Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: aicig8+yMoBgfWbBX0K+nQyn9D8bv7sd94eqwNLb+Ls=
Subject key identifier: BF:DB:C1:5A:B0:82:F8:CA:BD:F2:36:D7:AC:E6:74:ED:08:11:FA:2B
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 0384
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 037E
Signing time: Fri 31 Jan 2025 00:54:41 +0000
Manifest this update: Fri 31 Jan 2025 00:54:40 +0000
Manifest next update: Fri 07 Feb 2025 00:54:40 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: xA2NLlGQtpUE3O0tLEDZhGb6yiv7/e9mPxDdGjDfAqs=)
2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: NmJNgM1TocJKXWdxIqSxjaeXJhysWvNCkav+9g71gx8=)
3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: lZN8I9KZhIY+6zkUuDTd1f/VOr/7joqERe0PJi8R+bM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: Jan 31 00:54:40 2025 GMT
Not After : Feb 7 00:54:40 2025 GMT
Subject: CN=679c1f50-a05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:65:5d:e0:95:ea:32:b7:05:e1:74:92:6a:
af:d8:2c:1c:b2:96:7c:c0:22:d6:94:ab:1e:9c:8d:
21:0a:38:97:1a:c8:f0:a0:40:2f:ca:c5:67:04:36:
18:45:17:4b:5b:61:b8:8d:fa:cf:42:4d:9b:8a:b8:
3d:ee:a2:7d:9d:24:37:bc:c2:0c:b7:84:9c:68:6b:
05:44:ef:6e:27:fb:f0:ba:8e:8d:90:de:a0:d6:cc:
2d:fa:c2:67:38:29:f7:e1:fa:10:ef:0e:9f:f4:99:
ff:fb:1b:5c:ef:03:b7:9b:57:05:32:ab:47:20:31:
3a:63:a3:6e:22:9f:b2:6e:b7:7b:f5:b3:b1:9a:c3:
bb:f8:9d:d6:de:bb:0c:c1:d8:54:01:61:6b:cf:e1:
d0:30:b6:e2:29:27:5d:c4:ec:e6:29:70:83:d7:e6:
05:6c:4a:fe:70:b2:01:4b:1a:de:33:5b:5a:8f:9e:
07:f4:88:6e:e0:cb:da:b8:e1:98:2c:7f:dd:11:f2:
e2:79:90:4f:29:6b:2f:c8:a0:44:39:7f:79:24:3a:
b2:b8:8c:d2:42:04:01:36:97:e6:0b:ad:ea:98:1d:
9e:f3:b8:52:a2:ec:11:cb:49:ce:f7:05:93:85:aa:
04:be:9a:26:68:ca:44:2b:0c:ea:44:3b:d0:3e:4d:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:C1:5A:B0:82:F8:CA:BD:F2:36:D7:AC:E6:74:ED:08:11:FA:2B
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a5:96:50:f1:3b:2c:5f:39:68:e5:52:57:a6:7e:a5:d0:93:
9b:b2:bc:65:49:ec:45:90:38:f1:d5:07:4d:b0:22:97:00:4e:
2f:ba:12:56:97:c8:86:15:5a:b9:70:1a:55:b0:3f:ab:18:60:
0e:16:85:e8:3e:36:01:03:81:dd:3c:1e:57:0a:f8:14:55:f7:
7d:8a:68:72:49:00:89:55:e4:63:cb:0c:ee:05:5e:e4:00:4b:
d3:49:04:13:08:84:9b:b4:f4:33:06:71:58:e0:5c:67:0d:26:
cd:4d:9f:7c:52:93:4b:59:f0:4c:7c:ec:3d:54:43:9d:db:3b:
43:2f:ec:a7:45:a7:c7:9f:61:62:65:b6:f8:c6:d2:17:70:d1:
80:b6:2c:a7:32:46:13:08:42:fe:be:cd:85:d2:b1:4e:45:64:
f7:66:65:78:1f:63:f9:1e:5e:90:88:cd:1c:40:1e:2a:c4:68:
9f:f3:ac:84:f5:d4:86:8a:f8:16:5f:ac:3e:4f:e0:c8:ea:93:
5f:8c:0c:b7:35:56:41:0b:0a:96:52:fe:c0:17:be:2f:c2:ed:
69:4f:a3:8b:72:fa:36:24:9c:56:6a:26:83:63:1e:02:92:7d:
1a:65:35:6c:4f:29:7a:40:f6:c0:51:9e:6a:02:cb:41:23:8f:
8e:bd:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:35 2025 by rpki-client