Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: 32pxtIrmn9H8t8PwrE+FUQqTyHUWFh/uOo12ObwdsGM=
Subject key identifier: 31:F3:13:2F:21:DD:B8:57:8C:76:EE:BC:3D:F7:14:5E:45:43:3F:FE
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 1239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 1220
Signing time: Fri 28 Mar 2025 17:16:26 +0000
Manifest this update: Fri 28 Mar 2025 17:16:25 +0000
Manifest next update: Fri 04 Apr 2025 17:16:25 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: D/T3PJf1R3NMGmArOeLhLY5dgOPh84TpzBEtL0vm88M=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4665 (0x1239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676
Validity
Not Before: Mar 28 17:16:25 2025 GMT
Not After : Apr 4 17:16:25 2025 GMT
Subject: CN=67e6d96a-9430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:80:77:f6:d2:80:3a:f6:1a:e8:08:de:87:
85:50:db:6b:29:a0:d8:a0:29:bf:77:31:67:f4:99:
bb:20:87:78:68:33:6b:08:c0:71:ef:bb:ee:e6:ae:
27:bd:4b:4b:7e:67:66:fe:34:d3:0a:29:8b:8a:22:
0e:e0:45:6b:56:29:6e:07:82:d7:ad:ed:59:b5:8a:
3d:fe:fc:34:80:c8:91:fb:32:e7:53:54:ff:ee:dc:
9a:54:de:56:b0:7c:c5:a8:3c:2f:49:88:ea:75:b5:
eb:c1:71:4b:de:34:15:ad:37:10:10:80:aa:1e:ee:
8d:fd:56:64:34:ad:96:88:7a:9a:6a:7e:1a:26:eb:
41:cc:63:4d:de:39:1c:1a:c6:13:2e:5d:c5:38:5e:
7b:53:09:e7:8a:e8:aa:01:dc:fb:65:78:68:b6:e4:
e5:d6:62:7b:28:f6:33:36:4f:39:73:df:f4:0f:6d:
84:f9:2b:c1:50:72:c7:7b:31:63:ba:dd:30:1f:02:
83:69:36:e1:ad:57:05:6e:d1:32:8f:f3:a0:af:80:
ad:87:bf:4c:37:8c:fa:d4:db:80:e3:70:1f:7d:c9:
13:d3:e6:d2:10:ca:36:21:4d:ad:0e:bc:84:23:ac:
ff:a9:32:ee:83:72:c6:27:18:dc:e5:8f:3e:f2:9d:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:13:2F:21:DD:B8:57:8C:76:EE:BC:3D:F7:14:5E:45:43:3F:FE
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a4:f9:4b:41:cb:7b:0e:95:86:1b:d2:e4:53:b5:74:52:a0:
e4:86:76:a9:22:6a:17:5c:ea:f8:51:46:16:ea:57:8c:4b:7e:
74:1f:ff:99:2e:e1:16:41:3f:8c:55:4d:04:f4:9d:a5:62:53:
ae:79:e5:e2:f9:31:6f:97:3b:6f:7a:ae:77:f3:7d:a4:d6:dd:
71:a0:9a:8b:5d:11:7f:0e:4a:db:ad:df:b1:3b:b7:65:48:34:
e2:e3:27:ec:0b:ae:2b:55:49:53:cf:1e:5a:cc:6a:bf:a8:53:
6e:79:9c:ea:2a:2c:de:01:cd:3c:94:be:c9:b5:26:65:fe:fe:
92:f0:29:e9:5c:36:a1:b6:bb:54:c8:20:2b:46:f8:26:cd:5a:
3a:f3:d0:63:f6:fd:c2:7e:75:9d:aa:8b:93:48:06:6f:75:5f:
87:b8:ea:3d:ee:57:eb:13:56:16:cc:2c:73:5c:5d:9c:c5:be:
24:91:00:f8:17:10:9d:00:67:af:c0:fc:c2:b1:bf:c8:fb:51:
a2:25:1b:e1:7d:66:52:0b:1c:69:c3:76:70:d7:c0:db:4c:c0:
57:6e:a2:4b:9e:bd:34:1d:03:ca:60:04:62:2e:24:1e:9b:36:
67:bb:fe:17:16:69:03:aa:1a:13:89:a7:f1:89:03:72:a5:93:
5c:33:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:45 2025 by rpki-client