Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
File: QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft (raw, json)
Hash identifier: mW5HSVj7ULaJ1LRcTUOi2NFicxwmx4VtRYcqBZJNcv4=
Subject key identifier: 9D:E7:81:3D:33:BF:E7:50:9F:4E:68:7E:C8:3F:60:51:38:FD:15:DA
Authority key identifier: 42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
Certificate issuer: /CN=A911AB17/serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
Manifest number: 0110
Signing time: Mon 17 Feb 2025 05:52:25 +0000
Manifest this update: Mon 17 Feb 2025 05:52:24 +0000
Manifest next update: Mon 24 Feb 2025 05:52:24 +0000
Files and hashes: 1: QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl (hash: wElIMLfk5Wx6qdVFvMB+BLppSi3hjDZ7ZbPubBMUM7s=)
2: 437375BC7F5111EFB8735348C4F9AE02.roa (hash: MiUmrOUrY1jCxzNkOhDOwwFLSpw0fp+op0zeu0tdUGo=)
3: E8B6593E38D611EF9B2A0B1CC4F9AE02.roa (hash: ML05tIhfPPPKTJGxmiWcRHeARlxvccwno//ZTa1YmaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB17, serialNumber=42F2791EEAC1FC7D7EC10B69F25E9EE95DAB34E1
Validity
Not Before: Feb 17 05:52:24 2025 GMT
Not After : Feb 24 05:52:24 2025 GMT
Subject: CN=67b2ce98-e3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:f4:c5:ee:68:5f:15:1d:bc:77:f3:b0:a9:
fc:db:50:20:25:e6:3a:c5:9f:56:51:5c:2f:b4:0a:
3f:4b:80:1b:9a:da:0d:45:7d:98:00:d1:24:8b:b4:
54:d1:d4:f1:23:09:ea:db:65:ee:0f:1f:bc:0a:77:
df:fe:e5:e1:ed:46:3b:e6:ca:c5:39:51:ee:16:fd:
7a:54:d6:bc:11:2b:78:50:7b:77:9e:ae:3f:d3:4f:
7c:5f:5f:7b:9b:9f:c5:21:24:d4:a7:6f:7a:d4:e7:
01:e0:50:8e:d5:a3:cc:62:3a:f8:88:30:d9:69:f1:
72:60:fb:f8:5b:13:d5:75:9f:c6:d4:26:b2:d5:3b:
a3:5c:59:d8:44:d2:b0:a9:47:3c:66:50:95:cd:bf:
14:11:b2:c6:e4:58:f4:d9:68:83:ba:30:c5:f9:54:
ef:e2:75:13:c9:36:0a:7d:dd:ec:04:71:0d:86:e5:
9c:67:1b:94:de:c7:8e:4b:0a:56:64:42:85:aa:6f:
67:e2:c6:cf:ad:1d:ee:73:08:22:d9:09:71:2f:21:
2d:dc:51:b5:7b:2d:07:91:3c:0c:89:5c:88:4f:16:
83:6b:e8:01:72:95:85:7d:2c:b1:9a:5a:76:1b:97:
13:4d:5d:1f:13:64:63:45:d9:31:d1:72:58:48:ce:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:81:3D:33:BF:E7:50:9F:4E:68:7E:C8:3F:60:51:38:FD:15:DA
X509v3 Authority Key Identifier:
keyid:42:F2:79:1E:EA:C1:FC:7D:7E:C1:0B:69:F2:5E:9E:E9:5D:AB:34:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvJ5HurB_H1-wQtp8l6e6V2rNOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB17/5966DD2672A711EEB10BE852C4F9AE02/QvJ5HurB_H1-wQtp8l6e6V2rNOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ab:19:8e:80:2b:b5:81:1f:20:ed:8d:c9:97:6a:b7:23:63:
88:0f:41:71:61:ba:fa:ec:4a:4e:81:05:68:0d:f8:a2:ed:29:
b7:3b:01:92:14:52:88:f8:79:5a:b3:31:06:ec:9b:c2:a3:bd:
66:ba:c2:45:a7:1e:5c:3e:27:aa:f4:a9:45:35:26:3e:91:63:
e1:6b:b5:e7:d4:ad:ba:d7:cb:2f:d8:fe:45:20:d1:05:0c:dc:
75:7e:95:a1:73:a7:24:e8:61:12:56:5e:d7:32:3d:33:00:5b:
ee:f5:ca:c7:b4:3e:46:3e:d8:b7:7b:9c:d2:1b:d7:79:82:60:
71:28:fd:a3:f3:c0:d1:a8:1a:4e:2a:67:a0:36:65:de:d1:0a:
38:d2:32:7a:f5:74:3c:45:70:eb:ed:df:da:5c:bd:65:5c:b8:
60:8f:bd:e1:89:80:42:09:a1:53:71:55:55:75:4c:59:2b:79:
91:4e:18:77:6f:d7:6e:f8:11:a4:09:25:70:64:72:27:9d:8f:
3c:a2:20:35:7e:6a:12:22:a2:72:e7:07:34:ba:c5:20:f9:f3:
7e:77:dd:5d:2f:9e:80:48:24:2b:3e:3c:c3:24:0e:b1:cc:74:
db:8b:0e:97:d9:19:7f:50:b6:e1:fd:30:fb:aa:72:60:d6:05:
b9:7e:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:04:01 2025 by rpki-client