Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json)
Hash identifier: ahDYY9yrssPW3sMNgbTjEvFTOwrCjOGMQ+89l4n8iZ8=
Subject key identifier: 5A:FD:C9:01:27:D4:45:3D:5C:50:DE:66:2E:0D:8F:38:DB:AE:5C:18
Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
Manifest number: A4
Signing time: Sat 29 Mar 2025 05:33:14 +0000
Manifest this update: Sat 29 Mar 2025 05:33:13 +0000
Manifest next update: Sat 05 Apr 2025 05:33:13 +0000
Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: l90bUyR5h5T3ih5us3cikU7Md5BYfyTlpeeVB5SbLm0=)
2: 55291FA016B511EFA244974BC4F9AE02.roa (hash: 4G05qDBih2f7QXu4EvcFu/Hi3cjZoiJAPBz1/2wvj2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E7C7
Validity
Not Before: Mar 29 05:33:13 2025 GMT
Not After : Apr 5 05:33:13 2025 GMT
Subject: CN=67e78619-d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:57:55:7e:76:f2:cf:f0:16:dc:16:7a:66:
82:06:d3:1e:b3:9b:1c:45:1f:2b:14:5b:45:83:c1:
f7:14:e3:f5:3d:37:f7:f3:40:6a:0a:d8:bc:2a:2f:
ad:04:52:53:85:58:0c:f5:4e:82:1d:16:25:17:e5:
dd:8a:bd:eb:88:bf:94:e3:4b:df:57:fc:65:01:7b:
a4:73:9d:0d:fe:e2:09:fb:5a:f1:2f:ae:23:bc:ec:
38:46:47:fe:a5:f4:49:17:01:6c:2d:85:51:1a:bf:
c3:03:21:b9:fd:a1:5e:d9:74:49:65:36:6c:4b:38:
76:e9:57:4e:dd:e1:74:c9:f6:32:d8:00:77:6d:1e:
dc:6f:f6:9f:ed:36:92:75:05:00:8f:cd:ff:3b:62:
48:4a:99:ec:a3:57:9f:30:b7:f7:2d:cb:cc:f3:7d:
93:b3:87:ba:80:30:16:2b:9a:21:b8:cc:87:af:fc:
ac:3f:3f:e5:7c:91:15:47:c4:8a:e6:e7:c2:6f:fc:
6c:eb:2f:4e:ec:9f:2e:27:e0:af:e3:88:34:6d:38:
5c:2d:40:53:d8:b8:37:63:5a:a7:30:3a:3b:b7:50:
16:4d:d3:79:cc:e9:ee:30:a6:32:11:10:1f:ea:61:
95:39:f2:24:f0:39:fc:f8:75:d6:e1:05:ce:68:8e:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:C9:01:27:D4:45:3D:5C:50:DE:66:2E:0D:8F:38:DB:AE:5C:18
X509v3 Authority Key Identifier:
keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b6:bc:f9:52:73:0a:07:2e:31:b7:83:d9:23:e1:63:09:39:
66:79:2a:1e:26:2d:10:f4:2e:a4:b1:95:03:ee:be:a7:c7:12:
08:9b:76:35:70:22:b0:24:b7:d6:3d:ed:0a:02:04:cd:c5:e2:
d8:f5:76:af:62:86:5a:00:16:96:25:78:17:1d:4a:f8:59:3a:
01:c6:57:f4:66:59:45:16:ea:bc:d4:21:40:d2:3b:af:c2:ea:
39:a8:c6:a7:66:21:d4:1c:ee:45:59:51:9e:5e:ae:af:c2:6b:
c1:db:b3:ef:e5:11:f5:5c:e6:b8:78:40:e5:8e:66:db:9b:79:
45:c9:f9:10:95:2e:bc:9c:3d:f5:72:22:d3:cb:b9:78:c9:19:
80:b4:02:ef:0c:a1:28:f7:83:c5:02:e3:bc:70:3f:3a:1e:14:
f0:9c:c3:a7:97:6c:58:9c:89:ae:7d:a8:29:9b:be:67:18:8e:
cc:95:a3:bd:44:23:90:cd:45:6f:bc:5e:ad:b5:8b:5a:9e:eb:
bc:60:46:65:f9:de:b3:e5:90:fe:b7:09:00:7a:11:9a:74:a2:
84:06:db:95:5d:be:bb:d9:56:ef:f2:ea:59:93:ed:da:4d:3a:
07:23:3d:22:39:b5:21:32:2c:29:ff:8b:2d:34:05:b7:42:35:
b9:e1:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:34:09 2025 by rpki-client