Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json)
Hash identifier: /Y2lc8GLyKbSS4MmaZlxB+Jf7MSxw+biPgVKFbao910=
Subject key identifier: 6E:A0:07:51:07:46:CE:A9:85:3D:B0:7E:DA:9A:F0:8A:41:6C:5A:4E
Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1
Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1
Certificate serial: 204E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
Manifest number: 2713
Signing time: Fri 31 Jan 2025 15:58:46 +0000
Manifest this update: Fri 31 Jan 2025 15:58:45 +0000
Manifest next update: Fri 07 Feb 2025 15:58:45 +0000
Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: g9f16g0isiBYXjRBGA31+EqYkmG5hgk6hV/ac9cryCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8270 (0x204e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1
Validity
Not Before: Jan 31 15:58:45 2025 GMT
Not After : Feb 7 15:58:45 2025 GMT
Subject: CN=679cf335-d743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:76:75:ea:b8:bf:20:1d:88:2d:c6:b5:bb:
d2:a0:1b:b5:a5:09:b1:6a:6a:ae:b5:ba:fe:f2:b1:
2f:1d:38:c1:42:d2:c0:94:32:bb:65:cd:64:81:b2:
c0:20:8c:5f:2a:e0:69:aa:cb:93:a5:93:f9:5c:b4:
f2:d6:a5:fc:95:99:a3:7a:b0:33:3d:9c:8e:a2:33:
94:7f:5a:90:b9:71:b5:70:97:c7:e9:6f:e8:e7:d4:
91:fa:a3:86:d9:70:12:75:91:12:69:b4:96:f5:4a:
3a:00:7e:96:83:31:49:28:4f:01:cd:16:50:1a:b9:
65:9b:48:9d:3b:f5:08:6d:be:01:71:22:0a:4e:be:
8c:f6:5b:26:9c:55:3d:61:7e:4a:f5:ee:0e:87:94:
3d:6e:33:e4:36:81:d2:54:40:f4:f0:14:24:f3:cb:
67:62:cf:fb:ad:3f:e7:8f:1a:e1:e6:77:0d:5d:43:
59:8f:28:33:be:5f:ed:ec:66:dc:26:f8:61:e5:12:
3f:36:36:b0:71:dd:f4:b1:e3:86:18:09:58:81:7d:
c0:0f:41:e1:96:30:13:13:94:0e:b1:8f:69:34:7e:
48:14:71:db:dc:bd:95:b4:cb:f8:86:cd:eb:1d:f5:
f0:1e:cd:2f:9c:58:1a:05:49:ae:cf:fd:97:b1:f8:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:07:51:07:46:CE:A9:85:3D:B0:7E:DA:9A:F0:8A:41:6C:5A:4E
X509v3 Authority Key Identifier:
keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:95:da:2c:69:6f:b7:a7:8b:a7:f8:51:b6:b0:a0:58:b9:
06:13:c8:46:3d:ed:a9:9a:fc:58:6c:ed:71:96:46:a0:85:bb:
3b:35:29:70:1d:a5:e3:55:f3:75:be:bb:e3:64:e2:f8:b0:98:
b6:82:8b:ff:7e:ac:85:83:d1:b8:ea:a7:c4:bf:77:9e:32:19:
6f:16:36:79:69:56:6a:ee:ab:d4:ec:da:c6:68:ee:27:88:6d:
4b:02:0c:e6:8b:d0:14:51:96:30:1e:1d:e5:f4:c4:bb:ef:a2:
78:32:d7:b6:8e:1b:d3:66:7c:ed:f5:5e:30:fd:4a:d4:25:0c:
a8:74:c5:a3:2f:ac:8d:d7:73:20:f4:01:82:1b:5d:da:78:31:
a0:a5:fd:40:5a:ef:87:37:84:f4:58:f9:3b:7f:61:e3:f1:c7:
ef:6d:58:d2:bb:c2:0a:ec:51:eb:79:f1:31:7e:01:b9:ea:13:
8a:07:76:a7:7d:b9:c2:f9:ec:36:35:f4:7a:12:8f:0b:c0:09:
85:f4:55:06:2a:93:bb:3b:b6:e4:16:2f:60:76:83:0e:5a:51:
08:2c:43:61:af:88:fb:b3:63:a5:90:dd:65:d3:3d:55:85:dd:
23:fb:b0:4f:34:95:7c:b2:9d:62:b0:09:ac:59:d0:24:26:09:
1a:33:1a:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0
NTQ4QjEzQzEwHhcNMjUwMTMxMTU1ODQ1WhcNMjUwMjA3MTU1ODQ1WjAYMRYwFAYD
VQQDEw02NzljZjMzNS1kNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0E12deq4vyAdiC3GtbvSoBu1pQmxamqutbr+8rEvHTjBQtLAlDK7Zc1kgbLA
IIxfKuBpqsuTpZP5XLTy1qX8lZmjerAzPZyOojOUf1qQuXG1cJfH6W/o59SR+qOG
2XASdZESabSW9Uo6AH6WgzFJKE8BzRZQGrllm0idO/UIbb4BcSIKTr6M9lsmnFU9
YX5K9e4Oh5Q9bjPkNoHSVED08BQk88tnYs/7rT/njxrh5ncNXUNZjygzvl/t7Gbc
Jvhh5RI/Njawcd30seOGGAlYgX3AD0HhljATE5QOsY9pNH5IFHHb3L2VtMv4hs3r
HfXwHs0vnFgaBUmuz/2XsfgwawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6gB1EH
Rs6phT2wftqa8IpBbFpOMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4
QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv
X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJxpXaLGlvt6eLp/hRtrCgWLkGE8hGPe2pmvxYbO1xlkaghbs7NSlw
HaXjVfN1vrvjZOL4sJi2gov/fqyFg9G46qfEv3eeMhlvFjZ5aVZq7qvU7NrGaO4n
iG1LAgzmi9AUUZYwHh3l9MS776J4Mte2jhvTZnzt9V4w/UrUJQyodMWjL6yN13Mg
9AGCG13aeDGgpf1AWu+HN4T0WPk7f2Hj8cfvbVjSu8IK7FHrefExfgG56hOKB3an
fbnC+ew2NfR6Eo8LwAmF9FUGKpO7O7bkFi9gdoMOWlEILENhr4j7s2OlkN1l0z1V
hd0j+7BPNJV8sp1isAmsWdAkJgkaMxpA
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:26 2025 by rpki-client