Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json)
Hash identifier: i1HuEj2DGZ/bsPhLDx9PeZmp5gq5ICeFD4FXCdNrm+M=
Subject key identifier: 6E:37:6A:B5:99:E8:D4:93:D0:91:45:2D:2A:7F:7B:C7:E0:44:3D:53
Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
Manifest number: 04
Signing time: Sat 29 Mar 2025 07:32:24 +0000
Manifest this update: Sat 29 Mar 2025 07:32:23 +0000
Manifest next update: Sat 05 Apr 2025 07:32:23 +0000
Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: nYSrL6UAllB8LINfYfKBmFmrLT70JaPWRAUgEloWW1o=)
2: E78F55A408BC11F09C4FB471C4F9AE02.roa (hash: voOUCH7zRGxksu2fNV8QOYiL4kmVMcLs8S+aobdc9H8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580E4
Validity
Not Before: Mar 29 07:32:23 2025 GMT
Not After : Apr 5 07:32:23 2025 GMT
Subject: CN=67e7a207-4892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:90:87:40:48:04:ce:c4:74:07:ed:e7:fa:
c3:85:7e:e0:38:92:cd:5a:68:3b:a9:5d:81:8c:a8:
9b:08:ae:92:a9:3f:bf:31:f1:23:20:f1:65:24:3f:
6d:83:f8:52:a5:ff:5b:c3:14:dc:eb:05:b2:e3:b5:
33:e8:3f:96:9f:54:83:9c:23:8b:df:9c:b3:96:d7:
70:76:bd:31:0a:f7:95:85:a0:27:10:59:3a:d4:0e:
35:2b:56:56:55:cf:34:ad:a2:74:c5:b7:78:5c:e1:
be:87:42:2e:14:25:39:2b:f6:06:71:d9:98:17:6d:
7a:a0:d3:29:b0:fd:8d:5a:91:da:c6:5d:57:46:14:
86:12:64:0f:8d:e0:12:51:15:9d:e9:ad:90:8f:8d:
7b:ac:d3:91:22:d7:18:84:43:96:9e:a3:a7:7e:72:
3d:71:ca:6f:37:00:de:a2:2f:34:70:17:a4:09:83:
20:a7:d8:cc:5a:c9:38:09:74:cf:7a:18:14:cb:31:
ba:d2:dd:b7:a7:35:f3:52:fb:e4:bb:2e:a8:e8:10:
aa:b8:1f:27:8b:80:b2:19:31:83:69:ff:c1:d0:c0:
78:bb:7c:4d:7f:20:60:50:07:c5:31:4e:87:1d:0e:
32:54:d9:ed:af:51:0e:c1:95:15:ba:72:23:b3:46:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:37:6A:B5:99:E8:D4:93:D0:91:45:2D:2A:7F:7B:C7:E0:44:3D:53
X509v3 Authority Key Identifier:
keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:e7:af:6c:21:59:09:29:22:ea:ea:69:1d:a9:2c:9e:67:
3a:60:1a:c2:bc:a3:6d:51:aa:f4:97:3b:e9:4f:bc:91:27:c3:
f1:f5:93:e6:4d:24:42:33:f2:07:9f:f9:b1:b9:3e:bb:2a:58:
1b:d5:7a:d8:09:7e:d2:3e:6f:a2:ce:9b:7f:2a:b8:79:8a:1b:
b7:8f:a7:a6:c8:82:e7:25:b0:11:13:86:6f:d5:c3:7a:a2:de:
a8:a4:5f:9a:a5:95:25:8f:6d:0c:26:51:3f:6b:81:b4:e6:b2:
ab:b9:a9:b3:8b:5c:15:33:f8:59:af:4c:24:ef:d3:24:65:0f:
3a:8b:c1:7d:69:8b:b2:25:67:38:14:29:08:19:20:b7:28:d9:
20:50:bb:84:5e:ef:0e:16:a7:42:c8:e4:34:96:19:0c:c2:3b:
6e:36:62:37:14:f9:d9:50:5e:e9:f5:87:c8:08:c3:ba:bf:a1:
c7:8a:2c:13:b1:86:d5:ae:f1:50:c0:aa:5e:71:5a:77:c2:f7:
80:b7:11:03:61:d1:ba:e3:dc:00:b2:7b:ff:95:a9:b2:92:43:
44:b3:61:37:46:1f:45:72:26:c7:ce:92:bf:f4:18:fa:93:96:
b8:16:0a:98:62:04:30:88:f4:03:93:48:dd:95:b1:f1:ce:f5:
2c:78:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:11:05 2025 by rpki-client