Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier: Tc4I1wcpQCWrnU2FsY0AgqsTqvKFJI46t6LnZoGXYgY=
Subject key identifier: 8E:CA:BB:C8:58:B5:31:19:B2:EB:96:44:0D:C3:44:D5:6B:84:18:EA
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 3478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number: 346F
Signing time: Fri 28 Mar 2025 14:38:44 +0000
Manifest this update: Fri 28 Mar 2025 14:38:44 +0000
Manifest next update: Fri 04 Apr 2025 14:38:44 +0000
Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: Dcp4r6Mj80TrRpw02Qn/2rL+usSmpInkWNBtKjopvTQ=)
2: 7A42D8C8DD3C11EA8C68452FC4F9AE02.roa (hash: m2yIuby8HlO1waMEwZ3VKb7grN7qwZoDdVN1MenQrvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13432 (0x3478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306
Validity
Not Before: Mar 28 14:38:44 2025 GMT
Not After : Apr 4 14:38:44 2025 GMT
Subject: CN=67e6b474-1e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:61:78:d2:f2:a6:10:6c:d7:58:53:27:0e:
e5:eb:d0:71:92:73:a8:20:ca:3c:e3:c3:12:a3:e1:
dd:8d:b1:4f:a8:a5:fb:c6:46:0e:d7:b6:b1:f2:cd:
48:88:95:fb:c1:62:70:78:20:ef:98:90:64:77:1c:
2a:09:9d:83:eb:a1:12:e6:64:a8:68:c8:e4:3c:67:
a1:8b:53:e1:05:1a:bb:ce:97:b8:b4:a9:f4:fd:25:
50:04:64:08:aa:74:b7:d5:c0:dc:e3:b2:d3:f1:41:
4f:d1:0b:4b:3d:f9:32:ff:c8:57:6b:1b:45:b6:e9:
a7:73:fd:56:fc:20:0b:20:34:42:4e:8d:d5:64:09:
5c:a2:10:9e:4e:28:3e:7f:98:60:a4:50:dc:cb:cf:
d5:79:c1:69:67:5c:fc:9b:90:ab:76:79:39:32:84:
1e:4a:8a:3b:13:dd:0d:cc:0a:95:78:54:95:0a:cc:
91:c9:ed:b5:2d:bc:9f:61:b5:f7:a6:fd:3b:fd:2b:
f2:fa:75:61:7b:33:3c:11:cd:73:7b:d3:7a:7d:33:
44:2d:f3:ff:e4:0b:47:90:c8:55:33:f0:87:cc:3d:
52:b2:ed:cb:28:89:d7:4f:c7:2a:0d:91:5a:79:3d:
f4:85:80:f1:48:2c:b1:fe:f0:fe:9c:51:f4:0a:b2:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CA:BB:C8:58:B5:31:19:B2:EB:96:44:0D:C3:44:D5:6B:84:18:EA
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:cf:42:a4:6a:ca:22:77:2b:5e:f0:08:2d:3e:b6:3d:3e:cd:
46:93:e3:4f:ca:ee:41:14:af:af:df:6b:f5:f9:fb:92:77:98:
fc:c5:c9:ea:32:7a:b9:3c:11:fd:4e:bd:2b:07:ec:4c:15:6d:
04:ee:7e:c3:37:af:66:78:6f:1c:18:85:1c:96:14:1e:2d:84:
97:4b:ff:51:9e:5a:1d:5a:e0:1a:95:a7:74:00:63:0c:9b:76:
d5:32:d1:95:8e:65:a0:f1:0b:ec:1a:97:d4:f1:3b:93:c7:58:
94:f2:fe:1f:d3:51:7f:81:2d:6b:82:06:59:64:89:3e:5b:77:
53:b0:81:aa:f7:79:f5:5f:e7:83:ae:be:bf:21:03:5f:e5:9b:
a5:6f:cd:a5:f3:c6:fa:dd:ff:e1:1a:7f:65:3a:93:09:24:12:
97:a0:63:a9:1c:6a:8d:5f:b7:4b:fe:c3:b5:c3:33:91:59:0f:
46:e8:5b:63:21:55:0b:44:2e:0b:71:3a:69:ef:55:10:94:57:
83:ae:8c:f5:8f:2d:61:38:8d:11:27:2c:3d:5e:0c:7a:ea:27:
e6:4f:88:44:9f:f6:8c:a7:1d:b3:dc:24:51:b8:8f:72:1c:6d:
9f:6f:65:c8:a5:e2:99:b5:ce:ec:4d:8f:21:1f:9c:7b:0e:89:
a6:fa:b4:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG
OEYyMzhCMzEwHhcNMjUwMzI4MTQzODQ0WhcNMjUwNDA0MTQzODQ0WjAYMRYwFAYD
VQQDEw02N2U2YjQ3NC0xZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4DJheNLyphBs11hTJw7l69BxknOoIMo848MSo+HdjbFPqKX7xkYO17ax8s1I
iJX7wWJweCDvmJBkdxwqCZ2D66ES5mSoaMjkPGehi1PhBRq7zpe4tKn0/SVQBGQI
qnS31cDc47LT8UFP0QtLPfky/8hXaxtFtumnc/1W/CALIDRCTo3VZAlcohCeTig+
f5hgpFDcy8/VecFpZ1z8m5Crdnk5MoQeSoo7E90NzAqVeFSVCsyRye21LbyfYbX3
pv07/Svy+nVhezM8Ec1ze9N6fTNELfP/5AtHkMhVM/CHzD1Ssu3LKInXT8cqDZFa
eT30hYDxSCyx/vD+nFH0CrK6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7Ku8hY
tTEZsuuWRA3DRNVrhBjqMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE
OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl
MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSz0Kkasoidyte8AgtPrY9Ps1Gk+NPyu5BFK+v32v1+fuSd5j8xcnq
Mnq5PBH9Tr0rB+xMFW0E7n7DN69meG8cGIUclhQeLYSXS/9RnlodWuAalad0AGMM
m3bVMtGVjmWg8QvsGpfU8TuTx1iU8v4f01F/gS1rggZZZIk+W3dTsIGq93n1X+eD
rr6/IQNf5Zulb82l88b63f/hGn9lOpMJJBKXoGOpHGqNX7dL/sO1wzORWQ9G6Ftj
IVULRC4LcTpp71UQlFeDroz1jy1hOI0RJyw9Xgx66ifmT4hEn/aMpx2z3CRRuI9y
HG2fb2XIpeKZtc7sTY8hH5x7Domm+rRJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:07:07 2025 by rpki-client