Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier: UmbjVMlbPhSkGpuyU1Jc4Zixr6o+ef7hThhkNO0ibG8=
Subject key identifier: 87:54:20:77:D4:15:0F:29:63:14:8E:4A:21:6E:31:6D:F8:CD:54:D7
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number: AC
Signing time: Sat 29 Mar 2025 05:33:22 +0000
Manifest this update: Sat 29 Mar 2025 05:33:22 +0000
Manifest next update: Sat 05 Apr 2025 05:33:22 +0000
Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: BpCYdgk7OjWAtEJORuRMFSUtpHPDtG0stOGH2mGZrOs=)
2: 01935FDC35F911EFBF29CF70C4F9AE02.roa (hash: IfjKXBSjqSuFJaVoDqP6oYZ3wH/2zlYfGaCM0ODem/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7
Validity
Not Before: Mar 29 05:33:22 2025 GMT
Not After : Apr 5 05:33:22 2025 GMT
Subject: CN=67e78622-a380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:b1:8e:02:71:a9:67:db:02:4c:e7:4b:19:
97:13:41:94:79:8d:bf:e4:d7:35:36:b5:54:bc:dd:
5c:17:65:62:63:fd:70:2d:8b:b4:0f:a1:52:93:c0:
03:e4:76:a4:f1:80:04:62:47:7e:3b:35:be:69:26:
ef:ea:69:8c:73:d2:d3:fc:94:46:b9:e6:a8:3e:7e:
6f:d5:d2:63:2d:eb:d2:3d:90:33:ec:88:2d:a2:d8:
dd:7e:81:19:e6:c8:1c:eb:89:d9:bd:24:77:76:a6:
3c:bc:89:6f:a4:d0:02:48:26:71:98:b5:60:27:fd:
77:22:5b:09:45:40:40:a1:fc:1d:f2:b5:d1:92:c2:
65:ec:50:0a:e8:e6:61:78:33:0b:a6:fc:a8:a3:56:
b9:d3:40:dd:dd:56:bd:5a:23:da:a6:30:34:e3:3e:
06:1b:8e:31:64:9f:23:5f:ad:ce:5c:06:41:4c:c6:
e0:56:df:9c:3c:06:95:a3:c6:a9:88:54:05:ba:4f:
97:b8:73:88:85:f9:a3:73:b0:d4:72:aa:9b:63:56:
d1:ce:a1:f6:02:c8:9e:08:f9:b6:fe:6a:8c:d4:ad:
c6:7e:6d:0a:a4:7f:2c:c9:b1:46:53:1f:45:8f:9d:
c8:47:99:f9:6f:1d:b1:ab:05:76:db:91:bb:52:bd:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:20:77:D4:15:0F:29:63:14:8E:4A:21:6E:31:6D:F8:CD:54:D7
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:0e:d9:46:a8:c4:25:47:d1:00:c9:e6:1d:34:83:64:6d:
c7:88:bf:22:4a:ef:47:22:58:3e:82:09:0a:96:a8:06:55:e2:
6e:06:21:c3:82:3e:9f:91:cc:05:57:5b:54:b2:3e:4c:64:a3:
06:b2:50:98:69:56:ca:cd:2c:1e:48:5d:e4:ba:7f:45:6e:6d:
7a:81:92:91:c2:5e:d5:ee:f0:52:d5:25:69:dc:c5:03:5d:bb:
1e:2c:f6:3a:de:6c:0f:80:68:91:4f:b5:61:da:43:1b:69:60:
73:d3:4d:c8:f9:44:b6:63:f3:04:90:29:71:a5:fc:73:4e:f3:
32:cf:f0:62:0a:48:92:27:99:09:0a:0f:f0:15:a0:41:4e:a2:
12:ed:fa:1f:37:dd:81:37:a4:7a:e3:0b:be:d7:59:d1:64:34:
6c:c9:79:ae:10:81:35:a1:30:af:f7:d0:9b:50:f8:96:be:eb:
13:f7:02:86:26:a2:91:83:e2:03:11:67:85:ab:c8:99:88:9f:
78:dd:b7:b6:3e:96:ad:01:20:fd:af:d1:50:ac:60:2e:82:6b:
3b:cc:bc:b4:ee:43:6a:95:a5:be:42:21:0c:0a:67:80:37:9e:
a5:69:40:ff:1a:0f:f4:63:cb:6d:a2:b1:5d:07:79:53:27:e6:
d4:62:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:39:36 2025 by rpki-client