Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft
File: QjkReiVYLQBn3k0M7aWrpcx-NWk.mft (raw, json)
Hash identifier: rwoqMViR70aPl3svnmAqp5u/WAcOHfExyOG4PFEVdWw=
Subject key identifier: 91:D0:B9:2D:38:7F:A1:14:D3:9E:FB:3D:E6:A7:CD:76:99:86:65:B8
Authority key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
Certificate issuer: /CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft
Manifest number: 87
Signing time: Thu 05 Dec 2024 05:19:47 +0000
Manifest this update: Thu 05 Dec 2024 05:19:47 +0000
Manifest next update: Thu 12 Dec 2024 05:19:47 +0000
Files and hashes: 1: QjkReiVYLQBn3k0M7aWrpcx-NWk.crl (hash: tve50w2o8B3ZqA4Rbb2yWXaGtmuC0ukAcO0av/sP7ok=)
2: 32D99666AC4A11EF9274532EC4F9AE02.roa (hash: Nzyd2DsNinKqCciunVDpIPG2iPV0swCv9w/zsUUKg3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C287, serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569
Validity
Not Before: Dec 5 05:19:47 2024 GMT
Not After : Dec 12 05:19:47 2024 GMT
Subject: CN=675137f3-dfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:ca:91:be:60:a1:bc:70:4f:28:29:2c:72:
98:ae:15:07:12:6e:2d:38:21:19:03:e4:cb:ea:91:
e0:e6:c0:0a:07:ba:4b:6e:8a:10:a7:1e:8e:94:85:
0e:e6:a6:17:f8:92:70:0f:26:90:14:b0:d3:0f:59:
d2:25:77:ff:2a:65:ee:cf:9e:f0:c1:3e:02:e2:6f:
f4:9c:f2:4b:58:3a:0d:56:74:37:c5:0a:88:f2:f8:
43:5c:44:7f:1e:13:a4:d0:62:32:d0:be:5b:c3:20:
e5:8a:57:f3:bd:52:99:e6:e4:de:2f:a6:66:fd:5f:
b3:c9:a6:c8:06:32:ad:91:1d:18:10:57:bd:e4:b7:
ca:20:87:16:eb:31:0b:17:51:95:39:7d:95:66:dd:
c6:32:57:d2:52:78:56:a5:c1:08:dc:10:2a:b3:66:
e8:d5:9f:47:26:b8:dd:bf:a7:dc:cf:f0:f6:79:ec:
ad:72:45:95:a3:95:32:5c:af:f5:e7:1c:90:58:b3:
7e:ab:12:8c:4e:85:02:46:06:ce:b9:9a:43:4c:59:
cc:6e:0c:3f:02:0f:e7:61:53:b0:f6:f3:75:f1:e3:
a9:6d:bb:11:f0:66:84:0d:3c:88:02:b1:ad:e3:c9:
49:e1:32:7f:5b:29:f4:57:2e:38:e5:0f:c8:33:53:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:B9:2D:38:7F:A1:14:D3:9E:FB:3D:E6:A7:CD:76:99:86:65:B8
X509v3 Authority Key Identifier:
keyid:42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:75:b1:90:cb:c1:64:d3:54:06:7f:9f:bf:07:ad:72:bf:f6:
fb:da:f0:ea:e7:69:d2:cb:6b:5c:ef:ef:56:49:44:08:6a:07:
32:2f:92:7e:4a:d7:9e:a0:40:94:4e:af:ba:26:d3:0d:5f:9a:
84:24:c3:4f:20:ff:53:79:d1:0a:69:4c:5b:a6:ea:5b:3b:f4:
ec:b5:78:15:80:5e:84:c3:e5:c4:e3:fb:91:33:ae:81:96:30:
2d:ae:a7:ae:34:9d:c9:77:3c:d7:34:ca:c3:63:b1:8f:ca:45:
15:dd:ec:ee:44:3b:01:92:52:0e:9d:60:ed:49:c6:b7:c8:39:
a9:d4:05:fa:35:c1:43:31:fa:93:05:c3:a7:01:f2:55:8e:6e:
fd:60:5a:d7:59:a3:fc:28:13:8a:51:2a:26:86:2a:ff:cd:cd:
38:d5:37:39:be:1c:45:f6:cb:e3:ca:08:99:78:f3:87:c6:c4:
46:f4:d4:ae:db:27:6c:21:f4:43:5b:3c:a2:53:4a:b3:8b:76:
34:05:11:0d:d8:31:5c:45:1f:84:be:57:b9:6e:e0:aa:29:90:
3e:b3:d4:6c:86:04:02:9e:30:07:cd:ee:e7:ca:bd:29:8f:f0:
54:23:d3:4c:4f:18:a9:6e:50:82:91:46:f4:b7:11:7a:11:9a:
6b:1b:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:05 2025 by rpki-client