2b:0d:1e:c0:fc:89:dd:da:d2:9a:bc:c7:c4:33:52:a6:9d:9c:
ff:5a:1d:94:1c:50:1b:83:04:f5:6d:c2:df:d8:91:e9:d3:32:
4f:56:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:58 2025 by rpki-client