Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json)
Hash identifier: klO9iNG9kiu+Reerj/p0OemfxdWRHopjjL4OfL0kwHo=
Subject key identifier: A2:64:7F:96:98:36:27:D9:AA:7E:99:0F:C4:7D:2F:A1:3A:27:49:F2
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial: 06D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
Manifest number: 06D2
Signing time: Fri 28 Mar 2025 22:19:59 +0000
Manifest this update: Fri 28 Mar 2025 22:19:59 +0000
Manifest next update: Fri 04 Apr 2025 22:19:59 +0000
Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: sTZO4eXowjnjut0a8Xp3I9Ncbf3DTne4WNrOJY9m5Sc=)
2: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (hash: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A703
Validity
Not Before: Mar 28 22:19:59 2025 GMT
Not After : Apr 4 22:19:59 2025 GMT
Subject: CN=67e7208f-3e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:21:6c:3b:31:4b:ab:89:f6:78:6a:b8:b0:
67:d6:8f:73:ef:5d:42:7e:91:d1:f3:29:28:3d:f8:
9f:bc:1e:22:7b:f0:0e:35:d8:9b:ef:43:f6:9f:8d:
ab:e1:93:9d:be:6a:5f:cd:1d:ca:e2:79:c3:47:5f:
0c:c8:f1:07:6c:14:d9:53:a9:85:b7:fa:77:b7:91:
34:ba:e8:ae:2f:25:5d:b4:f5:35:47:7b:b9:36:3b:
cf:eb:08:a5:ee:64:95:1a:10:d2:c5:39:4c:4b:20:
15:a9:db:15:13:2f:26:3b:f0:c5:9e:1d:ee:58:7d:
5c:b8:b3:75:6a:c1:a2:fe:23:45:53:17:62:c8:18:
21:a0:3b:6f:7d:e1:ce:3e:c3:f1:02:b1:06:a9:70:
4e:cd:c7:9d:71:2b:a1:76:b8:2b:8c:ad:f7:06:ce:
b8:2b:21:f4:df:db:24:3d:39:15:0a:d7:c4:d6:d5:
0e:e8:fd:43:4d:2c:b2:04:e6:60:a9:af:9b:3b:0a:
4b:33:eb:30:0e:82:ba:38:eb:71:e6:f1:43:17:d4:
5f:81:0b:f2:dd:46:53:ef:b9:6d:10:a8:dd:f9:3d:
10:cc:f5:6d:71:c3:11:94:58:42:0d:5e:77:67:c3:
75:1d:a0:39:fe:6e:49:0e:22:c1:14:30:8d:19:10:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:64:7F:96:98:36:27:D9:AA:7E:99:0F:C4:7D:2F:A1:3A:27:49:F2
X509v3 Authority Key Identifier:
keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:fa:b4:0b:f6:d9:f9:5c:a1:20:02:6b:e0:73:02:f2:5f:
a7:52:3c:f2:0e:58:d5:2b:c4:7c:65:6e:47:9a:e0:af:1a:5d:
a7:d7:39:1c:34:d0:59:97:98:f4:c5:c0:c7:1b:bb:db:a5:4e:
4d:e1:07:40:1f:f1:99:c4:56:15:da:56:63:85:d7:70:01:1c:
8c:4c:d0:bd:7d:6a:9f:5e:86:a7:e8:11:e3:69:7d:f5:bc:72:
c0:04:b0:86:22:89:1f:1f:f1:96:07:77:6b:23:00:16:f7:a0:
a5:52:ae:3e:da:ca:79:ad:32:86:11:57:4d:f9:0b:10:e0:66:
c3:e6:79:00:62:4e:cd:56:cc:90:35:04:41:5a:51:42:f1:5c:
ca:58:b1:e8:61:17:df:c0:3c:d2:50:4f:45:fc:6d:2d:70:4e:
11:fa:75:1d:9b:85:17:54:c0:88:51:93:28:19:49:9e:46:3a:
c2:0a:72:c4:32:d7:48:3d:7e:c7:9a:b1:e3:c7:d3:42:93:c9:
c8:35:a6:fa:6c:4c:25:be:a1:01:c4:eb:85:d8:bd:32:3d:5a:
00:a4:a8:4b:fa:c9:46:da:18:03:7f:92:de:93:4a:6d:1d:94:
ec:c4:12:75:73:a2:20:1b:a5:3a:73:2f:97:6c:ef:94:00:df:
a2:35:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:05 2025 by rpki-client