Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier: HdytN6PGhWP9ZbJ7p9eklIIm9u6FGoMmQTJIxEm3n2w=
Subject key identifier: B4:F6:B0:81:6C:F9:BB:45:78:2D:8A:5C:3F:0F:65:5A:09:82:65:7C
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number: 67
Signing time: Sat 29 Mar 2025 06:19:40 +0000
Manifest this update: Sat 29 Mar 2025 06:19:40 +0000
Manifest next update: Sat 05 Apr 2025 06:19:40 +0000
Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: 06Dupk3SeMgyeG9/6ndzRjg4KpdvW5/+WQU24PGRA+c=)
2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140436
Validity
Not Before: Mar 29 06:19:40 2025 GMT
Not After : Apr 5 06:19:40 2025 GMT
Subject: CN=67e790fc-21aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:64:af:76:8f:00:7b:34:a2:92:ce:f8:de:
5e:39:a6:cf:ea:e2:85:fc:a0:8c:e2:a7:79:cc:6c:
c1:25:77:22:5e:8c:8c:3d:c4:18:e3:6f:18:50:6c:
a4:45:8e:44:ae:93:6b:28:be:a8:f0:6d:16:d1:31:
03:40:ed:5c:c0:94:d4:66:fe:c5:70:91:ed:fd:31:
72:df:24:04:e0:dc:93:d5:9a:46:56:30:00:20:95:
8a:7e:a7:ed:b9:44:c6:c0:7f:15:91:d8:c1:30:8e:
3f:cd:86:30:81:85:d0:93:3b:93:2c:9c:fe:b4:58:
ec:46:2b:09:3c:c5:bd:35:57:ec:13:e0:9b:d2:95:
0d:03:78:e8:9b:35:85:6e:33:ca:6d:ab:de:b0:27:
01:35:be:57:37:c4:09:5e:bc:14:f3:36:82:80:52:
0b:c3:a0:aa:80:8d:29:49:67:2a:25:49:50:18:9a:
bb:04:61:a4:7e:de:6e:d3:c2:c2:f2:40:51:c1:fc:
cf:2a:70:6a:34:e5:f5:56:79:d0:2b:a6:68:d2:16:
1e:40:20:3e:fe:df:5a:b4:12:05:a0:0f:c2:5c:a3:
07:81:c3:aa:f3:a2:a9:60:78:05:d4:e8:03:a1:4e:
36:0b:b6:d3:68:31:5e:c1:f5:83:5e:6f:ce:e3:40:
15:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:B0:81:6C:F9:BB:45:78:2D:8A:5C:3F:0F:65:5A:09:82:65:7C
X509v3 Authority Key Identifier:
keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:c1:ae:a7:cf:b4:33:f8:75:be:bc:d4:d3:1b:7e:80:d7:
6f:9e:1c:9e:06:e6:92:56:43:ca:e6:a3:a3:f4:4b:af:f8:b0:
9e:9a:4a:db:54:cb:75:a6:ea:34:cb:88:50:84:fe:f2:bb:0b:
fb:f4:92:f5:67:65:84:7f:fa:e6:e4:7f:37:40:6d:92:58:95:
dd:14:01:5c:45:4f:b7:41:7c:63:ba:e1:45:29:f0:88:71:cb:
c7:7f:88:03:67:56:10:22:ac:e5:be:a8:3e:0b:2a:0a:a8:70:
fa:8e:8a:fc:29:96:a4:b6:b5:90:fb:75:14:20:90:b3:44:89:
f6:94:a4:69:7d:c9:5e:0a:ad:44:ef:65:46:f1:e2:f7:59:d3:
1a:9d:74:c1:d0:4e:3c:a4:56:69:a7:be:ce:3f:03:a6:97:19:
67:88:0d:e6:26:d8:94:9a:2b:15:eb:52:6c:e3:26:ca:8f:61:
d8:e9:1c:37:a5:cf:83:14:af:92:af:cc:5a:68:2e:74:7a:71:
a4:3a:46:15:0d:1d:35:02:5a:11:24:05:67:f7:d0:d5:3d:21:
97:3e:95:a5:ff:2b:bf:ae:e2:53:07:b7:61:c3:c8:62:14:b7:
58:b0:6d:16:0f:06:76:3d:3b:a5:42:32:fa:d3:11:84:81:f4:
b6:60:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:47 2025 by rpki-client